Effective date: July 19, 2026
1. Controller and contact
Reactive Dog Stays is operated by Henrique Miguel Filipe Reis, a sole trader and self-employed individual established in Portugal. Geographic address: Rua Alfageme de Santarém, nº 19, 2000-584 Santarém, Portugal. Tax identification number (NIF/VAT): 222 788 992. Privacy contact: privacy@reactivedogstays.com. General contact: hello@reactivedogstays.com. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit the directory, contact us, request a correction or removal, communicate about a provider listing, complete a provider questionnaire, or use a paid provider service.
2. Current public-service status
The public directory currently does not use analytics, session replay, advertising pixels, public submission forms, paid submissions, or a public checkout. Directify forms 213 and 214, the pricing page, paid submissions, and public checkout remain unpublished. The processor and international-transfer register was reviewed on July 19, 2026 for the systems currently in use. Cloudflare, Proton Mail, and Stripe have current public contractual and transfer documentation. The privacy gate remains closed because Directify has not publicly identified its contracting legal entity or supplied a complete Article 28 DPA, named subprocessor map, hosting region, or account-applicable transfer mechanism. A documentation request was sent to Directify by email on July 19, 2026. Public collection and paid services will not be enabled until the gap is resolved and this Policy and the relevant point-of-collection notices are reviewed against the response. If we introduce new processing, this Policy and the relevant notice will be updated before that processing begins.
3. Information we collect
Site delivery and security
Directify and related infrastructure may process technical information needed to deliver and secure the site. This can include IP address, browser and device information, requested pages, timestamps, referring page, and security or error logs.
Messages, corrections, and privacy requests
When you contact us, we receive the information you choose to provide, such as your name, email address, organisation, message, evidence, and details of a correction, removal, or privacy request.
Provider listings and verification
Provider listings may contain business contact information and information about owners or staff where it is published on the provider's own public website or supplied directly by the provider. A provider questionnaire may collect identity and business contact information, service location, care setting, separation conditions, accepted profiles, provider limits, bite-history policy, handling practices, medication support, supervision, trial-stay information, insurance status, pricing, availability, certifications, and supporting links. We record the source and date for safety-relevant behavioral information. We do not infer behavioral suitability, bite-history acceptance, or similar safety claims.
Paid provider services
If paid services are enabled, we may receive your name, email address, business and listing details, selected plan, transaction and subscription status, Stripe customer or checkout identifiers, and communications about delivery, cancellation, refunds, or failed payments. Stripe processes payment-card details. Reactive Dog Stays does not receive or store full payment-card numbers.
Outreach and suppression records
If we conduct lawful provider outreach, we may keep the business contact used, the public source or consent record, the messages sent, any response, and a suppression record needed to honour an unsubscribe or do-not-contact request.
4. How and why we use information
We use personal information to:
- deliver and secure the site
- research, create, review, correct, and remove provider listings
- record provenance and check dates
- answer enquiries and privacy requests
- operate provider questionnaires and paid provider services when enabled
- manage subscriptions, refunds, failed payments, and customer support
- prevent abuse and unsolicited repeat contact
- comply with legal obligations
- establish, exercise, or defend legal claims
Where the GDPR applies, our legal bases depend on the context:
- legitimate interests for operating a secure, accurate, and useful directory, maintaining business listings, preventing abuse, and handling corrections
- steps at your request and performance of a contract for provider services and purchases
- compliance with legal obligations for tax, accounting, consumer, and privacy requirements
- consent where a specific activity legally requires it, which you may withdraw at any time
You may object to processing based on legitimate interests. We will assess the request and stop the processing unless there is a compelling lawful reason to continue or the information is needed for legal claims.
5. Sources of listing information
Listing information comes from logged-out public pages on a provider's own website, official or open public sources used within their terms, and information supplied directly by the provider. We do not bulk scrape marketplace profiles, social-platform profiles, account-only pages, or the Pet Sitters International locator for outreach. We honour valid correction, removal, and do-not-contact requests.
6. Service providers and sharing
We share information only as needed with service providers that support the site and our operations. Current providers are:
- Directify for website hosting and directory administration. Directify's public policy states that it is controller for customer account, billing, and usage data and processor for personal data submitted by directory visitors, with Reactive Dog Stays as controller for those submissions. Public visitor-submission features remain off.
- Cloudflare, Inc. for domain registration, DNS, proxy/CDN, security, and delivery. Cloudflare is processor for the customer-data categories defined in its DPA and controller for its account and registrar purposes.
- Proton AG for business email. Proton's DPA covers Company Personal Data and email content processed for a business customer.
- Stripe Payments Europe, Limited and Stripe Technology Europe, Limited for payment processing, subscriptions, refunds, and customer-portal functions when paid services are enabled. Stripe documents processor and independent-controller roles depending on the activity.
