PRIVACY POLICY

TIMU CORP d/b/a Paws Impérial

New York & New Jersey | Last Updated: March 2026 | pawsimperial.com

This Privacy Policy describes how TIMU CORP d/b/a Paws Impérial ("Paws Impérial," "we," "us," "our") collects, uses, stores, and protects personal information when you use our website, purchase products, or receive dog walking and transportation services. By using our services or website, you agree to the practices described in this Policy.

We collect the following categories of personal information:

We do not collect Social Security numbers, government ID numbers, or sensitive financial account credentials. Full payment card data is processed exclusively by our PCI-DSS compliant payment processor and is never stored on our systems.

Transactional Data (E-commerce): order history, purchased items, shipping addresses, payment transaction IDs, shipping status, and return history. Collected when you purchase products through our online store.

We use personal information only for the following purposes:

Service Delivery

• Scheduling, confirming, and providing dog walking, transportation, and related services
• Verifying vaccination records, licensing, and behavioral history prior to and during services
• Coordinating emergency veterinary care and contacting emergency contacts when required
• Processing product orders, payments, shipping, and returns

Safety & Compliance

• Monitoring GPS location data during active service periods for route verification and pet safety
• Documenting incidents, injuries, or behavioral events for insurance and legal compliance
• Complying with NYC DOHMH bite reporting requirements, NJ municipal health codes, and applicable animal welfare laws
• Maintaining records required by applicable employment, tax, and regulatory law

Business Operations

• Communicating service confirmations, schedule updates, and operational notices
• Processing refunds, resolving disputes, and responding to customer service inquiries
• Fraud prevention, chargeback defense, and payment dispute resolution
• Improving our services, website functionality, and client experience

Marketing (With Consent Only)

• Sending promotional SMS messages where you have opted in (consent is not a condition of purchase)
• Sending email newsletters and promotional offers where you have subscribed
• Using photos and videos of your pet for marketing materials where you have provided written consent

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. Ever.

GPS location data is collected from handler devices during active service periods only. This data is used exclusively for:

• Verifying service completion and pet location during walks and transportation
• Route planning and operational efficiency
• Emergency response and pet safety
• Service quality assurance and dispute resolution

GPS data is retained for 90 days after service completion, then permanently deleted, unless required for an active dispute, insurance claim, legal hold, or regulatory obligation. GPS tracking is an internal operational tool and is not sold or used for marketing purposes.

We do not sell, rent, or share GPS location data with any third-party marketing companies, advertisers, or social media platforms. GPS data is strictly for operational purposes (service verification) and pet safety.

GPS tracking is provided as a convenience feature to enhance service transparency. While we strive to maintain consistent tracking, we do not guarantee uninterrupted GPS coverage or data accuracy. Availability of tracking features is subject to device compatibility, network connectivity, and other technical factors beyond our control.

We do not sell or rent personal information. We may share information only in the following limited circumstances:

Service Providers

• Payment processors (Stripe, PayPal, or equivalent) — PCI-DSS compliant; we share only the minimum data necessary to complete your transaction (name, billing address, payment amount). We do not store full card numbers on our servers. Your payment data is handled directly by the processor under their own privacy policy and security standards.
• Shipping Carriers (USPS, UPS, FedEx) — we share your name and delivery address solely to facilitate product order delivery. Carriers do not receive payment information or pet health data.
• Veterinary professionals — pet health information when emergency care is required
• Insurance providers — incident information in connection with claims
• IT and software service providers — bound by confidentiality obligations

Legal & Regulatory

• NYC DOHMH and NJ municipal health authorities — mandatory bite reporting as required by law
• Law enforcement — when required by valid legal process (subpoena, court order, or applicable law)
• Regulatory authorities — as required for business licensing and compliance

Business Transfers

• In connection with a merger, acquisition, or sale of business assets — subject to confidentiality obligations and continued compliance with this Policy

All third-party service providers are required to maintain the confidentiality of your information and are prohibited from using it for any purpose other than providing services to us.

Provider's liability for data security incidents is limited to direct damages caused by Provider's gross negligence or willful misconduct. Provider is not liable for incidents resulting from Client's own actions or third-party breaches beyond Provider's reasonable control.

We implement reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, disclosure, alteration, or destruction, in accordance with:

• NY SHIELD Act (N.Y. Gen. Bus. Law §899-bb) — reasonable data security program required for any business handling NY residents' private information
• NJ Data Privacy Act (P.L.2021, c.506) — data protection obligations for NJ residents' personal data

Our security measures include: encrypted transmission of sensitive data; access controls limiting data access to authorized personnel only; regular review of data handling practices; and use of PCI-DSS compliant payment processors.

