One cookie counts visits. Privacy Policy.

Privacy Policy

Last updated 28 October 2026

Who we are and how to contact us

This policy is for findvetspecialists.com. The operator is VetSpecialists, a micro enterprise registered in India (Udyam). Address: Derabassi, SAS Nagar, Punjab 140507, India.

For privacy questions, rights requests, and complaints, email hello@findvetspecialists.com. Address it to Data Protection Officer, VetSpecialists.

Short summary

  • We run a veterinary directory for Singapore and Hong Kong. We forward some requests.
  • We collect what you type into a form, plus a small amount of visit data if you Accept cookies.
  • The hospital you choose receives the request we send them. We do not sell personal data. We do not use ads.
  • Data is stored in Japan and processed by our providers. We also access it from India. It leaves Singapore and Hong Kong. See Where it is stored.
  • We apply a deletion schedule. See How long we keep it.
  • You can ask to see, correct, or delete information, and you can change cookie choice. See Your rights.

What we collect

Visitors

If you click Accept, we set a random visitor ID and count page views. We record only the address of the page you open — for example, opening a country page or a specialty page counts that page. We do not record the area, tier, Emergency mode or specialty you choose in the search, and we do not store the words you type into the search box. We do not show a hospital's phone, email, or website on the public directory or on a pet owner's private request page. A confirmed 24-hour emergency number is shown only in Emergency mode and in one box on that hospital's page. We do not count taps on that number. That ID is not your name. If you Decline, or if your browser sends Global Privacy Control, we do not set that ID unless you later choose Accept in Cookie settings.

When a referral is sent through our form, we record a count for that hospital (hospital name, type and time). That count does not use the visitor ID.

Pet owners — Book Appointment

We collect your name, email, phone, pet name, pet type, and reason for visit, and one day with a time range in the hospital's time zone. The times you can choose come from the appointment hours and closed days that hospital sets. Those hours are not on the public page. If the hospital has not set hours, the choices are 08:00–20:00 every day. We keep a copy so we can follow up. The hospital chooses how it is emailed about a new request. Each request: we email the hospital when the request arrives, and again if it is still unopened. One summary a day: we email once at 9:00 am in the hospital's time, listing requests not yet opened. A request that arrives after 9:00 waits until the next morning. No emails: we keep the request on the hospital's private page and do not email the hospital about it. The hospital sees the pet type, the reason, and the range on the request page before it opens the request. If it declines before opening the request, we email you, we do not charge the hospital, and we do not show your contact details. When the hospital opens the request, we email you once with a date and a clock, counted only across that hospital's opening hours. We do not send you the hospital's phone, email, or website. If you have not heard from the hospital, email us at hello@findvetspecialists.com. If the hospital has neither opened nor declined the request after 4 of its opening hours, we email our team. If it is still unopened after 12 of its opening hours, we email our team a second time. If the hospital has no opening hours, that first email goes out after 24 hours instead. We send those team emails whichever choice the hospital made. Those emails do not go to you. There are at most two. After the hospital opens the request, it may send a short note (200 characters). We store that note, email it to you, and show it on your private status page. It is not on the public directory. Older requests may still have 2 or 3 times, or one preferred date.

Pet owners — community contact

We used to collect your name, email, phone, pet type, and reason, and an optional message, and email that clinic only. We no longer accept this form. We did not keep a copy of the message. A click count from that time may remain, and it does not include those details.

Referrals

A veterinarian at a hospital listed with us uses a code we email to that hospital. The code is stored only as a hash. On a referral we collect the pet owner's name, email, and phone, and a tick that the pet owner agreed to be contacted by the receiving hospital. We also collect the patient's name and species, the specialty needed, urgency, and clinical notes. Breed, age, and a records link are optional. Before the receiving hospital opens the request it does not see pet-owner or patient names or contact details. It does see the referring hospital's name. After it opens the request, it sees the pet owner's contact details and the referring hospital's phone and email from the listing on file, so the two hospitals can talk. Those details are not on the public directory and are not sent to the pet owner. If the receiving hospital declines before opening the request, nothing is charged. The receiving hospital is emailed about the referral under the same choice: each request, one daily summary, or no emails. No emails means the referral stays on that hospital's private page and we do not email them about it. An urgent referral is still emailed at once unless they chose no emails. If a referral stays unopened, we still email our team.

