Privacy Policy - The Paw Shed Ltd.

Effective Date: July 2026

1.0 Introduction

The Paw Shed Ltd. ("we", "us", "our") is committed to protecting your privacy and ensuring you have a positive experience on our website and when using our grooming services. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy applies to all personal data we collect from you when you book a grooming appointment, use our services, or interact with us online. Please read this policy carefully. If you have any questions, please contact us using the details provided at the end of this document.

2.0 Who We Are and Our Contact Details

The Paw Shed Ltd. is the data controller responsible for your personal data.

Address: 39 Lesbourne Road, Reigate | 8-10 Bell Street, Reigate

Website: www.thepawshed.dog

If you have any questions about this Privacy Policy or how we handle your data, please contact us using the details provided in section 9.0.

3.0 What Personal Data We Collect

We collect the following categories of personal data when you book or use our grooming services:

  • Identity Information: Your name, address, telephone number(s), email address

  • Pet Information: Your dog's name, breed, age, size, coat type, temperament, health conditions, medical history, behavioural issues, allergies, and vaccination status

  • Emergency Contact Information: Names and phone numbers of emergency contacts (as provided by you)

  • Payment Information: Card details (stored securely via MoEGO payment processor) for charging no-show fees as outlined in our Terms & Conditions

  • Service Records: Details of appointments attended, services requested, pricing, and grooming notes (e.g., health observations, behaviour during grooming)

  • Marketing Materials: Photographs and/or videos of your dog taken during appointments (only if you have consented to this; see section 4.0 below)

  • Communication Records: Emails, phone calls, and messages sent to or received from us

You are not required by law to provide any of this information, but we may not be able to provide grooming services without essential details such as your contact information, your dog's health and behavioural information, and emergency contact details.

4.0 Marketing Materials and Photography

During grooming appointments, our team may take photographs or video footage of your dog to use for marketing and promotional purposes on our social media channels (including Instagram) and website.

We will only use marketing materials if you have explicitly consented. At the time of booking or check-in, you will be asked whether you permit us to photograph or video your dog for these purposes. Your consent is entirely optional and will not affect your ability to book or receive services.

If you do not wish for images or videos of your dog to be used for marketing, please inform us in writing, and we will respect this request.

Photographs and videos used for marketing are retained for as long as they are relevant to our promotional activities. Once no longer needed, they will be securely deleted.

5.0 Why We Collect and Use Your Data

We collect and process your personal data for the following purposes:

5.1 Providing Grooming Services

We process your data to:

  • Confirm and manage your grooming appointments

  • Provide grooming services tailored to your dog's needs

  • Record health and behavioural information to ensure safe, appropriate grooming

  • Contact you regarding appointment details or to discuss your dog's welfare

Legal basis: Performance of contract (providing the services you have requested)

5.2 Payment Processing

We collect and securely store your payment card details (via our payment processor, MoEGO) to enable charging of no-show fees as outlined in our Terms & Conditions section 1.2.

Legal basis: Performance of contract (charging fees as agreed in our Terms & Conditions) and compliance with legal obligations

5.3 Emergency Veterinary Care

We process your emergency contact information and your dog's health data to facilitate immediate veterinary care if your dog becomes unwell whilst in our care. In emergencies, we may share your data (including contact details and your dog's medical history) with Priory Vets, Reigate, to enable them to provide emergency treatment.

Legal basis: Vital interests (protecting the health and welfare of your dog)

5.4 Marketing and Promotional Activity

If you have consented, we use photographs and videos of your dog for marketing purposes on our social media channels (including Instagram) and website to promote our services.

Legal basis: Consent (your explicit permission)

5.5 Business Communications

We process your contact information to respond to enquiries, confirm appointments, and communicate with you about our services. We may also send you promotional information about special offers or new services via Instagram or other channels you have opted in to.

Legal basis: Legitimate interests (improving our customer service and communicating about our business)

5.6 Compliance and Legal Obligations

We may process your data to comply with legal obligations, such as tax and accounting requirements, insurance claims, and health and safety regulations.

