Pet Care Metrics Pet Care Metrics

Privacy policy

Last updated: 5 June 2026

Pet Care Metrics (“we”, “us”) provides software for pet care businesses to manage bookings, staff visits, customer records, and optional accounting integration with Xero. This policy explains how we handle personal data when you use our website and platform.

Who is responsible for your data

Each pet care business using Pet Care Metrics acts as the data controller for its customers, pets, and staff. Pulse Digital Enterprises Ltd operates the platform as a data processor on behalf of those businesses, except where we act as controller for our own marketing site and account administration.

If you are a customer of a walker or pet care company using our app, please contact that business first with privacy questions. They can reach us at privacy@petmetrics.co.uk.

Data we process

  • Account data — names, email addresses, and login credentials for administrators, staff, and customer portal users.
  • Customer & pet records — contact details, addresses, pet information, booking notes, and service history.
  • Visit data — timestamps, GPS route points recorded during active walks, photos and videos uploaded by staff, and visit notes.
  • Billing data — invoice amounts and statuses; when Xero is connected, contact and invoice data needed to create draft invoices in Xero.
  • Technical data — session identifiers, security logs, and error logs needed to run the service securely.

Xero integration

If a business connects Xero, we use OAuth 2.0 to access their Xero organisation with the scopes configured in the app (typically contacts and accounting transactions). We use this only to sync contacts and create draft invoices; we do not approve or send invoices automatically unless the business does so in Xero.

  • OAuth client credentials are stored in server environment configuration, not in the public web root.
  • OAuth access and refresh tokens are stored encrypted in the business’s tenant database using AES-256-GCM and a server secret key (APP_KEY).
  • Tokens are used only server-side; they are not exposed in browsers or customer-facing pages.
  • API activity is logged with endpoints and status codes; tokens are not written to logs.

Disconnecting Xero in Settings removes the active connection from our database. Businesses should also revoke the app in their Xero connected apps list if required.

How we use data

We process data to:

  • Provide scheduling, staff mobile workflows, customer reports, and admin dashboards.
  • Secure accounts and prevent fraud or abuse.
  • Support businesses with billing and optional Xero draft invoicing.
  • Maintain and improve reliability of the platform.

We do not sell personal data to third parties.

Storage and security

  • Production environments use HTTPS for authenticated areas and secure session cookies where configured.
  • Uploaded media and profile photos are stored outside direct public URLs; files are served through authenticated application routes where appropriate.
  • Database access is restricted to authorised operational staff with a business need.
  • Secrets (database passwords, APP_KEY, Xero client secret) must not be committed to source control.

Retention

Data is retained while a business remains an active customer of the platform and as needed for legal, accounting, or dispute purposes. Businesses may request export or deletion of tenant data subject to contractual terms and applicable law.

Sub-processors

We may use trusted providers for:

  • Web hosting and infrastructure
  • Email delivery (if enabled)
  • Xero (when connected by a business)
  • Map tile providers for walk route display (when configured)

Your rights

Depending on applicable law (including UK GDPR), you may have rights to access, correct, delete, or restrict processing of your personal data. Contact the pet care business you deal with, or email privacy@petmetrics.co.uk.

Security incidents

If we become aware of a security incident that may affect Xero customer data, tokens, or other sensitive information, we will investigate promptly and notify affected businesses and, where required, api@xero.com without undue delay.

Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact

Pet Care Metrics / Pulse Digital Enterprises Ltd
Email: privacy@petmetrics.co.uk