Privacy Policy

Information You Provide Directly

We collect information you provide when you:

• Request a consultation or evaluation: Name, email address, phone number, and information about your dog (name, breed, age, behavioral concerns)
• Schedule services: Preferred dates, times, and service preferences
• Create an account or sign contracts: Address, emergency contact information, veterinarian information
• Make a payment: Billing information (processed securely by Stripe; we do not store full card numbers)
• Communicate with us: Content of emails, messages, or feedback you send

Information About Your Dog

To provide effective training, we collect details about your dog including:

• Name, breed, age, and weight
• Vaccination and health records
• Behavioral history, including any bite history or aggression
• Training goals and previous training experience
• Veterinarian name and contact information

Automatically Collected Information

When you visit our website, we may automatically collect:

• Device type, browser type, and operating system
• IP address and general geographic location
• Pages visited, time spent on pages, and navigation patterns
• Referring website or source that led you to us

We use the information we collect to:

• Provide services: Schedule sessions, deliver training, and manage your account
• Communicate with you: Send confirmations, reminders, training updates, and respond to inquiries
• Process payments: Complete transactions and send receipts
• Improve our services: Understand how clients use our website and identify areas for improvement
• Ensure safety: Document behavioral information to protect trainers, clients, and animals
• Comply with legal obligations: Maintain records as required by law

We do not use your information for targeted advertising, and we do not sell your personal data to third parties for marketing purposes.

We share information only in the following circumstances:

Service Providers

We work with trusted third-party services that help us operate our business:

• Stripe: Payment processing (Stripe Privacy Policy)
• Resend: Email delivery for confirmations and updates
• Hostinger: Private server hosting with encrypted connections

These providers are contractually obligated to protect your information and use it only to perform services on our behalf.

Legal Requirements

We may disclose information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, safety, or the safety of others.

Business Transfers

If Newberry Dog Training Co. LLC is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you of any such change.

With Your Consent

We may share information in other ways if you give us explicit consent.

All payments are processed securely through Stripe, a PCI-DSS Level 1 certified payment processor—the highest level of certification in the payments industry.

• We never store your full credit card number on our servers
• Payment information is encrypted in transit and at rest
• Stripe handles all sensitive payment data according to industry security standards

For more information, see Stripe's Privacy Policy.

We use cookies and similar technologies to:

• Essential functions: Keep you logged in, remember your preferences, and ensure the website works properly
• Security: Detect and prevent fraudulent activity

We do not use cookies for behavioral advertising or sell cookie data to third parties.

Your Cookie Choices

You can disable cookies through your browser settings. Note that disabling cookies may affect website functionality, such as staying logged in to your account.

We retain information for as long as necessary to:

• Provide services and maintain your account
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements
• Maintain business records for tax and accounting purposes

When data is no longer needed, we securely delete or anonymize it. Specific retention periods:

• Account information: Retained while your account is active, plus 3 years after closure
• Payment records: 7 years (IRS requirement)
• Contracts: 7 years after completion
• Training notes: 3 years after last service

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information (subject to legal retention requirements)
• Opt-out: Unsubscribe from marketing communications at any time

To exercise any of these rights, contact us using the information below. We aim to respond to all requests within 30 days.

Our services are not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.

We take the security of your information seriously and have implemented measures across every layer of our systems:

Encryption & Transport

• HTTPS (TLS 1.2+) enforced on every connection — unencrypted requests are automatically upgraded
• Database connections use encrypted authentication

Authentication & Sessions

• Initial client login uses secure magic links — one-time-use, cryptographically generated tokens delivered to your verified email that expire within minutes. There is no password to intercept, phish, or brute-force
• After your first login, you can set up your own password in your profile for faster access. Passwords require uppercase, lowercase, numbers, and special characters, are checked against known compromised passwords, and are hashed with Argon2id — the same standard used by security-critical applications
• Accounts automatically lock after repeated failed login attempts to prevent unauthorized access
• Session tokens are cryptographically hashed and stored in secure, HTTP-only cookies that cannot be accessed by scripts
• Rate limiting on all login and authentication endpoints to prevent brute-force attempts

Application Security

• Cross-site request forgery (CSRF) protection on all data-modifying requests
• Input validation on every form submission to prevent injection attacks
• Parameterized database queries to prevent SQL injection
• Access controls limiting who can view and modify personal information

Infrastructure

• Private server hosted on dedicated infrastructure with firewall rules restricting all unnecessary network access
• Intrusion detection systems that automatically block suspicious activity
• Application process sandboxing to limit the impact of any potential breach
• Automated security updates applied daily
• Daily encrypted backups with automated integrity checks

While no system is 100% secure, we continuously review and strengthen our security posture. If you believe your account has been compromised, contact us immediately.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via email if you have an active account
• Post a notice on our website for significant changes

Continued use of our services after updates constitutes acceptance of the revised policy.

For privacy-related questions, requests, or concerns:

• Email: info@newberrydogtraining.com
• Address: Newberry Dog Training Co. LLC, 406 NW 233rd Ter, Newberry, FL 32669
• Online: Use our contact form or evaluation request

We aim to respond to all privacy inquiries within 5 business days.