Privacy Policy

Last updated: 22 May 2026

This Privacy Policy explains how Let's Go Bear ("we", "us", "our") collects, uses, and protects your personal data when you use our website at letsgobear.com and our application at app.letsgobear.com (together, "the Service"). We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. By using the Service, you acknowledge that you have read and understood how we handle your personal data.

1. Who We Are

Let's Go Bear is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, you can contact us at: fo@eeva.co

2. What Data We Collect

We collect the following categories of personal data:

Account data: Your email address, and if you sign in with Google, your name and profile picture as provided by Google.
Trip planning data: Information you enter when planning a trip, including travel dates, your pet's name, date of birth, species, and breed.
Beta signup data: Your email address if you join our beta waitlist.
Usage data: Technical information about how you access and use the Service, including your IP address, browser type, device type, pages visited, and timestamps. This data is collected automatically by our hosting provider.

We do not collect any special category data (such as health data about you) and we do not collect payment information.

3. How We Use Your Data

We use your personal data for the following purposes:

To provide the Service: Processing your trip planning data to generate personalised travel checklists and deadline calculations for your pet.
To manage your account: Creating and maintaining your account, verifying your identity, and enabling you to sign in.
To communicate with you: Sending you beta access invitations, service updates, and responses to your enquiries.
To improve the Service: Understanding how users interact with the Service to fix issues and improve functionality.
To comply with legal obligations: Retaining records as required by applicable law.

4. Legal Basis for Processing

We rely on the following legal bases under UK GDPR:

Contract performance: Processing necessary to provide the Service you have requested (account management, trip planning).
Consent: For beta waitlist sign-ups and any marketing communications. You may withdraw consent at any time.
Legitimate interests: For usage analytics and improving the Service, where these interests are not overridden by your rights.
Legal obligation: Where we are required to retain data by law.

5. Data Sharing and Third Parties

We do not sell your personal data. We share data only with the following trusted service providers who process it on our behalf:

Supabase: Our database and authentication provider. Your account data and trip data is stored securely on Supabase infrastructure. Supabase is compliant with GDPR and SOC 2 Type II. Data may be stored in the EU.
Google: If you choose to sign in with Google, Google processes your authentication data in accordance with Google's own privacy policy.
Vercel: Our hosting and infrastructure provider. Vercel processes technical usage data as part of serving the Service. Vercel is GDPR-compliant.

All third-party providers are bound by data processing agreements and are required to protect your data in accordance with UK GDPR.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

Beta waitlist email addresses are retained until the beta programme concludes or until you request removal, whichever is sooner.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete data.
Right to erasure: You can ask us to delete your personal data in certain circumstances.
Right to data portability: You can request your data in a structured, machine-readable format.
Right to object: You can object to processing based on legitimate interests.
Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at fo@eeva.co. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use strictly necessary cookies and local storage to keep you signed in and to remember your preferences (such as whether you have completed onboarding). We do not use advertising or tracking cookies. No consent is required for strictly necessary cookies under UK law.

9. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. International Transfers

Your data may be transferred to and processed in countries outside the UK, including within the European Economic Area (EEA) and the United States, by our third-party providers. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions.

11. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include encrypted data transmission (HTTPS), secure authentication, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the Service. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
fo@eeva.co