1. Who We Are
Zoomi is a trading name of Accelevate UK Ltd, a company registered in England and Wales. We design and sell ZoomiTag — a smart pet tag with live GPS, health and wellness tracking, and a digital pet profile — along with the associated Zoomi app and subscription services.
For the purposes of data protection law, Accelevate UK Ltd is the data controller. If you have any questions about how we handle your data, you can reach us at hello@zoomitag.com.
2. What Data We Collect
We collect the following categories of personal data depending on how you interact with our products and services:
Account Information
When you create a Zoomi account, we collect your name, email address, and password. If you place an order, we also collect your delivery address and phone number.
Pet Profile Data
Information you provide about your pet, including name, breed, age, weight, photo, medical notes, and any emergency contact details you choose to add to your pet's profile.
Location Data
ZoomiTag is a live GPS tracker. While the tag is switched on it reports its position to our servers at regular intervals: every few minutes in normal use, and every few seconds when you switch on Boost or mark your pet as lost. Each report contains the tag's coordinates, speed, heading and altitude, its battery level, and the mobile-network and nearby WiFi signals the tag used to work out where it is. We use this data to show you where your pet is and has been, to run your safe zones and alerts, and to calculate the activity and rest insights in the app. Detailed location history is kept for 12 months and then deleted; we keep daily activity totals, without coordinates, for as long as your account is open.
Your Phone's Location
If you record a walk, run or hike in the app, the app records the route from your phone's GPS, including while your screen is off, and uploads it to your account so you can see the route, distance and pace. Recording happens only during a session you have started and stops when you end it. Outside a recording session the app uses your phone's location only to show you on the map and to give directions to your pet, and does not store it. Recorded routes are kept for 12 months, like other location history.
Home WiFi Data
If you set up the optional Home WiFi battery-saving feature, we store the network identifier (BSSID) and name (SSID) of the WiFi network(s) you choose as "home", together with a single location reading taken from your phone during setup to mark where home is. Your pet's tag uses the network to recognise when it is at home and pause GPS to save battery, and the app shows your pet at the home location while it is there. During setup the app reads the name of the network your phone is connected to; it does not scan for other networks. If you choose the "Auto Find" option, the tag itself scans for the strongest nearby network, and the scan result is kept in our technical logs for up to 30 days. You can remove a saved home network at any time, and we delete the saved network details and home location when you unlink the tag or close your account.
Payment Information
Payments are processed securely by Stripe. We do not store your full card details on our servers. Stripe may collect your card number, expiry date, and billing address in accordance with their own privacy policy.
Device and Usage Data
We collect information about how you use our website, including your IP address, browser type, operating system, pages visited, and referring URLs. This data helps us improve our website and services.
Marketing Emails
We send occasional marketing emails about ZoomiTag — tips, product news, and offers. Your email address becomes a marketing contact in one of three ways:
- You sign up: through the discount sign-up form in our website footer, the offer popup, or the ZoomiTag for Cats waitlist, or by asking us to add you (in which case a member of our team adds your address on your instruction).
- You buy from us and leave the box ticked: our checkout shows a pre-ticked box under the email field that reads "Email me ZoomiTag tips and offers. Untick if you'd rather not." If you leave it ticked and complete a paid order, we may email you about our own similar products and services, as the Privacy and Electronic Communications Regulations allow for existing customers (the "soft opt-in"). If you untick it, no marketing record is created. This applies only to orders placed on or after 24 October 2026; customers who bought before that date have not been added.
- You switch on "Product updates & tips" on the Notifications page of your Zoomi account. Switching it off unsubscribes your address from all our marketing emails; signing up by either of the routes above switches it on.
Whichever route you use, we record your email address, your name or first name where you gave it, which route you used and when, the exact wording you were shown at the time, and, where you signed up or changed your preferences on our website or in your account, the IP address and browser of the device you used. We also keep a log of every later change to your marketing preferences — unsubscribing, re-subscribing, switching the account toggle on or off, and any address we have to stop emailing because it bounced or was reported as spam — with the time, the route used, and (for an unsubscribe from a marketing email) which email it came from. This log is our evidence that we had your permission to email you, and that we stopped when you asked us to.
Affiliate / Referral Program Data
If you join our affiliate (referral) program, we collect the information needed to run it and to pay you. This includes your unique referral code, the terms version you accepted and when, and the bank details you supply for payouts (account holder name, sort code, and account number — bank numbers are held in encrypted form). We also keep a record of the commissions you earn, the referrals attributed to you, and the payouts we make to you.
For people who arrive at our website through an affiliate link, we record a referral click. To measure clicks and guard against fraudulent or duplicated activity without storing raw IP addresses, we log a one-way, keyed hash (HMAC) of the visitor's IP address rather than the IP itself, alongside the browser type and the page landed on. When a referred purchase is made, we also retain the buyer's order email against that referral so the right affiliate is credited and the commission can be reconciled if the order is later refunded.
