1. About this Privacy Notice
This Privacy Notice explains how Catwick Cattery collects, uses, discloses and protects personal data when you visit or interact with our website at https://catwickcattery.co.uk (the “Website”). It applies only to data processed in connection with the Website and online communications about our services.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
2. Who we are and how to contact us
Catwick Cattery is the controller of the personal data processed through the Website. If you have questions about this notice or our data practices, or if you wish to exercise your rights, please contact us using the contact details published on this Website. For faster handling, please include “Privacy” in the subject or message.
Data Protection Officer (DPO): We are not required to appoint a Data Protection Officer. Our privacy contact can be reached using the contact details published on this Website.
3. Personal data we collect
We collect and process the following categories of personal data when you use the Website or communicate with us:
- Identity and contact details: name, email address, telephone number and any information you provide in forms or emails.
- Service-related information: details you provide when requesting information about availability, pricing or booking, and communications relating to those requests.
- Pet-related information you choose to share: for example, pet name, breed or care notes where you include these in a web form or message.
- Technical and usage data: IP address, device identifiers, browser type, operating system, pages viewed, time and date of visits, clicks and interactions, and similar diagnostic data gathered via cookies and similar technologies.
- Marketing preferences: your choices about receiving updates or offers from us.
- Correspondence: records of communications, including enquiries, complaints and feedback.
We do not intentionally collect special category data via the Website. Please avoid including sensitive data (for example, health information about you) in website forms or emails unless it is strictly necessary and you choose to provide it.
4. How we use personal data and our legal bases
We use personal data for the purposes and on the legal bases below:
- Responding to enquiries and providing information you request: to take steps at your request prior to entering into a contract and based on our legitimate interests in operating our business and communicating with prospective customers (UK GDPR Art. 6(1)(b) and 6(1)(f)).
- Managing bookings and providing services you request: performance of a contract and taking steps at your request prior to entering into a contract (Art. 6(1)(b)), and legitimate interests in delivering and administering our services (Art. 6(1)(f)).
- Operating, maintaining and improving the Website, including troubleshooting, analytics, and security monitoring: our legitimate interests in running an effective, secure website and understanding its use (Art. 6(1)(f)).
- Sending service messages (for example, confirmations, updates or policy notices): performance of a contract and our legitimate interests in effective customer communication (Art. 6(1)(b) and 6(1)(f)).
- Direct marketing (such as newsletters or updates): your consent where required (Art. 6(1)(a)); and, where permitted, our legitimate interests in promoting our services to existing customers and enquirers, subject to your right to opt out at any time (Art. 6(1)(f) and PECR soft opt-in).
- Compliance, record-keeping and legal claims: to comply with legal obligations (Art. 6(1)(c)) and our legitimate interests in establishing, exercising or defending legal claims (Art. 6(1)(f)).
- Protecting vital interests: in rare circumstances, to protect someone’s vital interests (Art. 6(1)(d)).
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.
5. Cookies and similar technologies
We use cookies and similar technologies to make the Website work, to measure performance, and to improve user experience. Cookies are small files placed on your device that may store information about your visit.
Types of cookies we may use:
- Strictly necessary cookies: required for core functionality such as security, network management and accessibility. These are set without consent and cannot be switched off in our systems.
- Functional cookies: enable enhanced functionality and personalisation. These are optional and may require your consent.
- Analytics cookies: help us understand how visitors use the Website so we can improve it. These are optional and set only with your consent.
Your choices:
- You can manage non-essential cookies through the cookie controls presented on the Website (where available). If you do not see cookie controls, you can still manage cookies through your browser settings, including blocking or deleting cookies. Blocking some cookies may affect Website functionality.
- You may also configure your browser to send a “Do Not Track” signal. Our Website’s response to such signals may vary depending on the technologies we use at the time.
6. Sharing your personal data
We share personal data only as necessary and with appropriate safeguards, including with:
- Service providers acting as our processors, such as website hosting, content delivery networks, security and maintenance providers, analytics providers, email and communications platforms, IT support, and customer service tools.
- Professional advisers (for example, accountants or legal advisers) under confidentiality obligations.
- Authorities, regulators, courts or law enforcement where we are legally required to do so or to protect our rights, users or others.
- Successors to our business if we undergo a reorganisation, merger or transfer, in which case personal data may be transferred subject to applicable data protection laws.
We require processors to handle personal data only on our instructions, to keep it secure, and to comply with applicable law.
7. International data transfers
Some of our service providers may process personal data outside the United Kingdom or the European Economic Area. Where such transfers occur, we ensure appropriate safeguards are in place, such as an adequacy regulation for the destination country or the use of UK-approved International Data Transfer Agreements (IDTAs) or the UK Addendum to the EU Standard Contractual Clauses, together with supplementary measures where necessary.
You can request more information about our transfer safeguards using the contact details published on this Website.
8. Data retention
We keep personal data only for as long as necessary for the purposes set out in this notice, and to comply with legal, accounting or reporting obligations. Typical retention periods include:
- Enquiries and correspondence not leading to a booking: up to 12 months from our last interaction.
- Booking and customer records (including invoices and transaction records): up to 6 years after the end of the relevant financial year, to meet tax and accounting requirements.
- Technical and security logs: typically up to 12 months, unless a longer period is required for security or legal reasons.
- Marketing preferences and consent records: retained for as long as you remain subscribed and up to 24 months after your last interaction, unless you withdraw consent earlier.
- Cookies: retained according to their individual lifespans, which you can manage via your browser and device settings.
If we anonymise personal data so that it can no longer be associated with you, we may use that information indefinitely without further notice.
9. Your rights
Under the UK GDPR you have the following rights, subject to conditions and exemptions:
- Right of access to your personal data and to receive a copy.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure (the “right to be forgotten”).
- Right to restriction of processing.
- Right to data portability.
- Right to object to processing, including to direct marketing and, where relied upon, our legitimate interests.
- Right to withdraw consent at any time where processing is based on your consent.
We will not discriminate against you for exercising your rights.
10. How to exercise your rights and complaints
To exercise your rights or raise questions about our data practices, please contact us using the contact details published on this Website. We may need to request specific information to confirm your identity before we act on your request. We aim to respond within one month, or we will inform you if more time is needed due to complexity or volume.
You also have the right to complain to the UK Information Commissioner’s Office (ICO). Contact details: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF; telephone 0303 123 1113. We would appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first where possible.
11. Data security
We implement technical and organisational measures designed to protect personal data, including encryption in transit (TLS), access controls, least-privilege permissions, regular software updates, vulnerability management, and staff awareness measures appropriate to the risks. No system can be completely secure; if we become aware of a personal data breach likely to result in a risk to your rights and freedoms, we will notify you and the ICO where required by law.
12. Children’s privacy
The Website is not directed to children and we do not knowingly collect personal data from children. If you believe a child has provided personal data via the Website, please contact us and we will take appropriate steps to delete the data or obtain consent as required by law.
13. Third-party websites
The Website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to read their privacy notices.
14. Changes to this notice
We may update this Privacy Notice from time to time to reflect changes in our practices, technologies, legal requirements or other factors. We will revise the “Last updated” date below when changes are made. Material changes will be communicated in a suitable manner.
Last updated: 20 January 2026.