Last updated: 17 February 2026
Wolds Canine Massage is governed by UK laws and is the data controller for pages starting with woldscaninemassage.co.uk (for example https://woldscaninemassage.co.uk/contact.html) and for client records held to deliver canine massage services.
If you follow a link to content provided by someone other than Wolds Canine Massage, please be aware that a different organisation will:
- be the data controller
- be responsible for processing any data you share with them
- publish and manage their own privacy policy with details of how to contact them
A data controller determines how and why personal data is processed. For more information, please visit the Information Commissioner's Office website.
You can find contact details on our contact us page.
How we use our record management system
We use an internal record management system to securely manage customer and patient records. This system is for internal business use only. Customers do not log in to this system.
To run this system, we use trusted data processors including Vercel (application hosting and infrastructure) and Supabase (database and supporting platform services).
What data we collect
Depending on how you use Wolds Canine Massage we may collect:
- your name and contact details (for example email address, telephone number and address)
- your dog's details, including relevant medical history, treatment notes and veterinary referral/consent information
- appointment, communication and service history records
- technical information such as Internet Protocol (IP) address and browser version when you use our website
- website usage information collected using cookies and page tagging techniques
We use Google Analytics to collect information about how you use the public website and how the website performs during your visit. This may include IP addresses. We do not use Google Analytics to store direct identifiers such as your name or address.
Google Analytics processes information about:
- the pages you visit on Wolds Canine Massage
- how long you spend on each page
- how you got to the site
- what you click on while you are visiting the site
Why we need your data
Most personal information we process is provided directly by you so that we can deliver canine massage services safely and effectively.
We use your data to:
- book and manage appointments
- assess suitability for treatment and keep clinical notes
- liaise with your veterinary practice where required and with your agreement
- provide follow-up support and aftercare advice
- respond to enquiries and feedback
- monitor and improve website performance and security
- maintain business and legal records
Lawful bases we rely on
Under UK GDPR and data protection law, we rely on one or more of the following lawful bases depending on the activity:
- Contract - where processing is necessary to provide services you have requested.
- Legal obligation - where we must keep records to meet legal, regulatory, insurance or tax requirements.
- Legitimate interests - to operate and improve our services, keep records accurate, and protect our systems and business from misuse.
- Consent - where you have given clear permission (for example certain optional communications). You can withdraw consent at any time by contacting us.
How long we keep personal data
- Dog clinical records and veterinary consent/referral information are normally retained for 7 years from last treatment unless a longer period is required by law or insurance.
- General enquiry records are retained only as long as needed to respond and manage follow-up enquiries.
- Website analytics and technical logs are retained according to operational and security needs.
How we store and protect your data
We use appropriate technical and organisational measures to protect personal information, including access controls, secure transmission, and restricted staff access on a need-to-know basis.
Where personal data is processed by third-party providers, we put contractual safeguards in place. Where data is transferred outside the UK, we rely on appropriate transfer mechanisms required by data protection law.
Your data protection rights
Under data protection law, you have rights including:
- Your right of access - You have the right to ask us for copies of your personal information.
- Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we usually have one month to respond.
To protect your data, we may ask for proof of identity before fulfilling rights requests. Please contact us if you wish to make a request.
How to complain
If you have concerns about our use of your personal information, you can contact us to make a complaint.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO's address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
