Privacy Policy

1. Who we are

Paw Paradise Lovedean is a family-run dog field in Lovedean, Hampshire, run by Emma Jewitt and Adam Jewitt, trading as Paw Paradise Lovedean. We are the data controller for the personal information described in this policy, including booking information held for us by Acuity Scheduling.

If you have any questions about this policy or how we handle your data, please contact us:

• Email: pawparadiselovedean@gmail.com
• Address: Tagdell Lane, Lovedean, Hampshire PO8 0QN

2. What personal data we collect

We only collect information you give us directly. This includes:

• Bookings: when you book through our booking system (Acuity Scheduling), your name, email address, phone number and booking details. If you choose to create an Acuity account to manage your bookings, that account is held by Acuity.
• Reviews: your name (or "Anonymous" if you prefer), your dog's name (optional), your star rating and what you write. We do not ask for your email address.
• Suggestions: your suggestion, plus your name and email address only if you choose to give them
• Email correspondence: any information you share when contacting us directly by email
• Gallery photo submissions: the photos you send, plus your name and your dog's name only if you choose to give them. We do not ask for your email address.

We do not collect sensitive personal data. If you pay online when booking, your card details are handled by the booking system's payment provider. We never see or store them.

3. Why we collect it and our lawful basis

Under UK GDPR, we must have a lawful basis for processing your personal data. We collect and use your information for the following purposes:

We do not use your personal data for marketing unless you have explicitly asked us to contact you about future offers or news.

4. How long we keep your data

• Booking records: up to 2 years after your last booking, in case of any dispute or follow-up
• Contact enquiries and suggestions: up to 12 months after we receive them
• Reviews: for as long as the review is published. Reviews we decline are deleted. You can ask us to remove your review at any time.
• Legal / financial records: up to 7 years as required by HMRC

We review and delete personal data when it is no longer needed.

4a. Gallery photo submissions

If you send photos through our gallery page, the following applies:

• Your photos are stored privately and only our team can see them until we have checked them. We never publish a photo automatically.
• Before uploading, the website shrinks each photo and removes the hidden information your camera or phone stores in it, such as location.
• By sending photos, you confirm you took them (or have permission to share them), that anyone identifiable in them is happy for them to be shared, and that you consent to them being shown on our website and social media.
• If you give your name or your dog's name, it is shown under your photo.
• Photos we decide not to use are deleted. Published photos stay up until you ask us to remove them.
• You can ask us to remove your photo at any time by emailing us. We will remove it from our website within 14 days of your request. Copies on social media platforms are subject to those platforms' own deletion timelines.
• We will never use a submitted photo for commercial advertising without asking you separately first.

5. Who we share your data with

We do not sell, rent or share your personal data with third parties for marketing purposes.

We may share your data with trusted third-party services that help us operate our business, including:

• Acuity Scheduling (part of Squarespace) — our booking system, which manages session availability, payments and confirmation emails on our behalf
• Supabase — stores the suggestions, reviews and gallery photos sent through this website
• Cloudflare — hosts this website
• Google (Gmail) — our email provider, to send and receive correspondence

These providers act on our instructions under data processing agreements and may not use your data for their own purposes. We remain responsible for your data.

Data outside the UK: some of these providers are based in, or use servers in, the United States or other countries. Where your data is processed outside the UK, it is protected by safeguards approved under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum to standard contractual clauses.

We may also share data if required to do so by law or to protect our legal rights.

6. Cookies

This website does not use tracking or advertising cookies, Google Analytics or similar tools. If this changes, we will update this policy and ask for your consent first.

We only store small pieces of information in your browser where they are needed for something you have chosen to use: your dark mode and accessibility settings (so they stay the same as you move between pages), and, for our own team only, the staff login. These are strictly necessary for those features, so we don't need to ask for consent, and you can clear them at any time in your browser settings.

When you go to our booking page, Acuity Scheduling (Squarespace) may set its own cookies to run the booking process. These are covered by Squarespace's cookie policy.

Technical logs: our website host (Cloudflare) and database provider (Supabase) automatically keep short-term technical logs, which include IP addresses, to keep the website running and secure. We don't use these logs to identify visitors, and they are deleted automatically by those providers.

7. Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your data where there is no legitimate reason for us to keep it
• Right to restriction — you can ask us to pause processing your data in certain circumstances
• Right to object — you can object to processing based on legitimate interests
• Right to data portability — you can request your data in a portable, machine-readable format

To exercise any of these rights, please contact us at pawparadiselovedean@gmail.com. We will respond within 30 days.

8. How we protect your data

We take reasonable steps to protect your personal data from unauthorised access, loss or misuse. Our website is served over HTTPS and we limit access to personal data to only those who need it to operate our business.

No method of internet transmission is 100% secure, but we are committed to handling your information responsibly.

9. Complaints

If you are unhappy with how we have handled your personal data, please tell us first by emailing pawparadiselovedean@gmail.com. We will acknowledge your complaint within 30 days, look into it without undue delay, and let you know the outcome.

If you are still unhappy, you have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

10. Changes to this policy

We may update this Privacy Policy from time to time as our services develop or as legal requirements change. The date at the top of this page will reflect when it was last updated. We recommend checking back periodically.