Privacy Policy — mobile app, online registration and appointment booking

Last updated: 31 October 2026

1. Data controller

Elfvet Kft.

• Registered office: 3529 Miskolc, Szentgyörgy út 111. A ép. 3. em. 11. a., Hungary
• Company registration number: 05-09-038598
• Tax number: 32759655-2-05
• Contact: info@elfvet.hu, +36 70 401 0032, https://elfvet.hu

You can contact us at the same details with any data protection questions.

Data Protection Officer: Tamás Tózsa — tamas.tozsa@elfvet.hu, +36 20 294 1005

2. Scope of this policy

This policy applies to the following online services:

• using the app as an existing client: signing in with an activation code; viewing your pets' data, medical records, vaccinations, prescriptions and invoices; submitting documents and photos; home care (weight log, senior care diary and questionnaires, recurring treatments); reminders;
• registration in the clinic's mobile app or on its website (as a pet owner who is not yet a client), and the related pre-registration;
• pre-registering a new pet in the app as an existing client;
• online appointment booking.

3. What data we process

When you use the app and the website, we process the following data:

• Your details: first and last name, home address (postcode, town, street, house number, floor/door), phone number, e-mail address.
• For signing in: we store your password only in a non-reversible form (an encrypted hash); we verify your e-mail address with a one-time code.
• Your pet's details: name, species, breed, sex, neutering status, date of birth (may be estimated), vaccination booklet number, microchip number.
• Booking details: time, attending vet, reason for the visit, your notes.
• Data you enter in the app: body weight measured at home, senior care diary entries and questionnaire answers, recurring treatments and administered doses, uploaded photos (your pet's profile picture, photos of test results) and documents, notes.
• Device data: the app generates a random identifier for each phone to manage sign-ins (for example, so that a device can be signed out). We do not use advertising identifiers.
• Technical data: the type of device used to sign in, the IP address and the time of actions (for security and abuse prevention).

The app uses the camera only to scan the clinic's QR code and to take photos you initiate, and the photo library only to select an image. Reminders are created locally on the phone. The app does not use any advertising, analytics or tracking services.

4. Purposes and legal bases of processing

5. How long we keep data

• Unsubmitted registration: deleted automatically after 30 days of inactivity.
• Submitted but not yet finalised pre-registration: expires and is deleted if there is no activity and no future appointment for 90 days.
• Rejected pre-registration, or one you withdrew: deleted after 30 days.
• Finalised record: if we finalise your record at the first visit, your data becomes part of the veterinary records, and from then on we handle it under the rules on retaining veterinary records. The temporary pre-registration data is deleted after 30 days.
• Security log: entries are deleted after 1 year.

Deleting your account. You can delete your app account at any time in the app (Settings → Delete my account). Your sign-in, all sessions and registered devices are then terminated. The veterinary records — including the data you entered in the app, because the clinic may have used it for treatment — stay with the clinic, without being linked to an account, under the rules on retaining veterinary records. If you have an upcoming appointment, you must cancel it before deleting your account.

6. Who has access to the data?

The data is handled by the clinic's staff, solely for the purposes above. We do not sell the data and do not use it for marketing.

The clinic operates the practice software and the app itself. For this, it uses the following data processors, who act on our behalf and on our instructions:

Cloudflare and Resend are US companies. Data is transferred on the basis of the standard contractual clauses adopted by the European Commission (Article 46 GDPR) or, where the provider is certified, under the EU–US Data Privacy Framework (Article 45 GDPR).

National pet register (PetVetData). The register processes the data of microchipped animals independently, on the basis of the law; it is not our data processor. Only the clinic's vet can access it, not the app or the website.

7. Your rights

You can request access to your data, and ask for it to be corrected, deleted or its processing restricted; you can object to processing based on legitimate interest; and you can request a copy of your data in a machine-readable format. We will respond to your request within one month at the latest.

You can also correct your data yourself in the app or on the website, and withdraw your registration at any time. Your pre-registration data is then deleted (any appointment already booked must be cancelled first). As a client, you can delete your app account in the app (see section 5).

If you believe we are processing your data unlawfully, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9–11., www.naih.hu), or go to court; you may bring the case before the regional court of your place of residence.

8. Other information

• No automated decision-making (profiling) takes place: pre-registrations are always checked and finalised by a member of the clinic's staff.
• If the microchip number given at registration is registered to a different owner in the national register, we will not disclose that owner's data to you; in that case, we will ask you to prove ownership.
• The app and the website registration do not use cookies for signing in. The app does not track you across other companies' apps or websites. The website's own cookies are covered by the website's cookie policy.

This policy was last updated on 31 October 2026.