Hospitals

On Join we collect hospital name, country, address, phone, hospital email, contact name, whether you are open 24 hours, the specialties you choose from our list of 16, and equipment. Contact role, how you heard about us, and a note are optional. Equipment is optional. Emergency phone is required if you are open 24 hours. A person on our team phones that number and asks the hospital to confirm it is answered 24 hours. We keep the date of that call. We show the number in Emergency mode only after that call, and we stop showing it 12 months later unless we phone again. A call confirms the number on that day only. When you apply, we email the address you gave to confirm we received the application. We email that address again when we have decided.

If you enrol, we keep the agreed rates, currency, and enrolment dates, and a ledger of billable views (hospital, rate, date). We send service emails for enrolment, invoices, and reconfirmation. Request notices follow the choice on your private page: each request, one summary a day, or no emails. No emails means we keep the request on your private page and do not email you about it. Our team is still emailed if a request stays unopened. This choice is about new requests sent to you. If a hospital declines a referral you sent, we still email you at once.

Changing the listing from the private page needs an edit PIN. We email that PIN only to the hospital email on file. We store it only as a hash. The page does not show it again. A wrong PIN is not saved. If someone enters the wrong PIN too many times, we email the operator the hospital name and the time, not the PIN.

Listed doctors

A hospital may add a veterinarian's name, and may add degree, licence number, licence country, where they studied, year they started practising, display order, and a photo. We may independently check a licence before a verified badge is shown.

If you are a listed doctor and want your details corrected or removed, email hello@findvetspecialists.com. We will check with the hospital and act within 30 days.

Reviewers

We collect a star rating. A comment and your name are optional. We store a hashed IP address only to limit spam. We do not store the raw IP. Approved ratings (average and count) can appear on the listing. Once a hospital has 4 or more approved reviews, every approved comment and the optional name given with it can appear on the public listing.

Waitlist

We used to collect an email and a city so we could say when that city was listed. We no longer accept new sign-ups. An email and city already stored stay until their normal deletion date. We do not send a “city is listed” note.

Feedback

We collect the message you type. Please do not put names, emails, or phone numbers in it. If you do, it is stored with the message until the deletion date.

Past specialist-inquiry records may still exist from when that form was public. That form has been removed. We do not collect new ones.

Why we use it

  • Show the directory and keep listings accurate.
  • Pass Book Appointment and referral requests to the hospital you choose.
  • Review hospital applications and doctor updates.
  • Show approved ratings, and comments once a hospital has 4 or more approved reviews.
  • Count visits and requests per listing, as totals.
  • Bill enrolled hospitals for views they choose to open.
  • Limit spam and abuse.
  • Meet tax and invoice records rules for hospital billing.

We do not send marketing email to pet owners or hospitals. Referral codes, request notices, billing, reconfirmation, and follow-ups are service messages, not marketing.

Who receives it

  • The hospital you choose, when we forward a Book Appointment or referral.
  • Our service providers, listed under Where it is stored.
  • The operator in India, who can open admin to review applications, listings, and requests.

We do not sell personal data. We do not share it with ad networks.

Where it is stored and transfers

Personal data leaves Singapore and Hong Kong. It is processed in these places:

  • Supabase — database and file storage, Tokyo, Japan.
  • Vercel — website hosting. Requests may be processed in several regions.
  • Resend — sending email, United States.
  • Sentry (Functional Software, Inc.) — technical error reports, stored in the European Union (Germany). Sentry also receives one anonymous session signal per visit (no visitor ID, no page address), so we can see whether errors are rising. Our own visit counts stay in our database.
  • Google — an operator mailbox that receives alert-only notifications with no personal details.
  • Razorpay, India — hospital invoices only.

Data is also accessed by the operator from India. We rely on our providers' standard data-processing terms for comparable protection.

Cookies

We do not use ads. We do not use ad networks. Footer Cookie settings lets you change your choice. We honour the browser's Global Privacy Control signal as a Decline, unless you later choose Accept in Cookie settings.

