Privacy Policy
Last updated: September 6, 2026
This Privacy Policy describes how personal data is processed when users visit petnutritionpro.com, purchase a Diet Engine service license, or request support, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Italian law.
1. Data Controller
Boma Software di Boghetto Maurizio
Via Spartaco Lavagnini, 21
51031 Agliana (PT) – Italy
VAT No.: IT01390920476
Email: info@bomasoftware.it
2. Separate Processing Contexts
a) petnutritionpro.com website and online store. For data relating to users who browse the website, make a purchase, or request support, Boma Software acts as the Data Controller.
b) Diet Engine used on a customer's website. When a store, professional, or agency activates Diet Engine on its own WooCommerce website, the owner of that website determines the purposes and means of processing its visitors' data. In this context, the customer acts as the Data Controller, while Boma Software acts as the Data Processor pursuant to Article 28 of the GDPR, solely for the activities necessary to provide the service and in accordance with the customer's instructions.
3. Data Processed on petnutritionpro.com
3.1 Browsing and Security Data
The systems used to operate the website may collect IP address, browser and device type, operating system, date and time of the request, requested pages, referrer information, response codes, and other technical data required for Internet communications.
Purpose: website operation, security, abuse prevention, and troubleshooting.
Legal basis: the Data Controller's legitimate interest in maintaining the security and proper operation of its systems (Article 6(1)(f) GDPR).
3.2 Purchase and License Management
Pet Nutrition Pro and Diet Engine are sold exclusively to customers purchasing in the course of a business or professional activity. To process an order, the following data may be processed: first and last name of the contact person, business or company name, address, email address, country, VAT number or other business tax identifier, any information required for electronic invoicing, domain to be activated, purchased plan, and license status and duration.
Purpose: entering into and performing the contract, invoicing, license activation and management, administrative support, and compliance with tax and accounting obligations.
Legal basis: performance of a contract and pre-contractual measures (Article 6(1)(b) GDPR), and compliance with legal obligations (Article 6(1)(c) GDPR).
3.3 B2B Declaration and Acceptance of Terms
At checkout, the Customer must confirm, through a single mandatory declaration, that the purchase is being made in the course of a business or professional activity and that the Customer has read and accepted the Terms and Conditions. Evidence of this acceptance may be stored together with the order data for contractual, administrative, and legal protection purposes.
3.4 Customer Account
When an account is created on the online store, the data required for authentication, profile information, and order and license history are processed.
Legal basis: performance of a contract (Article 6(1)(b) GDPR).
3.5 Support and Contact Requests
When a user contacts us, we may process the data contained in the message and technical information useful for troubleshooting, such as the domain name, WordPress, WooCommerce and PHP versions, installed plugins, and error messages.
Users are advised not to send passwords, administrator credentials, or API keys through ordinary support requests unless they are expressly required and transmitted using an agreed secure method.
3.6 Cookies and Similar Technologies
The website uses cookies and similar technologies. Strictly necessary technical cookies do not require consent under Article 122 of Italian Legislative Decree No. 196/2003. Any analytics tools or third-party content involving tracking are activated, where required by applicable law, only after the user has provided consent. For more information, please see the Cookie Policy.
4. Recipients and Service Providers
- Keliweb S.r.l., as the provider of website hosting and related infrastructure services;
- Stripe, as the payment service provider used at checkout. To process payments, Stripe may process identification data, contact information, transaction data, payment method information, and technical data required for security, authentication, and fraud prevention. Full payment card details are not stored by Boma Software when they are handled directly by Stripe. Processing carried out by Stripe is also governed by its own Privacy Policy;
- tax advisors and electronic invoicing service providers, for administrative, accounting, and tax compliance purposes;
- Google Ireland Limited, where Google services are used, such as embedded YouTube content or analytics tools activated after consent;
- public authorities and other authorized parties, where required by law.
Personal data is not sold to third parties.
5. Transfers to Third Countries
The primary infrastructure used for the website and Diet Engine is located within the European Economic Area.
Some international service providers may process data outside the European Economic Area. In such cases, data is processed using the safeguards provided for under Chapter V of the GDPR, including adequacy decisions, the EU-U.S. Data Privacy Framework where applicable, or Standard Contractual Clauses.
6. Diet Engine: Data Received by the Service
Diet Engine may receive the following data from the plugin:
- installation domain and technical/API credentials required for authorization;
- WooCommerce product data configured for use with the system, such as product ID and name, food type, calories per 100 g, suitability by species and size, intolerances, sensitivities, priority, and sorting criteria;
- data entered in the pet questionnaire, including species, pet name, sex, age, weight, size group, body condition, activity level, any relevant physiological status, intolerances, sensitivities, and food preferences.
The questionnaire data primarily describes the animal. Because this data is processed within a browsing session and may be associated with technical information or a shopping cart, appropriate protection measures are applied to its processing.
The pet's photograph is not transmitted to Diet Engine. Image processing takes place locally in the browser for the purpose of creating the displayed or printed nutrition summary.
The print/save-as-PDF function uses the browser's built-in features and does not require the nutrition summary to be sent to an external PDF generation service.
Simply installing the plugin does not cause data to be transmitted to Diet Engine. The remote connection is activated only after authorization during the configuration process.
6.1 Obligations of the Licensed Customer
The customer who activates Diet Engine is responsible for providing an appropriate privacy notice to visitors of its own website, determining the applicable legal basis for processing, and complying with any other applicable privacy obligations.
The relationship between the customer and Boma Software, for processing performed by Diet Engine on behalf of the customer, must be governed by a Data Processing Agreement pursuant to Article 28 of the GDPR. To request the agreement, please contact info@bomasoftware.it.
7. Data Retention
| Category | Retention Criteria |
|---|---|
| Tax data and accounting records | For the period required by civil and tax law, normally 10 years |
| Accounts, orders, licenses, and contractual acceptance records | For the duration of the contractual relationship and subsequently for the period required to manage administrative obligations, disputes, and legal claims |
| Support requests | For the time required to handle the request and subsequently for the period reasonably necessary to document the support provided |
| Technical and security logs | For the period strictly necessary for security, abuse prevention, troubleshooting, and technical management, unless longer retention is required for investigations or legal obligations |
| Data processed by Diet Engine | For the time required for processing and technical operation of the service; any data contained in technical logs is deleted or made no longer directly identifiable when it is no longer required |
| Cookies | According to the retention periods specified in the Cookie Policy and preference management panel |
8. Data Subject Rights
Where applicable, data subjects may exercise the rights provided for under Articles 15–22 of the GDPR, including the rights of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent.
Requests may be submitted to info@bomasoftware.it.
Data subjects may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority.
9. Requirement to Provide Data
Data required for ordering, invoicing, license activation, and license management is necessary for the performance of the contract. Failure to provide such data may prevent the purchase or activation of the service.
10. Automated Processing by Diet Engine
Diet Engine automatically processes pet-related parameters and configured product information in order to estimate indicative calorie requirements and identify compatible products.
This processing is performed for technical and commercial purposes and does not produce legal effects or similarly significant effects on individuals within the meaning of Article 22 of the GDPR.
Pet Nutrition Pro does not constitute veterinary diagnosis, prescription, or professional veterinary consultation.
11. Changes to This Privacy Policy
This Privacy Policy may be updated as a result of regulatory, technical, or organizational changes. The version currently in effect is the version published on this page, together with the indicated date of the most recent update.