1.Who we are
chusdogwalk decides how your information is used, which under data protection law makes us the “controller” for it.
2.What we collect
About you
- your name, email address and phone number
- your address, and how to get into your home if a booking needs it
- who to call in an emergency if we cannot reach you
- your bookings, messages, and anything you write to us
- a record of the client agreement you signed — the date, the version, and the name you typed
About your pet
- its name, breed, age, size and microchip number
- its health — conditions, medication, allergies, and your vet’s details
- how it behaves, including anything about aggression or biting
- photos, and any documents you upload such as vaccination records or insurance certificates
Automatically
- your IP address and browser, recorded when you sign the client agreement so the signature can be relied on later
- basic technical logs from our hosting, used to keep the site working and secure
We do not collect your card number. Payments go straight to Stripe and we only see the last four digits and whether the payment worked.
3.Why we need it, and what allows us to hold it
Data protection law says we must have a specific reason for holding your information. Ours are:
- To do the job you booked. Your details, your pet’s details, your address and your vet. We could not provide the service without these. (Lawful basis: performing our contract with you.)
- To keep people and animals safe. Temperament and bite history, so whoever handles your pet knows what they are handling. (Lawful basis: our legitimate interest in the safety of our team, the public and other animals.)
- To keep proof of what was agreed. The signed client agreement and its audit trail, in case there is ever a dispute or an insurance claim. (Lawful basis: our legitimate interest in defending legal claims.)
- To take payment and keep accounts. Invoices and receipts. (Lawful basis: our contract with you, and our legal obligation to keep tax records.)
- To show photos of your pet publicly. Only if you tick the box. (Lawful basis: your consent — which you can withdraw whenever you like.)
We do not sell your information, and we do not use it to build advertising profiles.
4.Your pet’s health records
Health information about an animal is not “special category” data under UK GDPR — that category is about people. We still treat it carefully, because it is bound up with your vet, your insurer and your home. It is only visible to you and to whoever is caring for your pet.
5.Who else sees it
A small number of companies process information on our behalf. They may only use it to do what we ask them to:
- Clerk — accounts and signing in.
- Stripe — card payments and refunds.
- MongoDB Atlas — the database everything is stored in.
- Cloudflare R2 — photos and documents you upload.
- Resend — the emails we send you about bookings.
- Vercel — hosting the website and keeping its logs.
We also share information in these situations:
- with the person caring for your pet — they see what they need to do the job safely
- with a vet, if your pet needs treating
- with our insurer, if there is a claim
- with our accountant, for invoices and tax
- if the law requires it
That is the whole list. Nobody else gets your information.
6.How long we keep it
- Your account and your pets’ profiles: while you are a client, and for two years after your last booking.
- Booking records, invoices and receipts: six years, which is how long HMRC requires tax records to be kept.
- The signed client agreement and its audit trail: six years after your last booking, in case of a claim.
- Photos and documents you uploaded: deleted when you delete them, or when your account is closed.
- Messages: two years after your last booking.
Ask us to delete something sooner and we will, unless we are required to keep it — a paid invoice, for example, cannot be deleted before its six years are up.
7.What you can ask us to do
You have the right to:
- see a copy of everything we hold about you
- have anything wrong corrected
- have your information deleted, where we are not required to keep it
- get your information in a portable file
- object to us using it, or ask us to pause while we look into a complaint
- withdraw consent for photos, at any time, without giving a reason
Email us and we will answer within one month. It is free. We may ask you to confirm who you are first, which is a protection for you rather than an obstacle.
If you are not happy with how we handle it
You can complain to the Information Commissioner’s Office at ico.org.uk, or call them on 0303 123 1113. We would rather you came to us first so we can put it right — but you do not have to.
8.Where your information is kept
We keep information in the UK and Europe where we can. Some of the companies above are based in the United States. Where information goes there, it is protected by the safeguards UK law requires — standard contractual clauses, or the UK extension to the EU–US Data Privacy Framework.
10.Children
This service is for adults. You need to be 18 or over to book, and we do not knowingly collect information about children. If you think we have, tell us and we will delete it.
11.Changes to this policy
If we change how we use your information, we will update this page and change the date at the top. If it is a significant change, we will email you rather than hope you notice.
See also our terms of use and the client agreement.