GDPR Compliance

Last updated: January 2024

At brisk-aurora, we are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

brisk-aurora is the data controller responsible for your personal data. Our contact details are:

brisk-aurora
47 Kirkstall Lane
Leeds, LS6 3EJ
United Kingdom
Email: [email protected]

Your Rights Under GDPR

Under data protection law, you have the following rights:

Right to Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.

Right to Rectification

You have the right to request that we correct any personal data that is inaccurate or incomplete. We will make corrections promptly upon verification.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected. This right is not absolute and may be subject to legal retention requirements.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling. We do not currently use automated decision-making processes.

Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Contract: Processing necessary to fulfil our service agreement with you
• Legitimate Interests: Processing necessary for our legitimate business interests, balanced against your rights
• Consent: Where you have given clear consent for specific processing activities
• Legal Obligation: Processing necessary to comply with our legal obligations

Data We Collect

We collect the following categories of personal data:

• Identity data (name)
• Contact data (email address, postal address)
• Service data (information about your pet, appointment history)
• Technical data (browser type, IP address when visiting our website)
• Communication data (your correspondence with us)

Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Secure storage of physical documents
• Password protection and access controls for digital systems
• Regular security reviews and updates
• Staff training on data protection

Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected. Typical retention periods include:

• Service records: 7 years after last service
• Marketing preferences: until you withdraw consent
• Website analytics: 26 months

International Transfers

We do not routinely transfer personal data outside the United Kingdom. If any transfer becomes necessary, we will ensure appropriate safeguards are in place.

Exercising Your Rights

To exercise any of your rights, please contact us using the details provided above. We may need to verify your identity before processing your request. There is no fee for most requests, though we may charge a reasonable fee for excessive or unfounded requests.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: ico.org.uk

Updates to This Information

We may update this GDPR information from time to time. Any significant changes will be communicated to you where appropriate.