This explains how GTM Development Johansen (org. no. 937103794), Tromsø, Norway ("we") handles personal data in Boardly, and sets out the data processing terms between us and the kennels using Boardly. Last updated 2026-08-09.
For a kennel's own account and billing, we are the controller. For personal data about a kennel's customers and pets, the kennel is the controller and we are the processor acting on the kennel's documented instructions (their use of the Service).
Kennel account data (name, email, business details, login credentials as salted hashes). On behalf of kennels: their customers' contact details, pets, vaccination records, bookings, and payment records. We do not store card numbers; card data is handled by Stripe.
To provide, secure, support and improve the Service, to process the kennel's instructions, to send transactional email (verification, password reset, booking confirmations), and to meet legal obligations.
We use infrastructure and service providers to run Boardly, including hosting, our database, Stripe (payments), and an email delivery provider (transactional email). Each processes data only to provide their service to us.
Each kennel's data is isolated at the database level so one kennel cannot access another's. Access is authenticated, passwords are stored only as bcrypt hashes, traffic is encrypted in transit, and we keep daily backups.
We keep data while an account is active and for a reasonable period afterwards to allow export and to meet legal and accounting duties, then delete or anonymise it.
Individuals may ask the relevant controller (the kennel for its customers; us for kennel accounts) to access, correct, delete, or export their data, or to object to processing. As processor we assist kennels in meeting these requests and will forward requests we receive to the responsible kennel.
Where data is processed outside your region, we rely on appropriate safeguards such as standard contractual clauses.
We will notify affected kennels without undue delay of a personal data breach affecting their data, with the information needed to meet their own obligations.
Contact us through the app for any privacy question or to exercise your rights.