3. How We Use Your Data
We use your personal data for the following purposes:
- Providing our services: To operate your Zoomi account, manage your pet profiles, and deliver the features associated with your ZoomiTag product.
- Processing orders: To fulfil purchases, process payments through Stripe, arrange delivery, and handle returns or refunds.
- Sending notifications: To alert you when your pet's tag is scanned, when your subscription is due for renewal, or when there are important changes to your account.
- Improving our products: To analyse usage patterns and feedback so we can enhance our website, tags, and services.
- Communication: To respond to your enquiries and provide customer support.
- Marketing: To send you emails about ZoomiTag products, services, tips, and offers where you have signed up to receive them, or where you are an existing customer who did not untick the marketing box at checkout. If link-click tracking is switched on (see section 5), we also use the record of which links were clicked to see which emails and links our readers find useful and to choose what we send next. We do not track whether you open our emails.
- Running our affiliate programme: To register you as an affiliate, attribute referred orders to the correct partner, calculate and review the commissions you earn, pay you, and keep the financial records the law requires us to keep. We also use the pseudonymised referral-click data described above to measure referral activity and to detect and prevent fraudulent or self-dealing referrals.
4. Legal Basis for Processing
Under the UK GDPR, we process your personal data on the following legal bases:
- Consent: Where you have given us clear consent to process your data for a specific purpose, such as signing up for our marketing emails, switching on "Product updates & tips" in your account, or enabling location-based features.
- Contract performance: Where processing is necessary to fulfil a contract with you, such as delivering a product you have purchased or providing subscription services.
- Legitimate interests: Where processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring the security of our platform, provided these interests do not override your rights. This includes logging a keyed, one-way hash of visitors' IP addresses on affiliate referral clicks to measure referral activity and protect commission integrity against fraud.
- Legal obligation: Where processing is required to comply with a legal duty, in particular keeping the financial records associated with orders, affiliate commissions, and affiliate payouts for the periods set by tax and accounting law.
If you join our affiliate programme, we also process your data on the basis of the affiliate agreement between us (a contract): without your code, accepted terms, and bank details we could not attribute referrals to you or pay you.
For marketing emails specifically: where you sign up, we rely on your consent. Where you are an existing customer who left the marketing box ticked at checkout, we rely on our legitimate interest in telling our customers about our own similar products and services, within the "soft opt-in" rule in regulation 22(3) of the Privacy and Electronic Communications (EC Directive) Regulations 2003. We also rely on our legitimate interests to keep a do-not-contact record of addresses that have unsubscribed, to stop emailing addresses that bounce or are reported as spam, and to measure link clicks when that is switched on. In every case you can object at any time: every marketing email carries an unsubscribe link, and section 8 lists the other ways to stop them.
5. Data Sharing
We do not sell, rent, or trade your personal data to third parties. We share data only in the following limited circumstances:
- Stripe: Payment data is shared with Stripe to process transactions securely. Stripe acts as an independent data controller for payment information.
- Postmark (email delivery): All of our email — order confirmations, account and tag-scan notifications, and marketing — is sent through Postmark, an email delivery service owned and operated by AC PM LLC, an ActiveCampaign company based in the United States, which processes it on our behalf. To deliver a message Postmark processes the recipient's email address, name where we have it, and the content of the email. For marketing email it additionally keeps a suppression list of addresses that have bounced, been reported as spam, or unsubscribed through its link (we add our own unsubscribes to that list), and reports back to us whether each message was delivered, any bounces, spam complaints, and subscription changes, and, when link-click tracking is switched on, link clicks. When tracking is switched on, links in our marketing emails may be routed through a click-tracking address operated by Postmark before reaching their destination; for each click Postmark may record the link, the time, your IP address, your browser and device type, and an approximate location derived from the IP address, and may pass these to us. Of that click data we store the link, the time, and the device type (for example desktop or mobile); the IP address and location are held by Postmark. Transfers of personal data to Postmark in the United States are covered by the UK Extension to the EU-U.S. Data Privacy Framework, under which Postmark is certified, and by our data processing agreement with Postmark, which incorporates the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum issued by the Information Commissioner.
- Soracom (mobile connectivity): Soracom provides the SIM card and mobile data connection built into every ZoomiTag, so your tag's reports travel over Soracom's network (roaming on UK mobile networks) to reach our servers. As with any mobile connection, Soracom knows which SIM connected, when, and through which network.
- Service providers: We work with a small number of other service providers (such as hosting services) who process data on our behalf under strict contractual terms and data protection obligations.
- Affiliate partners: If you are referred to us by an affiliate, that affiliate is shown only aggregate and order-level information needed to administer their commission (for example that a referred sale occurred and its value). Affiliates are not given your name, address, or other contact details. Affiliates act independently and are responsible for their own promotion under our affiliate terms.
- Legal requirements: We may disclose personal data if required to do so by law, regulation, or court order.
