Privacy rights
Data Rights & DSARs
Version 1.1 · Effective date: June 16, 2026 · Last reviewed: June 16, 2026
Operational note: BarkParks publishes what is implemented today and what is still planned so governance around travel, identity, and payment-touching features is reviewable.
Your Data Rights
Right to Access
Request a copy of all personal data we hold about you in relation to saved trip and account data.
Right to Rectification
Correct inaccurate or incomplete personal data.
Right to Erasure
Request deletion of personal data when retention is no longer required.
Right to Data Portability
Receive your data in machine-readable JSON and CSV formats.
Right to Restrict Processing
Ask us to limit how we use your data while a request is reviewed.
Right to Object
Object to processing based on legitimate interest or direct marketing.
Right to Withdraw Consent
Withdraw previously given consent at any time without penalty.
How to Submit a Request
Email: hello@joytheeandme.com
Expected response time: Within 30 days (GDPR) / 45 days (CCPA)
Verification: We'll verify your identity before processing.
Format: Data exports are provided in JSON and CSV formats.
For BarkParks, requests may involve saved park lists, account details, support records, or membership history.
Data Retention Schedule
| Data Type | Retention Period | Basis |
|---|---|---|
| Account Information | Duration of account + 30 days | Contract |
| Payment Data | 7 years | Legal (tax/audit) |
| Usage Analytics | 26 months | Legitimate interest |
| Support Tickets | 3 years | Legitimate interest |
| Marketing Consent | Until withdrawn | Consent |
For California Residents (CCPA)
- Right to Know — categories and specific pieces of data collected.
- Right to Delete — request deletion of eligible personal information.
- Right to Opt-Out — opt out of data sale; we do not sell personal data.
- Right to Non-Discrimination — no penalty for exercising privacy rights.
- Authorized Agent — requests may be submitted through an authorized agent.
For EU / UK Residents (GDPR)
- Data Protection Officer contact: hello@joytheeandme.com
- Supervisory authority rights: You may file a complaint with your local supervisory authority.
- International transfers: Standard Contractual Clauses are used where required for cross-border transfers.
Data Processing Register (summary)
| Purpose | Legal Basis | Categories | Recipients | Retention |
|---|---|---|---|---|
| Service delivery | Contract | Account, usage | Hosting, payment processor | Account duration |
| Analytics | Legitimate interest | Anonymized usage | Analytics provider | 26 months |
| Marketing | Consent | Email, preferences | Email service | Until withdrawn |
Security: hello@joytheeandme.com
Privacy: hello@joytheeandme.com
Data protection: hello@joytheeandme.com