Privacy policy
Last updated: May 25, 2026
This policy explains how BorderPaw collects, uses, shares, and protects the personal data of its visitors and customers, and what rights you have. BorderPaw is a service operated by SanZero SAS (France).
Data controller
The data controller is SanZero SAS. For any privacy question or to exercise your rights, contact privacy@borderpaw.com.
What data we collect
- Contact data — the email address you provide to receive your verdict, dossier, and reminders.
- Questionnaire data— information you enter to compute your requirements and generate the dossier: species, breed and name of the pet, microchip number, owner's name and address, origin and destination, travel dates, departure and arrival airports, vaccination and titer dates, and similar trip details.
- Payment data — collected and processed directly by Stripe. BorderPaw never receives or stores your card number or security code; we only receive a payment confirmation and limited transaction metadata.
- Technical and usage data — basic technical information needed to operate and secure the site, and, only with your consent, analytics data via the Meta Pixel.
Purposes
- Compute the applicable requirements and generate your compliance dossier.
- Deliver the dossier and verdict, and send related step reminders, by email.
- Provide customer support and respond to your requests.
- Operate, secure, and improve the service.
- Measure usage (analytics), only if you consented.
- Comply with our legal and accounting obligations.
Legal bases (GDPR)
- Performance of a contract — processing your questionnaire data and email to deliver the dossier you purchased.
- Consent — analytics/marketing trackers (Meta Pixel) and marketing emails, which you can withdraw at any time.
- Legitimate interest — securing and improving the service, and preventing abuse.
- Legal obligation — retaining accounting and tax records.
Processors and recipients
We share personal data only with the service providers needed to run BorderPaw:
- Stripe — payment processing.
- Supabase — database and file storage for your dossier.
- Resend — sending transactional emails (verdict, dossier, reminders).
- Vercel — website and application hosting.
- Meta — analytics via the Meta Pixel, only after your consent.
We do not sell your personal data.
International transfers
Some of these providers are based in, or process data in, the United States or other countries outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses or an applicable adequacy mechanism). You can request more information about these safeguards at privacy@borderpaw.com.
Retention
- Unconverted check answers (leads): 12 months.
- Generated compliance dossiers and related order data: 36 months after the travel date.
- Accounting and payment records: for the period required by applicable law.
- Consent records and analytics data: in line with your consent and the provider's settings.
Your rights
Subject to applicable law, you have the right to access, rectify, erase, restrict, and port your personal data, and to object to certain processing. Where processing is based on consent, you may withdraw it at any time without affecting prior processing. To exercise these rights, write to privacy@borderpaw.com.
If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection supervisory authority (in France, the CNIL).
Cookies and trackers
BorderPaw loads no analytics or advertising tracker before your explicit consent. For details on the cookies and trackers we use and how to change your choice, see our cookie policy.