Cloudflare, Proton, and Stripe publish current DPAs or equivalent transfer terms and current provider or subprocessor information. Directify's public documentation does not currently provide the complete contracting-entity, DPA, subprocessor, location, and transfer details needed for this directory's public forms and paid services. No affiliate network or tracked link is active. We may also disclose information when required by law, to protect rights or safety, or as part of a legitimate business reorganisation. We do not sell personal information and do not permit service providers to use Reactive Dog Stays information for their own targeted advertising.
7. International processing
Some service providers may process information outside Portugal or the European Economic Area. Our register records the provider, purpose, data categories, role, processing locations, DPA or equivalent terms, subprocessors, transfer mechanism, source, and whether each point is confirmed or inferred. Cloudflare documents use of the EU-US Data Privacy Framework where applicable and SCCs with supplementary measures as fallback. Proton states that encrypted email is stored in Switzerland, Germany, or Norway and provides SCCs where adequacy does not cover a destination. Stripe documents transfers to Stripe LLC in the United States and other affiliates or providers under the Data Privacy Framework and applicable SCC modules. Directify's public policy refers generally to processing in the United States and European Union and to SCCs where required, but it does not identify the contracting entity, applicable SCC module, account incorporation, complete subprocessors and locations, or hosting and backup regions. We asked Directify for those documents by email on July 19, 2026 and are awaiting its response. Public forms and paid services will remain unpublished until the Directify gap is resolved and the applicable safeguards are documented. You may contact privacy@reactivedogstays.com for current information about processors and safeguards relevant to your data.
8. Retention
A current provider questionnaire is retained while the related listing is active. Superseded questionnaires and verification records are retained for 24 months after replacement or listing removal, then securely deleted or anonymised unless they are needed for an active dispute or legal obligation. Provider re-verification is scheduled every 12 months. A full correction report and related correspondence are retained for 24 months after the matter is closed, then deleted or anonymised. A minimal audit record and any do-not-relist instruction may be retained for as long as needed to prevent the listing from being republished. Outreach consent and lawful-source evidence are retained while outreach continues and for three years after the last commercial message or withdrawal. A minimal suppression record is retained for as long as outreach operates and it is needed to prevent further contact. Technical logs are retained according to the relevant provider's operational and security schedules. Payment, tax, and accounting records are retained for the period required by applicable law. We delete or anonymise other personal information when it is no longer needed for the purpose for which it was collected.
9. Cookies, analytics, and affiliate tracking
We do not currently use analytics, session replay, advertising pixels, or other non-essential tracking technologies. No cookie banner is shown while those technologies remain disabled. Directify, Cloudflare, or other infrastructure providers may use cookies or similar storage that are strictly necessary for site delivery, security, load balancing, fraud prevention, or administrative sessions. No affiliate network, affiliate cookie, or tracked link is active. If an affiliate link becomes active, it will use the selected network's generated tracking link and will carry a disclosure near the link. We do not operate separate first-party affiliate click tracking. We will document the network's data flow and reassess consent and cookie requirements before enabling any non-essential tracking.
10. Your rights
Depending on the law that applies, you may have rights to access your personal information, correct inaccurate information, request deletion, restrict or object to processing, receive portable data, withdraw consent, and complain to a data protection authority. Send requests to privacy@reactivedogstays.com. Describe the information or listing involved. We may ask for proportionate information to verify your identity or authority. Where the GDPR applies, we will respond within one month. If a permitted extension of up to two further months is necessary, we will tell you within the first month and explain the reason.
11. Complaints
Our privacy contact is Henrique Miguel Filipe Reis at privacy@reactivedogstays.com. You may also complain to Portugal's supervisory authority, the Comissão Nacional de Proteção de Dados, at geral@cnpd.pt or through www.cnpd.pt. Depending on where you live or work, you may also have the right to contact another competent data protection authority.
12. Children
The site is for adults researching or offering pet-care services and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and delete it where appropriate.
13. Security
We use reasonable organisational and technical measures appropriate to the information we handle. No online service can guarantee perfect security. Do not send passwords, payment-card information, identity documents, veterinary records, client details, or other highly sensitive information by ordinary email or through a form unless we specifically provide a secure method and ask for it.
14. Third-party sites
Provider websites, payment pages, affiliate destinations, and other external links are controlled by third parties. Their privacy practices are governed by their own policies, not this Policy.
15. Changes
We may update this Policy to reflect changes to the site, service providers, processing, or law. We will publish the revised version here and change the effective date. Material changes will be highlighted when reasonably possible.
16. Contact
Privacy requests and questions: privacy@reactivedogstays.com. General enquiries, corrections, and removals: hello@reactivedogstays.com. Postal contact: Henrique Miguel Filipe Reis, Rua Alfageme de Santarém, nº 19, 2000-584 Santarém, Portugal.