  • vetspecialist-cookie-consent — your Accept or Decline choice, 1 year. The same choice is also kept in localStorage until you clear your browser.
  • vetspecialist-safety-notice-v1 — strictly necessary. The value is only acknowledged, with no visitor ID. It remembers that you read the “Before you continue” notice, for 1 year. SameSite=Lax, and Secure on the live site. The same note is also kept in localStorage until you clear your browser.
  • vetspecialist-country — your chosen country (Singapore or Hong Kong), so we show the right hospitals. 1 year. Not used for analytics.
  • vetspecialist-visitor-id — only after Accept, 1 year. Counts visits. No ads. Also kept in localStorage until you clear your browser, or until you Decline.
  • admin_session — operator sign-in, 7 days.
  • edit_unlock — after a correct edit PIN on the hospital private page. It is a session cookie: it ends when the browser closes, and the server refuses it after 1 hour even if the browser restores it. It names the listing and the PIN version. It does not contain the PIN. HttpOnly, SameSite=Lax, and Secure on the live site. The browser is not given a Max-Age or Expires. Lock editing removes it. A new PIN ends it on the next change. One browser's unlock does not unlock another.
  • We no longer set referring_vet_session. If a browser still has it, it expires on its own.

We no longer use the older vetspecialist-directory-disclaimer cookie. If your browser still has it, it expires on its own.

Browser storage:

  • vetspecialist-src — sessionStorage. A note of a src link parameter. Cleared when the tab closes.
  • reviewed-{slug} — localStorage. Remembers that you already submitted a review for that listing from this browser. Kept until you clear your browser.

How long we keep it

We apply this schedule:

  • Referrals, Book Appointment requests, leftover appointment requests, past specialist inquiries, and site feedback: deleted 12 months after submission.
  • Rejected hospital applications and rejected referring-vet applications: deleted 12 months after the decision.
  • Licence numbers and verification documents on approved applications: removed 12 months after approval.
  • Reviews that were never approved: deleted after 12 months.
  • Reviewer IP hashes: removed after 12 months.
  • Waitlist: deleted after 24 months.
  • Visit records: the random visitor or session ID is removed after 30 days, and the visit record is deleted after 24 months.
  • Manage links: expire after 90 days. They work while the listing is approved and stop when a newer link replaces them.
  • Edit PIN hashes: kept while the listing exists. The unlock cookie ends when the browser closes or after 1 hour, and sooner when editing is locked or the PIN is replaced.
  • Security logs: 30 days.
  • Error reports: a grouped technical record (time, kind, error code, route template, browser family). Deleted 30 days after last seen. We do not store names, emails, phone numbers, form contents, or the full address you typed. We also send a technical copy of each error report to Sentry (Functional Software, Inc.), our error-monitoring provider. It contains the page address without any query string, the browser and device type, the part of the page that failed when we can tell, and technical code details. It does not contain your name, email, phone number, form contents or IP address. Sentry also receives one anonymous session signal per visit (no visitor ID, no page address), so we can see whether errors are rising. Our own visit counts stay in our database. Sentry stores this data in the European Union (Germany); it may also be processed in the United States and other countries under Sentry's data processing terms.
  • Sign-in codes: 10 minutes, then cleared within a day.
  • Billing records (hospital, rate, date): kept for invoicing and tax, up to 7 years, and are not deleted by this schedule.

Community contact messages: we did not keep a copy. The form is closed.

Security

We restrict admin to signed-in operators. We hash IP addresses for spam limits and rate limits. Private links use hashed tokens. We try to keep the site safe. No system is perfect.

Data breaches

If a breach is likely to cause significant harm, we tell affected people and the regulator where the law requires. For Singapore, we tell the PDPC within 3 calendar days after we assess that a breach is notifiable.

Your rights

You can ask to see the information we hold about you, to correct it, or to delete it where the law allows. We may keep billing records where tax law requires. You can withdraw analytics consent in Cookie settings. Using your rights will not mean worse treatment.

Email hello@findvetspecialists.com. Address it to Data Protection Officer, VetSpecialists. We aim to reply within 30 days and never later than 40 days.

You can complain to the PDPC (Singapore), the PCPD (Hong Kong), or, if Indian law applies, the Data Protection Board of India.

If you are in India

Indian data protection law may apply to information we handle from India. We do not claim that it applies to everyone who uses this site from Singapore or Hong Kong. If you think it applies to you, email hello@findvetspecialists.com. Where that law applies, you can complain to the Data Protection Board of India.

Children

This site is not for anyone under 18. Do not send us information about a child under 18.

Changes

We may update this policy when how the site works changes. The date above is the current version.

Contact

Email hello@findvetspecialists.com. Address it to Data Protection Officer, VetSpecialists. Postal address: Derabassi, SAS Nagar, Punjab 140507, India. See also our Terms of Service.