6. Pet Profile Visibility
When someone scans your pet's ZoomiTag, they will see limited information from your pet's profile. This is designed to help reunite lost pets with their owners. The information visible to finders typically includes your pet's name, photo, and a way to contact you.
You can control what information is displayed on your pet's public profile through your account settings. Sensitive details such as your home address are never shown to finders. We encourage you to review your privacy settings regularly to ensure you are comfortable with the information shared.
7. Data Retention
We keep personal data only for as long as we need it for the purpose we collected it. Specifically:
- Account data: Retained while your account is open. When you close your account, we delete your account details, pet profiles, photos, location and activity history, safe zones, and notification settings within 30 days. The records listed below are kept for their own periods.
- Location and activity history: Your pet's location history, alerts and safe-zone events, and any walks you recorded from your phone, are kept for 12 months and then deleted. Daily activity totals without coordinates are kept while your account is open.
- Technical logs: The raw messages exchanged between your tag and our servers, which we use to diagnose faults, are kept for 30 days.
- Security logs: Records of sign-ins, failed sign-in attempts, and password-reset requests, including the IP address used, are kept for 12 months.
- Messages from tag finders: A message or location sent to you by someone who scanned your pet's tag is kept for 12 months, and is deleted when you close your account.
- Emails and notifications: A record of the emails and app notifications we have sent you (recipient, subject, time, and delivery status) is kept for 12 months.
- Order records: Retained for 6 years after the date of purchase to comply with tax and accounting obligations, then deleted. If you close your account before then, the order record is kept but is no longer linked to an account. Details entered at checkout for an order that was never completed are deleted after 90 days.
- Affiliate financial records: Where you take part in our affiliate programme, the financial records of the commissions you earned and the payouts we made to you (including the encrypted bank snapshot taken at the time of each payout) are retained for up to 6 years after the end of the relevant financial year, to meet our tax and accounting obligations. This 6-year retention overrides the 30-day erasure window for that financial data: if you ask us to delete your account, we will still keep this minimum financial record, but we will anonymise the directly identifying affiliate fields (for example your name and bank details) once they are no longer needed.
- Referral attribution email: Where a purchase was made through an affiliate link, the buyer's order email is held against that referral for commission integrity (for example so a refunded order can be correctly reversed). It is retained for the same period as the associated affiliate financial record.
- Referral click logs: The pseudonymised referral-click logs (the keyed IP hash, browser type, and landing page) are kept for a maximum of 90 days and then automatically purged; only an aggregate per-affiliate click count is retained after that.
- Marketing consent records: The record of how and when you gave or withdrew permission for marketing emails (including the wording you were shown, the IP address and browser used, and each later change) is kept for as long as we send you marketing emails and for 2 years after you unsubscribe or we last email you, as evidence that we had your permission and acted on your opt-out.
- Do-not-contact records: When you unsubscribe, or an address bounces or is reported as spam, we keep the email address and its status (unsubscribed or suppressed), together with the bounce or complaint reason and time, for as long as we send marketing emails, so that the address can never be re-added to our marketing list by mistake. A fresh sign-up by you re-subscribes it; a bounce or complaint is only lifted by Postmark or by us.
- Email delivery events: The delivery, bounce, complaint, subscription-change and (when switched on) link-click events that Postmark reports to us are deleted after 90 days.
- If you delete your account: We remove your name, the link to your account, and the IP address from your marketing contact record, cancel any marketing emails waiting to be sent to you, and replace your email address in the delivery-event records with an irreversible hash. The do-not-contact record itself (your email address marked as unsubscribed) and the consent record are kept for the periods above.
- Backups: Deleted data may persist in encrypted backups for up to 30 days before being permanently removed.
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can ask us to correct any inaccurate or incomplete data.
- Right to erasure: You can request that we delete your personal data, subject to legal obligations.
- Right to data portability: You can request your data in a structured, machine-readable format.
- Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
- Right to object: You can object to processing based on legitimate interests, and you can stop marketing emails at any time: use the unsubscribe link in any marketing email (on our bulk sends this is Postmark's one-click link, next to a "Manage preferences" link to our own page), switch off "Product updates & tips" on the Notifications page of your Zoomi account, or email us at hello@zoomitag.com. Unsubscribing takes effect immediately. It does not affect the emails we need to send to run your account and orders, such as order confirmations, dispatch notices, password resets, and tag-scan alerts.
To exercise any of these rights, please visit our Data Request page or email us at hello@zoomitag.com. We will respond to your request within 30 days.
9. Cookies
Our website uses cookies to ensure it functions correctly and to help us understand how visitors use the site. For full details about the cookies we use and how to manage your preferences, please see our Cookie Policy.
10. Children's Privacy
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at hello@zoomitag.com and we will take steps to delete that information.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will notify you by updating the date at the top of this page and, where appropriate, by sending you an email notification. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal data, please contact us:
Email: hello@zoomitag.com
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. You can contact the ICO at ico.org.uk.
To submit a data access, deletion, or portability request, please visit our Data Request page.