Who we are
Dead Man’s Hand K9 (“DMH K9”, “we”) is a working dog training business based in Westchester County, New York. [BLANK: legal entity name and mailing address]. Questions about this policy go to [email protected] or (914) 230-0367.
This policy covers the public site at dmhk9.com and the members area at dmhk9.com/members. The members area runs on a shared training platform (see “The platform” below).
What we collect
From the contact form
Your name, email, phone (optional), your dog’s name, age and breed, your experience, what you are after, and whatever you write in the message boxes. The form is delivered to us as an email through a form service (Web3Forms). We do not keep a separate copy beyond that email and any notes we make from it.
In the members area
- Your account: name, email, phone, membership status, start and status dates, and the trainer you are assigned to. Accounts are created by us; there is no self-signup.
- Your dogs: name, breed, date of birth, status, profile picture, photos and short video clips you or your trainer add, training notes shared with you, milestones, and documents attached to the dog.
- Trainer records: notes, eligibility and assessments written by your trainer. Some are shared with you; some are internal to DMH K9 and are never shown to any member.
- Training activity: event signups, attendance, private session bookings, waitlist spots, and (once payments are enabled) the record of what you paid, how, and when. Card numbers never touch our systems; a payment processor handles them.
- Documents: files we share with you, and the record of which documents you have been given.
- Feedback: anything you send from the Feedback link, plus the page you were on, your role, your device type and the app version, and a screenshot if you attach one.
- Consent choices: whether you have turned email, text or push notices on or off, when, and the wording you agreed to. These records are kept permanently so we can show what you chose.
- Login and activity records: when login links are requested and used, the device and network address they came from, and a log of actions taken by staff on your records (who, what, when).
Collected automatically
- The site and the members area are served by Cloudflare, which keeps standard server logs (network address, pages requested, browser type) for security and reliability.
- The public site sets no cookies and runs no analytics or advertising trackers.
- The Instagram and YouTube links on the site pass through a counter that records the link, the date and the page you came from. Nothing about you is kept.
- The members area uses two cookies: a signed login cookie (so you stay signed in) and a form-protection cookie. If you leave “Remember me” ticked, the login cookie lasts 90 days; otherwise it ends when the browser closes.
How we use it
- To run your training: scheduling, attendance, notes, milestones, documents and bookings.
- To reach you: login links, welcome and reminder emails, event changes, and texts or push notices only if you turn them on.
- To handle payments, credits and packages once those features are switched on.
- To answer feedback and fix problems in the app.
- To keep records we are required to keep, and to protect the business and our members.
We do not sell your information. We do not use it for advertising.
Email, text and push notices
Email comes from [email protected] and is sent through Resend. Login links and welcome emails are part of having an account; other notices follow your settings.
Text messages are sent only after you turn texts on in your settings or tick the text box on a form. Message frequency varies. Message and data rates may apply. Reply STOP to any text to stop, or HELP for help. Replying STOP turns texts off and is recorded as a consent change. Texts are sent through Twilio once registration for business texting is complete. [BLANK: confirm 10DLC registration status before publishing]
Push notices are requested only after you turn push on. They can be turned off in your settings or in your phone’s settings at any time.
Who sees your information
- DMH K9 staff: the owner, and the trainer or trainers assigned to you or authorized to see all clients. Hosts who run events at their own locations see handler and dog names for their events only when we turn that on, and never your phone or email.
- Other members: on an event list, other active members can see handler and dog names only. Your phone and email are never shown to other members. No member can see another member’s dogs, notes, documents or bookings.
- Service providers that process data for us: Cloudflare (hosting, database, file storage), Resend (email), Web3Forms (contact form delivery), Twilio (texts, once enabled), the payment processor we choose (card payments, once enabled), Google and Microsoft (calendar free/busy checks for scheduling), and Google Sheets if we turn on the optional nightly export of our own records. Each gets only what it needs to do its job.
- Legal: when the law requires it, or to protect the safety of people or dogs.
The platform
The members area runs on a shared platform that serves several training organizations from one deployment. [BLANK: platform operator’s legal name; planned home workingdogbook.com] operates it. Each organization’s records are kept separate. The platform operator normally sees only counts for our organization (members, storage used, emails sent). If we turn on support access for a limited time so the operator can help with a problem, that access is read-only and every page viewed is logged. We can see that log.
How long we keep it
Account and training records are kept while you are a member and for [BLANK: number] years after your membership ends, so that records of your dog’s training stay available if you come back. Consent records and the staff action log are kept permanently. Contact form emails are kept as ordinary business correspondence. Backups are taken nightly and age out on a rolling basis. [BLANK: confirm backup retention period]
Your choices
- Update your name and phone any time under Profile in the members area.
- Turn email, text and push notices on or off in your settings. Login emails cannot be turned off while you have an account; they are how you sign in.
- Ask us for a copy of your records, or ask us to close your account and delete what we are not required to keep, by emailing [email protected]. We will answer within [BLANK: number] days.
- Log out of all devices from your settings if you think someone else has your login.
The members area is for adults. Members must be [BLANK: 18] or older. We do not knowingly keep records about children.
Security
Everything travels over HTTPS. There are no passwords to steal: you sign in with a one-time link or code sent to your email, and links expire in 15 minutes. Sessions end when your membership is paused or ended. Files are stored privately and served only to people allowed to see them. No system is perfect; if we learn of a breach affecting your information we will tell you. [BLANK: breach notification commitment and timing, per New York law]
Changes
If we change this policy we will post the new version here with a new effective date, and tell members in the app when the change matters.
Contact
Brian Lorys · Dead Man’s Hand K9 · [email protected] · (914) 230-0367 · [BLANK: mailing address]