Privacy Policy

Last updated: March 2026

1. Data Controller

The entity responsible for processing your personal data under the General Data Protection Regulation (GDPR) is:

Rocket Media Group Ltd, trading as "Pupvote"
Registered office: 36 Dame St, Dublin, Ireland
Operational office: 21B Moskova Street, Sofia, Bulgaria
Website: www.pupvote.com
Contact: [email protected]

2. What Personal Data We Collect

2.1 Account information
When you register for Pupvote, we collect your name, email address, and optionally a profile picture. If you register via a social login provider (Google, Facebook, or TikTok), we receive your name, email address, and profile picture from that provider, as authorised by you during the login process.

2.2 Contest and transaction data
When you enter a contest or purchase votes, we collect information about your entries, your pet (name, photos, breed), your country/region, and transaction details. Payment card data is processed by our payment provider (CardPay/Unlimit) and is not stored on our servers.

2.3 Technical and usage data
When you visit our website, we automatically collect certain technical data including your IP address, browser type and version, device type, screen resolution, operating system, referring URL, pages visited, and duration of visit. This data is collected through cookies, server logs, and the third-party services described in Section 6 below.

2.4 Communication data
If you contact us via our support email or contact form, we store your name, email address, and the content of your enquiry for the purpose of processing and responding to your request.

2.5 Data we do not collect
We do not collect special categories of personal data as defined under Article 9 of the GDPR, such as data concerning health, ethnicity, political opinions, religious beliefs, or sexual orientation. We do not collect social security numbers, bank account numbers, or government identification numbers.

3. Why We Process Your Data

We process your personal data for the following purposes:

To provide our services: operating contests, processing votes and entries, verifying winners, and delivering prizes. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

To process payments: facilitating vote purchases through our payment provider. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

To communicate with you: responding to support requests, sending contest notifications, and winner announcements. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

To send marketing communications: newsletters and promotional emails via our email marketing platform (Mautic). Legal basis: consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time.

To send push notifications: contest updates and reminders via OneSignal. Legal basis: consent (Art. 6(1)(a) GDPR). You can disable these in your browser settings.

To display advertising: serving third-party advertisements on our website through Publift, which manages advertising demand from multiple partners on our behalf, to fund our free-to-use service. Legal basis: consent (Art. 6(1)(a) GDPR).

To measure advertising effectiveness: tracking conversions from our advertising campaigns using the Meta (Facebook) Pixel and TikTok Pixel. This helps us understand which of our advertisements led you to visit Pupvote. Legal basis: consent (Art. 6(1)(a) GDPR).

To improve our website: analysing user behaviour and website performance to identify usability issues and improve the user experience. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

To ensure security: preventing fraud, bot activity, and abuse through reCAPTCHA and Cloudflare, and monitoring errors through Sentry. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

To comply with legal obligations: retaining records as required by applicable tax, commercial, and regulatory laws. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

4. Who We Share Data With

Pupvote does not sell your personal data. We do not disclose your personal information (such as your name, email address, or contact details) to third parties for their own direct marketing purposes.

We share data with third-party service providers solely to operate our platform and deliver our services. These providers act as data processors under our instruction, or as independent data controllers for their own services (such as advertising), as described below:

Some of these providers are located outside the European Economic Area (EEA), including in the United States. Where data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework, as applicable.

5. Cookies and Local Storage

Cookies are small text files placed on your device by your web browser. We use cookies and similar technologies for the following purposes:

Essential cookies: These are necessary for the website to function, including login session cookies, Cloudflare security cookies (__cflb, __cf_bm), and reCAPTCHA cookies. These cannot be disabled.

Analytics and functionality cookies: These help us understand how visitors use our website. These are set on the basis of legitimate interest.

Advertising cookies: These are set by Publift's advertising partners (including Google), Meta (Facebook Pixel), and TikTok Pixel to serve relevant advertisements and measure campaign effectiveness. These are set on the basis of your consent.

We also use browser local storage to store your login session, country preference, free vote cooldown timers, and referral tracking codes. This data is stored locally on your device and is not transmitted to third parties.

You can control and delete cookies through your browser settings. Disabling certain cookies may affect the functionality of the website. For more information about cookies, visit www.allaboutcookies.org.

6. Social Login

Pupvote offers the option to register and log in using your Google, Facebook, or TikTok account. When you use social login, we receive your name, email address, and profile picture from the respective provider. We do not receive your password or any other account data.

Social login is optional. You can also register with an email address. The data received through social login is used solely for account creation and authentication on Pupvote.

7. Contest Winners

Winners of Pupvote contests will receive an email notification with a link to a secure prize claim form. Winners are required to verify their age and their ownership of or permission to use the pet entered in the contest.

Winner data (name, country, prize amount) is retained for the duration required by applicable tax and commercial retention obligations, and for the defence or enforcement of legal claims. Winner names and pet photos may be published on the website and in marketing materials in accordance with our Terms and Conditions.

8. Data Retention

We retain your account data for as long as your account remains active. If you request deletion of your account, we will erase your personal data within 30 days, except where retention is required by law (e.g., transaction records for tax purposes).

Contest entry data is retained for the duration of the contest and for a reasonable period thereafter for dispute resolution and legal compliance.

Technical data (server logs) is retained for a maximum of 12 months.

9. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

Right of access: You can request a copy of the personal data we hold about you.

Right to rectification: You can request correction of inaccurate or incomplete data.

Right to erasure: You can request deletion of your personal data, subject to legal retention obligations.

Right to restriction: You can request that we limit how we process your data in certain circumstances.

Right to data portability: You can request your data in a structured, machine-readable format.

Right to object: You can object to processing based on legitimate interest, including for direct marketing purposes.

Right to withdraw consent: Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request. We may ask you to verify your identity before processing your request.

10. Information for California Residents

Under California Civil Code § 1798.83, California residents may request information about whether a business has disclosed personal information to third parties for their direct marketing purposes. Pupvote does not disclose personal information to third parties for their direct marketing purposes.

Under the California Consumer Privacy Act (CCPA), California residents have additional rights including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale of personal information. Pupvote does not sell personal information.

To make a request under California law, please contact us at [email protected].

11. Children

Pupvote is not intended for children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to remove that information from our systems.

12. Data Security

We use SSL/TLS encryption to protect data transmitted between your browser and our servers. Our servers are located within the European Economic Area. We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

13. Data Breaches

In the event of a personal data breach, we will notify affected individuals and the relevant supervisory authority as required under the GDPR, without undue delay and where feasible within 72 hours of becoming aware of the breach.

14. Do Not Track

Some browsers offer a "Do Not Track" setting. There is currently no industry standard for how websites should respond to this signal. We do not currently alter our data collection practices in response to Do Not Track signals.

15. Complaints

If you believe we have violated your data protection rights, we encourage you to contact us first so we can address your concern. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

17. Contact

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Rocket Media Group Ltd, trading as Pupvote
Email: [email protected]

California Consumer Privacy Act ("CCPA") — Preference Portal

Under CCPA, Californian residents have the right to declare their preferences on the sale of data for advertising and marketing purposes. If you wish to change your preferences, click below to launch our preference portal:

We use a third-party to provide monetisation technologies for our site. You can review their privacy and cookie policy at https://publift.com/privacy-policy/.