GDPR Compliance

Last updated: May 20, 2026

Our Commitment to GDPR

We are committed to complying with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Economic Area and the United Kingdom. This page outlines how we meet our obligations under GDPR and how you can exercise your rights.

Data Controller Information

Organization: speedy-circuit
Address: 127 Riverside Gardens, Bristol BS8 4PQ, United Kingdom
Email: [email protected]

Your Rights Under GDPR

Right to Access (Article 15)

You have the right to obtain confirmation that we are processing your personal data and to access that data. You can request a copy of the personal data we hold about you.

How to exercise: Email [email protected] with "Data Access Request" in the subject line. We will respond within one month.

Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete data completed.

How to exercise: Contact us with details of the information that needs correction. We will update our records promptly.

Right to Erasure (Article 17)

You have the right to request deletion of your personal data in certain circumstances, including when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Limitation: We may need to retain certain data for legal or regulatory compliance purposes, particularly medical records which must be retained for seven years.

Right to Restriction of Processing (Article 18)

You have the right to request that we restrict processing of your personal data in certain situations:

• You contest the accuracy of the data
• Processing is unlawful but you prefer restriction to erasure
• We no longer need the data but you need it for legal claims
• You have objected to processing pending verification of our legitimate grounds

Right to Data Portability (Article 20)

You have the right to receive personal data you provided to us in a structured, commonly used, and machine-readable format. You also have the right to request that we transfer this data directly to another controller where technically feasible.

Applies to: Data processed based on consent or contract performance, and processed by automated means.

Right to Object (Article 21)

You have the right to object to processing based on legitimate interests or for direct marketing purposes. If you object to direct marketing, we will cease such processing immediately.

Rights Related to Automated Decision-Making (Article 22)

We do not use automated decision-making or profiling that produces legal or similarly significant effects. All decisions regarding your pet's care are made by qualified professionals.

Lawful Bases for Processing

Consent (Article 6(1)(a))

We process certain data based on your explicit consent, such as marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Contract Performance (Article 6(1)(b))

We process data necessary to provide the animal care services you have requested and to fulfill our contractual obligations.

Legal Obligation (Article 6(1)(c))

We process data when required by law, including maintaining medical records and complying with professional regulations.

Legitimate Interests (Article 6(1)(f))

We process data for our legitimate business interests, such as improving our services, preventing fraud, and ensuring network security. We have conducted legitimate interest assessments and implemented appropriate safeguards.

Data Protection Principles

We process all personal data in accordance with GDPR principles:

• Lawfulness, fairness, and transparency: We process data lawfully and inform you about our processing activities
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes
• Data minimization: We only collect data that is adequate, relevant, and necessary
• Accuracy: We take steps to ensure data is accurate and up to date
• Storage limitation: We retain data only as long as necessary
• Integrity and confidentiality: We implement appropriate security measures
• Accountability: We demonstrate compliance with GDPR principles

Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for processing activities that are likely to result in high risks to individual rights and freedoms. This ensures we identify and mitigate privacy risks before beginning new processing activities.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also report qualifying breaches to the Information Commissioner's Office within 72 hours of becoming aware of the breach.

International Data Transfers

When we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Binding Corporate Rules for intra-group transfers

Third-Party Processors

When we engage third-party processors to handle personal data on our behalf, we:

• Conduct due diligence to ensure they can provide sufficient guarantees
• Establish data processing agreements that meet GDPR requirements
• Ensure they only process data according to our instructions
• Monitor their compliance with data protection obligations

Children's Data

We do not knowingly process personal data of individuals under 16 years of age without parental consent. Our services are intended for adults responsible for pet care.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us:

Email: [email protected]
Subject line: Specify your request (e.g., "Data Access Request", "Right to Erasure")
Include: Your full name, contact information, and details of your request

We will respond to your request within one month. In complex cases, we may extend this by an additional two months and will inform you of any extension.

We do not charge a fee for most requests unless they are manifestly unfounded, excessive, or repetitive.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority.

UK Supervisory Authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated to you via email or prominent notice on our website.

Contact Our Data Protection Officer

For questions about GDPR compliance or data protection matters, contact us at [email protected] with "Data Protection" in the subject line.