GDPR Compliance

Last updated: May 2024

Soft Forest is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

Soft Forest is the data controller responsible for your personal data. If you have any questions about this policy or our privacy practices, please contact us at [email protected].

Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Contract: Processing necessary for the performance of a contract with you (providing pet care services)
• Legitimate interests: Processing necessary for our legitimate interests, such as improving our services
• Consent: Where you have given explicit consent for specific processing activities
• Legal obligation: Processing necessary to comply with legal requirements

Your Rights Under GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We will respond to such requests within one month.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data where we are relying on legitimate interests as the lawful basis for processing.

Rights Related to Automated Decision Making

You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not currently use automated decision-making processes.

Data Security

We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data where appropriate
• Regular testing and evaluation of security measures
• Staff training on data protection
• Access controls to limit who can view personal data

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and communicate the breach to you without undue delay.

International Transfers

We do not transfer your personal data outside the United Kingdom. All data is processed and stored within the UK.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). However, we would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

Contact Information

For any questions or to exercise your rights, please contact us:

Email: [email protected]
Address: 47 Meadow Lane, Westbury Park, Bristol BS6 7NQ