Privacy Policy | BringMeHome

The controller of your personal data is Anna Loniewska, contact address: ul. Kameliowa 3/1, 71-804 Szczecin, Poland.

For data protection matters, contact us at: sklep@bringmehome.pl or neszwil@icloud.com.

Account data: the email address and user name you provide at registration, and a phone number if you add one.

Dog profiles: the dog's name, photo, breed, description, medical information and finder instructions -- as far as you choose to enter them.

Finder data: the content of messages sent through the form, optionally the finder's phone number and name, and a GPS location if the finder deliberately chooses to share it.

Technical data: an irreversibly hashed IP address and browser information, stored when a tag is scanned, for security and abuse prevention.

For purchases in the online shop we process the data necessary to fulfil the order: name, delivery address (street, postal code, city, country), e-mail address, optionally phone number, as well as order data (selected products, quantity, amount) and the payment status and identifiers.

The legal basis for processing this data is the performance of the sales contract (Art. 6(1)(b) GDPR) and compliance with legal obligations, including accounting (Art. 6(1)(c) GDPR). Providing this data is voluntary but necessary to place and fulfil an order.

Providing the service (running your account, dog profiles, scans and finder contact) -- basis: performance of a contract (Art. 6(1)(b) GDPR).

Ensuring security and preventing abuse (e.g. rate-limiting messages from one address) -- basis: the controller's legitimate interest (Art. 6(1)(f) GDPR).

Showing a dog's public profile to a finder -- based on your consent expressed through the per-field visibility settings (Art. 6(1)(a) GDPR).

We keep account and dog profile data for as long as you use the service. After you delete your account, the data is removed or anonymised.

Messages and scan events are kept only for the limited time needed to provide the service and ensure security, then removed or anonymised.

We do not sell your data. The only publicly visible information is the dog-profile fields you mark as public -- shown to the person who scans the tag.

We rely on trusted service providers (hosting, database, authentication, email) who process data solely on our instructions.

To fulfil orders we use trusted entities to which we entrust data processing under data processing agreements, or which act as independent controllers with respect to their own legal obligations:

Payment operator — Stripe (Stripe Payments Europe, Limited, based in Dublin, Ireland, together with its affiliate Stripe, Inc. based in the USA): data necessary to handle and settle payments, e.g. BLIK and payment cards. Stripe processes payment data as an independent controller in accordance with its own privacy policy available at https://stripe.com/privacy. Because Stripe also operates outside the European Economic Area, handling your payment may involve transferring your data to a third country (including the USA) — the rules and safeguards for such transfers are described in section 5b (Transfers of data outside the European Economic Area).

Courier company / shipping operator (including InPost) — address and contact data necessary to deliver the parcel.

E-mail provider (Resend) — e-mail address and the content of transactional messages (order confirmation, status notifications).

We transfer data only to the extent necessary to fulfil the order.

Using the payment operator Stripe may involve transferring payment-related data outside the European Economic Area (EEA), in particular to the United States, where Stripe's affiliate Stripe, Inc. operates.

Such transfers are carried out on the basis of the Standard Contractual Clauses (SCC) approved by the European Commission, which constitute the safeguard required by the GDPR for transfers of personal data to third countries. Detailed information about the safeguards applied by Stripe can be found in Stripe's privacy policy at https://stripe.com/privacy.

Apart from the case described above, we process your data within the European Economic Area.

You have the right to access, rectify, erase and restrict the processing of your data, as well as the right to data portability and to object.

You can delete your account at any time from the settings. You also have the right to lodge a complaint with a supervisory authority.

We always use strictly necessary cookies needed to maintain your sign-in session and the security of the service.

In addition, only with your consent, we use Google Analytics 4 and Google Ads cookies for traffic analysis and advertising. We do this through Google Consent Mode, so analytics and advertising storage (analytics_storage and ad_storage) stays denied until you accept in the cookie banner. You can decline and keep using the site as normal. You can change your choice at any time by clearing this site's data in your browser.

We apply technical and organisational measures to protect data, including encrypted connections (HTTPS), access control and IP-address hashing. Tag addresses are random and impossible to guess.

For matters concerning your personal data, write to us at: sklep@bringmehome.pl or neszwil@icloud.com.