Veterinary & Animal Care Data Access Policy

1. PURPOSE AND SCOPE

• Defines how veterinary and animal care professionals may access, handle, and store pet-related data ("Service Data") on Pet.ug.
• Complements the Privacy Policy and Terms of Service for all animal care professionals.
• Ensures compliance with Uganda’s Data Protection and Privacy Act (2019), Veterinary Surgeons Act (Cap 277), and welfare laws.

2. DEFINITIONS

• Pet Profile Owner: A user who creates and controls a pet’s profile.
• Veterinary Data: Health information such as vaccination, diagnosis, treatment notes, and prescriptions.
• Service Provider: A verified non-veterinary professional (e.g., groomer, walker, trainer, boarder, daycare operator, or transporter).
• Authorized Professional: A verified user granted permission by the Pet Owner.
• Access Consent: Explicit digital permission from the Pet Owner.
• Service Session: Any instance of viewing or updating pet data.

3. PROFESSIONAL ELIGIBILITY AND VERIFICATION

• All professionals must verify their identity before access.
• Veterinarians: Must hold a valid licence from the Uganda Veterinary Board (UVB) or recognized foreign authority.
• Other Service Providers: Must provide ID, business registration (if applicable), and professional credentials.
• Verification includes upload of documents, business details, and optional registration numbers.
• Unverified accounts cannot access pet or client data.

4. OWNER CONSENT AND ACCESS CONTROL

• Professionals receive no automatic access to Pet Profiles.
• Access requires explicit consent from the Pet Owner.
• Consent specifies professional type and scope of shared data.
• Owners may revoke consent anytime; access ends immediately.
• All Service Sessions are logged with date, time, and user ID.
• Emergency access applies only to veterinarians under DPPA §10(3) for animal health or public safety.

5. PERMITTED USE OF DATA

Professionals may use Pet Profile data solely for delivering their contracted service.

Veterinarians may:

• View, update, and record health data for treatment.
• Generate prescriptions or vaccination records.
• Communicate with owners about medical care.

Other Service Providers may:

• View non-medical details like name, age, breed, feeding, or temperament.
• Record service info (e.g., grooming, walking, or boarding sessions).

No professional may export, copy, or use pet data for marketing, resale, or unrelated business purposes.

6. DATA SECURITY AND CONFIDENTIALITY

• All Pet Profile data is treated as personal/sensitive data.
• Pet.ug uses AES-256 encryption for stored data and TLS for data in transit.
• Access tokens expire automatically after sessions.
• Professionals must use strong passwords and 2FA.
• Devices must be secure; logout after use is mandatory.
• Unauthorized staff access is prohibited. Violations may result in suspension.

7. DATA RETENTION AND DELETION

• Pet.ug retains data only as long as needed for service or law.
• Professionals may retain minimal records where legally required.
• Pet Owners may request deletion via the Privacy Dashboard; data is deleted or anonymized within 30 days.

8. AUDIT TRAIL AND TRANSPARENCY

• All data access and edits create secure audit logs.
• Pet Owners can review their pet’s access history anytime.
• Pet.ug may use anonymized data for research or welfare analytics.

9. PROFESSIONAL CONDUCT AND LIABILITY

• Professionals must ensure accuracy and quality of their services.
• Veterinarians remain accountable for diagnosis accuracy under the Veterinary Surgeons Act.
• Service Providers must comply with humane care laws and Uganda Animal Welfare Guidelines.
• Pet.ug is not responsible for negligence or misconduct by independent professionals.
• Disputes must be reported to support@pet.ug for mediation first.

10. DATA BREACH AND INCIDENT REPORTING

• Professionals must report suspected data breaches within 24h.
• Pet.ug investigates and, if required, informs users and the PDPO.
• Reportable incidents include:
  • Lost/stolen devices with pet data.
  • Unauthorized staff access.
  • Data leaks or screenshots.

11. RESEARCH AND PUBLIC HEALTH USE

Anonymized data may be used for research approved by the Pet.ug Ethics Committee. No individual or pet is ever identifiable.

12. ENFORCEMENT AND PENALTIES

• Temporary or permanent suspension for violations.
• Reporting to the Uganda Veterinary Board, SPCA, or PDPO if necessary.
• Civil or criminal liability under DPPA 2019 or animal welfare laws.

13. GOVERNING LAW AND DISPUTE RESOLUTION

• Governed by Ugandan law.
• Disputes under exclusive jurisdiction of Kampala courts.
• Amicable resolution through Pet.ug support encouraged first.

14. AMENDMENTS

• Pet.ug may amend this Policy to align with legal updates.
• Notice sent to registered professionals.
• Continued use indicates acceptance of updated terms.

15. ACKNOWLEDGMENT

By accessing or viewing any Pet Profile, all professionals agree to this Veterinary & Animal Care Data Access Policy, the Privacy Policy, and the Terms of Service.