Legal
Privacy Policy
Effective: June 29, 2026 · Controller: ForRico GmbH, Berlin, Germany
1. Who We Are
ForRico GmbH (“ForRico”, “we”) operates the ForRico pet care marketplace. We are the data controller for personal data processed through our platform. Questions: privacy@forrico.com
2. Data We Collect
| Category | Examples | Purpose |
|---|---|---|
| Account | Name, email, password hash | Account creation and authentication |
| Profile | City, profile photo, bio | Display on marketplace |
| Pet data | Name, breed, health info, photos | Booking preparation for Sitters |
| Booking | Dates, service type, notes | Facilitating the booking contract |
| Payment | Last 4 digits, Stripe token | Processing payments via Stripe |
| Messages | Chat content between users | Service delivery |
| Location | GPS during active walks (opt-in) | Live location updates to Owners |
| Usage | Page views, search queries, clicks | Analytics and product improvement |
| Device | IP address, browser, OS | Security and fraud prevention |
3. Legal Basis (GDPR Art. 6)
- Contract performance (Art. 6(1)(b)): processing necessary to provide the booking platform.
- Legitimate interests (Art. 6(1)(f)): fraud prevention, security, and product analytics.
- Consent (Art. 6(1)(a)): marketing emails, GPS location sharing — you may withdraw consent at any time in Settings.
- Legal obligation (Art. 6(1)(c)): tax records, fraud reporting.
4. How We Share Data
- Sitters and Owners: we share relevant booking data (pet info, contact) between the two parties to a confirmed booking.
- Stripe: payment processing. Stripe's privacy policy applies to card data.
- Supabase: database and file storage (EU region).
- Resend / email delivery: sends transactional emails.
- Twilio: SMS verification (optional).
- Cloudinary: image storage and CDN.
- Sentry: error monitoring. Logs do not contain sensitive personal data.
We do not sell personal data. We do not share data with advertisers.
5. Data Retention
- Account data: retained while your account is active and for 2 years after deletion.
- Booking records: 7 years for tax and legal compliance.
- Messages: 2 years after the booking is completed.
- GPS location logs: 30 days.
- Analytics data: 24 months, anonymised thereafter.
6. Your Rights (GDPR)
- Access (Art. 15): request a copy of all data we hold about you.
- Rectification (Art. 16): correct inaccurate data.
- Erasure (Art. 17): delete your account and data, subject to legal retention requirements.
- Portability (Art. 20): receive your data in a structured, machine-readable format.
- Object (Art. 21): opt out of processing based on legitimate interests.
- Restrict (Art. 18): pause processing while a dispute is resolved.
To exercise any right, email privacy@forrico.com. We respond within 30 days. You may also lodge a complaint with the Berlin Commissioner for Data Protection (berliner-datenschutz.de).
7. Cookies
We use strictly necessary cookies (session, CSRF token) that cannot be disabled. We use analytics cookies only with your consent. You can manage preferences via the cookie banner shown on first visit or at any time in Settings → Privacy.
8. International Transfers
Our infrastructure is hosted in the EU (Supabase EU Frankfurt, Resend EU). Some sub-processors (Stripe, Cloudinary CDN) may process data outside the EU under Standard Contractual Clauses approved by the European Commission.
9. Children
ForRico is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us at privacy@forrico.com.
10. Changes
We will notify you by email and platform notice at least 14 days before material changes take effect.
Last updated: June 29, 2026 · Terms of Service