Legal basis: Compliance with legal obligations

6.0 How Long We Keep Your Data

We retain your personal data for the following periods:

  • Appointment Records and Service Data: Retained for three (3) years from the date of your last appointment. This allows us to provide continuity of care, manage future appointments, and meet tax and legal requirements. After three years, your data will be securely deleted.

  • Payment Card Details: Stored securely with our payment processor (MoEGO) and retained only as long as necessary for payment processing and no-show fee charging. You may request deletion of your card details at any time by contacting us in writing (see section 9.0).

  • Marketing Materials (Photos/Videos): Retained for as long as they are actively used for marketing. Once no longer needed, images and videos will be securely deleted within 30 days of removal from our social media channels.

  • Emergency Contact Information: Retained alongside your appointment records for three (3) years.

After the retention periods above, your data will be securely deleted or anonymised. In some cases, we may retain data longer if required by law (e.g., for tax purposes or insurance claims).

7.0 Who We Share Your Data With

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. However, we may share your data with the following organisations:

7.1 Priory Vets

In the event of an emergency, we may share your contact details, your dog's health information, and medical history with Priory Vets, Reigate, to enable them to provide emergency veterinary care. Priory Vets acts as a data processor on our behalf and is bound by confidentiality obligations. We have a Data Processing Agreement in place with Priory Vets to protect your data.

7.2 Payment Processor (MoEGO)

Your payment card details are processed by MoEGO, our third-party payment processor. MoEGO handles payment data securely and in compliance with PSD2 (Payment Services Directive 2) and industry security standards. We do not store full card details ourselves; they are encrypted and stored by MoEGO.

7.3 Legal and Regulatory Authorities

We may disclose your data if required by law, court order, or to comply with legal obligations (e.g., tax authorities, police, or regulatory bodies).

7.4 Other Sharing

We do not share your data with any other third parties except as outlined above. We do not share your data across the group (e.g., with The Paw & Whistle) for marketing or other purposes without your explicit consent.

8.0 Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

  • Right to Access: You have the right to request a copy of the personal data we hold about you.

  • Right to Rectification: You can request that we correct any inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten"): You can request deletion of your data, subject to certain legal exceptions (e.g., if we need it to meet tax obligations).

  • Right to Restrict Processing: You can ask us to limit how we process your data.

  • Right to Data Portability: You can request your data in a structured, machine-readable format (e.g., CSV) so you can transfer it elsewhere.

  • Right to Object: You can object to certain types of data processing, including marketing.

  • Right to Withdraw Consent: If you have consented to marketing photography or other optional processing, you can withdraw your consent at any time.

To exercise any of these rights, please contact us using the details in section 9.0. We will respond to your request within 30 days (or up to three months for complex requests). There is no charge for most requests, unless your request is manifestly unfounded or excessive.

9.0 How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or would like to update your data preferences, please contact us:

The Paw Shed Ltd.

39 Lesbourne Road, Reigate

8-10 Bell Street, Reigate

Website: www.thepawshed.dog

If you are not satisfied with how we have handled your data, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority for data protection.

ICO Contact: www.ico.org.uk | Phone: 0303 123 1113

10.0 Security of Your Data

We take data security seriously. Your personal data is protected by:

  • Secure storage of appointment records and customer data

  • Encrypted storage of payment card details via MoEGO

  • Restricted access — only authorised staff can access your data

  • Regular data security reviews and updates

However, no system is 100% secure. If a data breach occurs, we will notify you without undue delay and, where legally required, notify the ICO.

11.0 International Data Transfers

Your data is primarily stored and processed in the United Kingdom. We do not routinely transfer data outside the UK/EEA. If data transfers outside the UK occur (e.g., to a US-based payment provider), we ensure appropriate safeguards are in place under UK GDPR standards.

12.0 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated effective date. Your continued use of our services constitutes your acceptance of the updated Privacy Policy.

---

Document Version: 1.0 | Effective: July 2026

The Paw Shed Ltd. | 39 Lesbourne road Reigate | 8-10 Bell Street, Reigate