Privacy Policy
This policy explains what Rapavie collects when you use the site or place an order, why we hold it, and what you can require us to do with it. It is written for the GDPR, which applies to visitors in the EU and the UK.
Ultimo aggiornamento: 21 luglio 2026. Questa pagina è pubblicata in inglese.
Who is responsible
Rapavie is the controller of the personal data described here.
You can reach us on WhatsApp at +1 929 201 5015 or by email at hello@rapavie.com.
What we collect, and why
Order details. Name, email, delivery and billing address, and what you bought. We need these to fulfil the contract you entered into when you ordered, and to meet the tax and record-keeping rules that apply to us.
Payment details. We never see or store your card. Stripe processes payments and holds the card data under its own controllership; we receive only the last four digits, the card brand and whether the payment succeeded.
Health information about your animal. Age, weight, diagnoses, medications and laboratory results, where you give them to us. This concerns an animal rather than a person, so it is not special-category data under the GDPR, but we treat it as confidential and share it only with the veterinarian reviewing the case.
Analytics. If you accept analytics cookies, Google Analytics records which pages you visit and roughly where you are, with your IP address truncated. This runs on your consent alone and nothing breaks if you decline.
Messages. What you write to us on WhatsApp or by email, kept so we can answer you and keep a record of clinical advice given.
Who else sees it
Stripe (payments, billing and the customer portal) — an independent controller for payment data, certified under the EU–US Data Privacy Framework.
Google (analytics), only if you accept analytics cookies.
Vercel (website hosting) and Hetzner (content management, servers in Germany).
The veterinarians who review your animal's case, and the pharmacy that dispenses against their prescription.
Carriers, who receive the delivery address they need to bring the parcel.
We do not sell personal data, and we do not share it for advertising.
Where it goes
Our servers are in the EU. Some processors — Stripe and Google among them — may process data outside the EEA. Where that happens it rests on the European Commission's standard contractual clauses or an adequacy decision.
How long we keep it
Order and invoice records: as long as tax and commercial law requires, which in most EU states is between six and ten years.
Clinical records for your animal: for the duration of the therapy and afterwards for as long as the supervising veterinarian's professional rules require.
Analytics: 14 months.
Messages: three years from the last exchange, unless they form part of a clinical record.
Your rights
You can ask for a copy of what we hold, have it corrected, have it deleted where no legal duty requires us to keep it, restrict or object to how we use it, and receive it in a portable format. Where we rely on your consent — analytics, marketing email — you can withdraw it at any time, and that does not affect what was done before you withdrew it.
Write to us and we will answer within one month. If you are not satisfied you can complain to the data protection authority where you live.
Changes
If this policy changes materially we will say so on this page and, where the change affects an active membership, by email.