We retain personal information for the following periods:

• Client records (contact, pet, service history): 3–5 years following last service or transaction, or as required by applicable law
• Payment records: 7 years as required by IRS and NJ/NY tax regulations
• Incident reports and bite records: minimum 5 years or as required by applicable health authority regulations
• GPS and location data: 90 days after service completion, then permanently deleted unless required for active dispute, insurance claim, legal hold, or regulatory obligation
• Marketing consent records: retained for the duration of the marketing relationship plus 3 years

When retention periods expire, data is securely deleted or anonymized. You may request earlier deletion subject to our legal retention obligations (see Section 8).

Our website uses cookies and similar tracking technologies to ensure proper website functionality (such as shopping cart management and account login). We may use third-party analytics tools to help us understand how visitors use our site and improve our services. You can manage your cookie preferences through your browser settings.

• Essential cookies — necessary for website functionality (booking system, shopping cart, account login). Cannot be disabled.

By continuing to use our website and mobile app, you acknowledge our use of cookies, including those used to support our shopping cart, order processing functions, and service booking. You may manage cookie preferences through your browser settings or our Cookie Policy at pawsimperial.com/cookies.

• Analytics cookies — help us understand how visitors use our site (e.g., Google Analytics). You may opt out via browser settings or the Google Analytics Opt-out Browser Add-on.
• Marketing cookies — used only where you have consented, to deliver relevant advertising.

You can control cookie settings through your browser. Disabling certain cookies may affect website functionality. We do not currently respond to Do Not Track (DNT) browser signals, but we honor opt-out requests submitted directly to us.

Depending on your state of residence, you may have the following rights regarding your personal information:

To exercise any of these rights, contact us at info@pawsimperial.com with subject line "Privacy Request." We will respond to all data requests within 45 days as required by applicable law. We may require identity verification before processing your request. We will not discriminate against you for exercising your privacy rights.

Account & Data Deletion: To request the deletion of your account and all personal data, send an email to info@pawsimperial.com with the subject line "Account Deletion Request." We will process your request within 45 days. Please note that we may retain certain data as required by applicable law.

NY and NJ residents: Your rights are protected under the NY SHIELD Act, NJ Data Privacy Act, and applicable consumer protection laws. California residents: Additional rights apply under the CCPA/CPRA.

We may, from time to time, provide you with information about our services, products, or promotions if you have opted-in to receive such communications. You have the right to opt-out of marketing communications at any time by following the "unsubscribe" instructions provided in any such email or by contacting us directly at info@pawsimperial.com.

SMS Marketing

By providing your mobile number and checking "I agree to receive marketing text messages," you consent to receive promotional SMS messages from Paws Impérial. Consent is not a condition of purchase. Message and data rates may apply.

• To opt out: reply STOP to any message
• For help: reply HELP or contact info@pawsimperial.com
• Message frequency varies

Email Marketing

By subscribing to our email list, you consent to receive promotional emails. You may unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly.

Phone Calls

By providing your phone number and checking "I agree to receive marketing calls," you consent to receive promotional telephone calls, which may be automated or prerecorded. You may revoke this consent at any time by contacting us.

Compliance: Our marketing practices comply with the Telephone Consumer Protection Act (TCPA), CAN-SPAM Act, and applicable NY and NJ consumer protection laws. We never sell your contact information to third-party marketers.

TIMU CORP d/b/a Paws Impérial does not sell, rent, or trade your personal information — including pet health records, GPS data, payment information, or contact details — to third parties for monetary compensation or any other consideration. This applies to all clients in New York, New Jersey, and California (CCPA). To opt out of any future data sharing, contact info@pawsimperial.com with subject line "Data Opt-Out Request."

Our services are intended for individuals 18 years of age or older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately at info@pawsimperial.com and we will delete such information promptly.

If booking on behalf of a minor or for a pet owned by a minor, the parent or legal guardian who creates the account and accepts our Terms assumes full legal responsibility for all information provided.

In the event of a data breach that affects your personal information, we will:

• Notify affected individuals in the most expedient time possible, as required by NY law (NY Gen. Bus. Law §899-aa)
• Notify NJ residents within 30 days of discovery, as required by NJ Rev. Stat. §56:8-163
• Notify applicable state attorneys general and regulators as required by law
• Provide information about what data was affected, steps we have taken, and recommended actions for you

Our website may contain links to third-party websites or integrate with third-party services (payment processors, booking platforms, social media). This Privacy Policy does not apply to third-party sites or services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you use.

We may update this Privacy Policy at any time. Material changes will be communicated via email at least 30 days before becoming effective. Non-material changes (clarifications, contact updates) are effective immediately upon posting at pawsimperial.com/privacy.

Continued use of our services after the effective date of any change constitutes your acceptance of the updated Policy. If you do not agree with material changes, you must discontinue use of our services.

Our product sales and service terms are governed by our Terms of Service, available at pawsimperial.com/terms or upon request at info@pawsimperial.com.

For all privacy-related inquiries, requests, or complaints: