GDPR Compliance

Our Commitment to Data Protection

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page explains how we comply with these regulations and what rights you have regarding your personal information.

Data Controller Information

For the purposes of GDPR, the data controller is:

branch-loop
142 Argyle Street
Glasgow G2 8BL
Scotland, United Kingdom
Email: [email protected]

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide grooming services you have requested
• Legitimate Interest: Maintaining service records and improving our business operations
• Consent: For marketing communications, which you can withdraw at any time
• Legal Obligation: Complying with accounting and tax requirements

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You can request a copy of all personal information we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.

Right to Rectification

If any personal information we hold is inaccurate or incomplete, you have the right to have it corrected. We will update your records promptly upon notification.

Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes it was collected, when you withdraw consent, or when you object to processing. Note that we may retain certain information if required by law or for legitimate business purposes.

Right to Restrict Processing

You can request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You can request to receive your personal data in a structured, machine-readable format and have it transferred to another service provider where technically feasible.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing that occurred before withdrawal.

How to Exercise Your Rights

To exercise any of these rights, send a written request to [email protected] or write to us at the address above. Please include:

• Your full name and contact information
• A clear description of which right you wish to exercise
• Any relevant details that help us locate your information

We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request.

Data Retention

We retain personal data for the following periods:

• Appointment records and service history: 3 years from last service
• Email correspondence: 2 years from last contact
• Financial records: 7 years as required by UK tax law
• Marketing consent records: Until consent is withdrawn

After these periods, data is securely deleted unless you request earlier removal or we are required to retain it by law.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission
• Secure server storage with access controls
• Regular security assessments
• Staff training on data protection
• Confidentiality agreements with third-party processors

International Data Transfers

Your personal data is stored and processed within the United Kingdom. We do not transfer data outside the UK or European Economic Area.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Information

We may update this GDPR compliance information to reflect changes in our practices or legal requirements. Significant changes will be communicated via email to existing customers.