Privacy Notice

Last updated: 25 April 2026 · Effective date: 25 April 2026

Plain-English summary. We collect the minimum data needed to run the adoption platform and the Tails Kids closed beta. We do not sell data. We do not use behavioural advertising. Children's data follows the ICO Age-Appropriate Design Code. You can request a copy or deletion of your data at any time by emailing hello@tailsabode.uk.

1. Who we are

This site is operated by Cool Goods Ltd, a company registered in England and Wales (Companies House no. 16560525), trading as Tails Abode, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. We are the data controller for personal data collected through tailsabode.uk and app.tailsabode.uk.

2. What we collect

Adoption platform (app.tailsabode.uk)

Account data: name, email, password hash, role (adopter, shelter staff, admin).
Application data: information you submit during the 6-step adoption wizard (household details, references, home-check responses).
Operational logs: IP address, user agent, basic activity logs (kept up to 90 days for security).

Tails Kids waitlist (tailsabode.uk/#waitlist)

Parent or educator name and email.
Role (parent, teacher, rescue volunteer, etc.).
Optional: child age band (5-7, 8-9, 10-12) — never the child's name or identity.
Optional: UK postcode (used only to prioritise pilot regions).
Two consent confirmations: parental consent and privacy-notice acknowledgement.

Tails Kids extension (when released)

By default, gameplay data stays on the device.
Parents can opt in to sync the parental dashboard. No child accounts. No analytics on minors.

3. Lawful basis

Contract — to provide the adoption platform you signed up for.
Legitimate interests — to keep the service secure and prevent fraud.
Consent — for the Tails Kids beta waitlist and any marketing emails. You can withdraw consent at any time.
Legal obligation — where we must keep records (for example, charity verification audits).

4. Children's data

Tails Kids is designed against the ICO Age-Appropriate Design Code. We do not create child accounts on the waitlist or in the extension. Where a parent provides a child's age band, this is processed only to plan age-appropriate beta features. We do not profile minors and do not run behavioural advertising.

5. How we share data

We use a small number of processors, contractually bound under UK GDPR Article 28: hosting (Oracle Cloud, EU region), email (transactional only), and error monitoring. We do not sell personal data. We do not share data with advertisers. If law-enforcement requests data we comply only when legally required and notify you where we are permitted to.

6. Retention

Waitlist entries: kept until the beta closes or until you ask us to delete them, whichever is sooner.
Adoption applications: kept for the duration of the adoption process plus 24 months for animal welfare follow-up.
Inactive accounts: deleted after 24 months of inactivity, after one warning email.
Security logs: 90 days.

7. Your rights (UK GDPR)

You have the right to: access your data; correct it; delete it; restrict or object to processing; data portability; withdraw consent; and complain to the Information Commissioner's Office. Email hello@tailsabode.uk with the subject line "Data request" and we will respond within 30 days.

8. International transfers

Our primary infrastructure is hosted in the EU. Where a processor operates outside the UK/EEA, we rely on UK-approved transfer mechanisms (UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK addendum).

9. Security

HTTPS only (TLS 1.2+). Password hashes (bcrypt). Daily encrypted backups. Role-based access control. Internal services not exposed to the public internet. Suspected breach: security@tailsabode.uk.

10. Changes

If we make material changes we will email registered users and post a notice on tailsabode.uk for at least 30 days before they take effect.

Questions about this notice: hello@tailsabode.uk · ICO registration: pending · Companies House: 16560525.