Carling Parking is operated by Barker HRS, a sole proprietorship based in Ottawa, Ontario, Canada (the “we”, “us”). It is an independent iCalledit app and is not affiliated with, endorsed by, or connected tothe Department of National Defence or the Government of Canada. This policy explains what we collect, why, and your rights under Canada’s PIPEDA and CASL.
What we collect, and why
- Email address — to sign you in (a one-time magic link; we never store a password) and, if you opt in, to send alerts and a daily digest.
- Billing data — if you subscribe, Stripe processes your payment. We store only your Stripe customer/subscription IDs and status; we never see or store your card.
- Crowd reports — when you report a lot, we store only the lot, the status, and a rounded timestamp. Reports carry no identity and are never linked to your account — a hard “privacy wall.” A payment can never be joined to a report.
- Approximate location — only if you tap “Use my location,” only while the app is open, used to show your decision point. It is not stored and never leaves your device as a trace.
- Push subscription — if you enable alerts, your browser’s push endpoint (device-scoped), to deliver them.
- Minimal technical logs — standard request logs and an anonymous, daily-rotating hash of your IP used solely to rate-limit report abuse (not an identity, not linkable to your account).
Who processes your data
We use these service providers (sub-processors), each under their own terms:
- Vercel — hosting.
- Supabase — database, hosted in Canada (ca-central-1).
- Stripe — payments.
- Resend — transactional + digest email.
- Cloudflare — DNS and edge.
Email & CASL
We only send commercial email (alerts, digests) with your consent — you turn them on in your account. Every such email identifies us and includes a one-click way to unsubscribe. Sign-in (magic-link) emails are transactional and sent only when you request them.
Cookies & local storage
We use a session cookie to keep you signed in and local storage for your theme preference. We do not use third-party advertising or cross-site tracking.
Your rights (PIPEDA)
You may access, correct, or delete your personal information, and withdraw consent for alerts at any time. Email jay@barkerhrs.comand we’ll respond within a reasonable time. (Note: anonymous crowd reports cannot be retrieved or deleted per-person, because by design they are not linked to you.)
Retention & security
We keep account and billing data while your account is active and as required by law, then delete it. Crowd reports decay out of the live index within ~45 minutes. We use reputable providers and encryption in transit and at rest.
Children
This service is not directed to children under 13, and we do not knowingly collect their information.
Changes & contact
We’ll post changes here and update the date above. Questions: jay@barkerhrs.com.
This is a plain-language summary, not legal advice. Operator legal name on file: [OPERATOR LEGAL NAME].