PRIVACY POLICY

Last updated: 20.01.2026

This Privacy Policy explains how Sandy Paws (“we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you interact with our business, website, or booking system. This includes bookings made via Square Appointments.

Sandy Paws is committed to protecting your privacy and handling your personal information in a transparent and secure manner, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services or providing your information to us, you agree to the practices described in this Privacy Policy.

SUMMARY OF KEY POINTS

• We collect personal information you provide when booking or contacting us
• We use your information to manage bookings, provide grooming services, and communicate with you
• Payments and bookings are processed securely via Square
• We do not sell or share your data for third-party marketing
• You have rights over your personal data, including access and deletion
   

1. WHAT INFORMATION DO WE COLLECT?

We collect personal information that you voluntarily provide when you book a service, contact us, or use our website.

This may include:

Personal Information

• Name
• Email address
• Phone number
• Address

Pet Information

• Pet name
• Breed
• Age
• Weight

Booking & Transaction Information

• Appointment details
• Service history
• Payment information (processed securely by Square)
   

All payments and online bookings are handled through Square, who processes this information on our behalf. We only use this data to provide and manage our services.

2. HOW DO WE USE YOUR INFORMATION?

We use your personal information for the following purposes:

• To provide grooming services – managing bookings, confirming appointments, and delivering services
• To communicate with you – appointment reminders, updates, and responding to enquiries
• For business administration – record keeping, accounting, and service management
• To improve our services – understanding client needs and improving customer experience
• For security and fraud prevention
   

Legal basis for processing

Under UK GDPR, we process your data based on:

• Contractual necessity – to provide grooming services you book
• Legitimate interests – running and improving our business
• Legal obligation – tax, accounting, and regulatory requirements
• Consent – where you have opted in to receive marketing communications
   

3. MARKETING COMMUNICATIONS

We will only send marketing emails or updates where you have actively opted in (for example, via our website or VIP list).

You can unsubscribe at any time using the link in our emails or by contacting us directly.

4. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?

We do not sell or rent your personal information.

We may share your data only in the following circumstances:

• With Square – Square acts as a data processor on our behalf to manage bookings and payments securely
• Legal or business requirements – if required by law or in the event of a business transfer (e.g. sale or restructuring)

All third parties we work with are required to handle your data securely and lawfully.

5. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain personal data only for as long as necessary:

• Client and booking records are typically kept for up to 6 years to comply with UK tax and accounting obligations
• Data is securely deleted once it is no longer required, unless legally required to retain it longer

Square retains transaction data in line with their own retention policies.

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

We take reasonable and appropriate measures to protect your personal data from loss, misuse, unauthorised access, or disclosure.

• Booking and payment data is processed securely via Square using encryption and security controls
• Access to personal data is limited to what is necessary for business purposes

Please note that no electronic storage or transmission method is 100% secure, and data is provided at your own risk.

7. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect personal information from children under the age of 13.

If you believe we have collected such information in error, please contact us immediately so it can be removed.

8. YOUR DATA PROTECTION RIGHTS

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal obligations)
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us at info@sandypaws.uk.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO)
Website: https://www.ico.org.uk

9. DO NOT TRACK FEATURES

Some browsers offer a “Do Not Track” feature. At present, we do not respond to these signals, but you can manage tracking preferences through your browser settings.

10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in legal requirements or how we operate. Any updates will be posted on this page, and the revision date will be updated accordingly.

11. HOW TO CONTACT US

If you have any questions about this Privacy Policy or how your data is handled, please contact Sandy Paws
Email: info@sandypaws.uk
Website: https://www.sandypaws.uk