Privacy Policy

1. Browsing without an account

Search the directory, read the articles, use the map. None of it requires an account and we do not build a profile of you.

We do not ask why you are looking for a service dog. That would mean collecting health information from people who have not chosen to share it, in order to run a directory that does not need it. So we do not ask, and there is no field for it anywhere on the site.

2. What we collect, and only when you give it

If you create an account

• Your name and email address.
• A password, stored as a one-way hash. We cannot read it, and neither can anyone who obtained a copy of our database.
• A phone number, if you choose to add one.

If you claim a listing

• Which contact detail we sent a one-time code to. The code itself is stored hashed and expires in twenty minutes.
• Any evidence you upload, such as a business licence or accreditation letter.
• Your IP address and the time, because a claim of ownership needs a record of who asked and when.

Evidence files are stored privately and are not reachable from any public web address. Only an administrator reviewing your claim can open them.

If you manage a listing

• The business information you enter, which is published on purpose: that is what a directory listing is.
• Logos and photographs you upload, also published.

If you buy a plan

• A Stripe customer reference, so we know which listing a subscription belongs to.
• We never receive your card number. Payment happens on Stripe's own pages. No card details pass through this site or appear in our logs.

3. Cookies

Two, both strictly necessary: one keeps you signed in, one protects forms against cross-site request forgery. That is the entire list. No advertising cookies, no analytics cookies, no third-party cookies, and therefore no cookie banner asking you to consent to things you should not have to consent to.

4. Who we share with

Four service providers, each doing one job:

• Stripe processes payments and holds card details, which is why we do not.
• Resend delivers our email, so it handles the address a message is sent to.
• DigitalOcean hosts the server the site runs on.
• OpenStreetMap supplies the map tiles. Using the map page means your browser requests images from their servers, which they receive along with your IP address in the ordinary way. We chose it partly because it does not build advertising profiles.

We do not sell or rent personal information to anybody, and we do not share it with advertisers or data brokers. We will disclose information if the law genuinely requires it.

5. Contacting a provider

When you contact a trainer through a link or a form on this site, you are contacting that business. What you tell them is between you and them, under their privacy practices, not ours. Be aware that describing your disability to a business is your choice to make, and you do not have to make it to ask about pricing or availability.

6. How long we keep things

• Accounts until you ask us to delete them.
• Claim records and evidence for as long as the listing is claimed, because they are the proof of who controls it. Evidence files are deleted on request once a claim is settled.
• Administrative change records indefinitely. A directory that says it verifies things has to be able to show who changed what and when.
• Billing records for as long as tax law requires.

7. Your rights

Ask and we will tell you what we hold about you, correct it, or delete it. If you are in California, Colorado, Connecticut, Virginia or another state with its own privacy law, those rights include the right to know, delete, correct and opt out of sale. The opt out is already how the site works: there is nothing to opt out of, because we do not sell anything about you.

Email hello@findservicedogs.com. We will not make you fill in a form or wait thirty days if we can just do it.

8. Security

The site runs over HTTPS. Passwords are hashed, one-time codes are hashed, uploaded evidence sits outside the public web root, and administrative access is granted only from the server console. No system is perfect, and if something happens that affects you we will tell you rather than hope you do not notice.

9. Children

This site is not intended for children under 13 and we do not knowingly collect their information. Accounts are for the businesses being listed.

10. Changes

If this policy changes, the date at the top changes with it. If a change affects how we handle information you already gave us, we will email you rather than quietly update the page.