Privacy Policy

Your data is safe with us. We process personal data exclusively in accordance with the provisions of the UK GDPR and the Data Protection Act 2018.

About BarkPlan

BarkPlan provides personalised dog training plans based on scientifically proven positive reinforcement methods. All services are provided by Debkowski & Moritz GbR.

Debkowski & Moritz GbR, as named in the Legal Notice, is solely responsible for all content and services.

1 Data Controller

Contact Details

As set out in our Legal Notice

Data protection enquiries:
support@bark-plan.com

An external Data Protection Officer is not required pursuant to Art. 37 UK GDPR, as there is no legal obligation to appoint one.

2 Purposes of Data Processing

We process your personal data for the following purposes:

  • Provision of personalised dog training plans
  • Creation of individual training recommendations based on quiz responses
  • Communication via email regarding your training plan
  • Order processing and payment processing via Stripe
  • Compliance with statutory record-keeping obligations
  • Improvement of our training services

3 Categories of Data Collected

What Data We Collect

Data Category Examples Status
Dog Data Name, age, breed, sex Required
Training Preferences Quiz responses, behavioural issues, training goals Required
Contact Details Email address Required
Payment Data Stripe checkout data (processed externally) Automatic
Technical Data IP address, browser type, cookies Automatic

4 Payment Processing via Stripe

We use Stripe Payments Europe Ltd., Dublin, Ireland for payment processing.

Stripe Data Processing

Stripe processes payment data independently in accordance with strict security standards (PCI DSS Level 1).

Further information: https://stripe.com/en-gb/privacy

We only receive confirmed transaction data; we do not receive any credit card or bank details.

5 Cookies and Tracking

We use various types of cookies and tracking technologies:

Cookie Categories

  • Strictly necessary cookies: For the operation of the website and quiz functionality
  • localStorage: Storage of your quiz responses between pages
  • Marketing cookies: For personalised advertising (Meta, Google)
  • Analytics cookies: For the improvement of our services (Clarity)

The use of marketing and analytics cookies is only carried out with your express consent pursuant to Art. 6(1)(a) UK GDPR. You may withdraw your consent at any time via our cookie banner.

6 Meta Pixel (Facebook)

We use the Meta Pixel (formerly Facebook Pixel) operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

What is the Meta Pixel?

The Meta Pixel is an analytics tool that helps us measure the effectiveness of our advertisements on Facebook and Instagram. It enables us to:

  • Measure conversions (e.g. purchases)
  • Create audiences for advertisements
  • Optimise our advertising campaigns

Data Collected

  • HTTP header information (IP address, browser, operating system)
  • Pixel-specific data (Pixel ID, cookies)
  • Button click data and page views
  • Optional values (e.g. conversion value for purchases)

Legal basis: Art. 6(1)(a) UK GDPR (Consent)

Opt-out: You may withdraw your consent at any time via our cookie banner or adjust your settings in your Facebook Ad Preferences.

Privacy policy: https://www.facebook.com/privacy/policy/

7 Google Ads and Conversion Tracking

We use Google Ads and Google Conversion Tracking operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

What is Google Ads Conversion Tracking?

Conversion Tracking enables us to measure the effectiveness of our Google advertisements. When you visit our website via a Google advert, a cookie is set.

  • Measurement of clicks on our adverts
  • Recording of conversions (e.g. purchases)
  • Optimisation of our advertising spend

Data Collected

  • Information about the advert click
  • Device information and browser data
  • IP address (anonymised)
  • Conversion data (e.g. completed purchases)

Legal basis: Art. 6(1)(a) UK GDPR (Consent)

Opt-out: You may withdraw your consent via our cookie banner or disable personalised advertising in your Google Ad Settings.

Privacy policy: https://policies.google.com/privacy

8 Microsoft Clarity

We use Microsoft Clarity operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

What is Microsoft Clarity?

Clarity is an analytics tool that helps us understand how visitors use our website. It creates:

  • Heatmaps (where users click)
  • Session recordings (anonymised)
  • Scroll analysis

Sensitive input fields (e.g. email, payment data) are automatically masked and not recorded.

Data Collected

  • Mouse movements and clicks
  • Scrolling behaviour
  • Device information
  • Page views and time spent on site

Legal basis: Art. 6(1)(a) UK GDPR (Consent)

Opt-out: You may withdraw your consent at any time via our cookie banner.

Privacy policy: https://privacy.microsoft.com/en-gb/privacystatement

9 Hosting and Data Storage (Supabase)

We use Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992, to store your quiz data and order information.

What Do We Store with Supabase?

  • Quiz responses and dog profile
  • Email address
  • Order information
  • Generated training plans

Legal basis: Art. 6(1)(b) UK GDPR (Performance of a contract)

Privacy policy: https://supabase.com/privacy

10 International Data Transfers

Some of our service providers are based outside the United Kingdom:

International Data Transfers

Service Country Safeguard
Meta (Facebook) USA UK-US Data Bridge
Google USA UK-US Data Bridge
Microsoft (Clarity) USA UK-US Data Bridge
Supabase Singapore/USA Standard Contractual Clauses (SCCs)
Stripe Ireland (EU) EU Adequacy Decision

For US-based companies, the UK Extension to the EU-US Data Privacy Framework (UK-US Data Bridge) applies. In addition, Standard Contractual Clauses (SCCs) are used as appropriate safeguards.

11 Data Retention Periods

  • Quiz data and training plans: Maximum 2 years
  • Invoice data: 10 years (statutory record-keeping obligation)
  • Email correspondence: 3 years for support and advisory purposes
  • localStorage data: Until manually deleted in your browser

12 Legal Bases for Processing

UK GDPR Legal Bases

  • Art. 6(1)(b) UK GDPR (Performance of a contract): Training plan creation, advisory services
  • Art. 6(1)(a) UK GDPR (Consent): Newsletter, cookies, marketing
  • Art. 6(1)(c) UK GDPR (Legal obligation): Invoice retention periods
  • Art. 6(1)(f) UK GDPR (Legitimate interests): Website security, fraud prevention

13 Your Rights

You Have the Following Rights

  • Right of access (Art. 15 UK GDPR): To know what data we hold about you
  • Right to rectification (Art. 16 UK GDPR): Correction of inaccurate or incomplete data
  • Right to erasure (Art. 17 UK GDPR): Deletion of your data under certain conditions
  • Right to restriction (Art. 18 UK GDPR): Restriction of data processing
  • Right to data portability (Art. 20 UK GDPR): Transfer of your data in a machine-readable format
  • Right to object (Art. 21 UK GDPR): Objection to certain types of processing
  • Right to withdraw consent (Art. 7 UK GDPR): Withdrawal of previously given consent

14 Data Security

We employ comprehensive technical and organisational measures:

  • SSL encryption for all data transfers
  • Secure servers in established data centres
  • Regular security audits and updates
  • Access controls and staff training
  • Backup systems and contingency plans

Questions About Data Protection?

If you have any questions about the processing of your personal data or wish to exercise your rights, please do not hesitate to contact us:

Email: support@bark-plan.com
Further contact details: See Legal Notice

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) or the relevant supervisory authority.

Date of This Privacy Policy

This privacy policy is currently valid as of: January 2025.

We reserve the right to update this policy to comply with current legal requirements or to reflect changes to our services.