This website is operated by Lluís Gassó Villarejo ("we", "us"), an individual consumer based in Spain, as a non-commercial initiative to coordinate a collective consumer action regarding PawChamp's billing practices. Contact: lluisgasso@gmail.com.
When you submit the "Join the Collective Action" form, we collect: your name, email address, country of residence, amount charged, date of charge, payment method, refund status, and any optional details you choose to provide. We also record the date and time of your submission and your country as detected by Cloudflare (derived from your IP address — the IP address itself is not stored).
We process your data based on your explicit consent (GDPR Article 6(1)(a)), given when you voluntarily submit the form. The purpose is solely to coordinate the collective consumer action against PawChamp, including: communicating with affected consumers about the progress of the action, compiling aggregate statistics (e.g., number of affected consumers per country, total amounts charged) to support consumer protection complaints, and sharing anonymised or aggregate data with consumer protection authorities if a formal complaint is filed.
Your personal data is accessible only to Lluís Gassó Villarejo, the organiser of this initiative. It is stored in a Cloudflare D1 database and is not shared with, sold to, or made available to any third party. If a formal complaint is filed with a consumer protection authority, we may share relevant data with that authority — but only with your prior consent, and only to the extent necessary for the complaint.
This website uses Google Analytics 4 (via Google Tag Manager) to collect anonymised usage statistics such as page views, scroll depth, and form submission events. Analytics data does not include any personally identifiable information — we do not track your name, email, or any form field values in analytics. Analytics tracking is consent-gated: it only activates after you accept analytics cookies via the consent banner. You may decline analytics tracking without affecting your ability to use the website or submit the form.
This website uses the following cookies: a consent preference cookie (lluisgasso_consent) that records your cookie preferences and is stored for 365 days (this is a strictly necessary cookie and does not require consent); and Google Analytics cookies (_ga, _ga_*) that are set only if you consent to analytics tracking and are used to distinguish unique visitors and sessions.
Form submissions are stored in a Cloudflare D1 database, hosted within Cloudflare's global network. Cloudflare is compliant with GDPR, SOC 2, and ISO 27001. Access to the database is restricted by password to the initiative organiser only. All data is transmitted over HTTPS.
We will retain your data for the duration of the collective action. Once the action is resolved (whether through refunds, formal complaints, or discontinuation of the initiative), we will delete all personal data within 90 days. You may request deletion of your data at any time before that (see section 9).
Under the GDPR, you have the right to: access the personal data we hold about you, correct any inaccurate data, request deletion of your data ("right to be forgotten"), withdraw your consent at any time, request a copy of your data in a portable format, and lodge a complaint with a supervisory authority (in Spain: the Agencia Española de Protección de Datos, aepd.es).
To exercise any of these rights, email lluisgasso@gmail.com with the subject line "Data rights request." We will respond within 30 days.
Cloudflare may process data in data centres outside the EEA. Cloudflare maintains appropriate safeguards (Standard Contractual Clauses) for international data transfers in compliance with GDPR Chapter V. Google Analytics data may be processed in the United States; Google LLC participates in the EU-US Data Privacy Framework.
This website is not directed at children under 16. We do not knowingly collect data from minors. If you believe a minor has submitted data through our form, please contact us and we will delete it promptly.
We may update this privacy policy as the collective action evolves. Material changes will be communicated to registered participants by email. The "Last updated" date at the top of this page reflects the most recent revision.