GDPR Compliance Statement

Our Commitment to GDPR

Glossy Flip is committed to compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we fulfill our obligations and respect your data protection rights.

Data Controller Information

Data Controller: Glossy Flip
Registered Address: 127 Ashford Gardens, Bristol BS7 9QT, United Kingdom
Contact Email: [email protected]
Data Protection Officer: Available upon request

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities (e.g., marketing communications)
• Contract Performance: To fulfill our contractual obligations when providing pet care services
• Legal Obligation: To comply with legal and regulatory requirements
• Legitimate Interests: For business operations, fraud prevention, and service improvements where not overridden by your rights

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request access to your personal data. We will provide you with a copy of your data in a commonly used format within 30 days of your request.

Right to Rectification

You can request correction of inaccurate or incomplete personal data. We will update your information promptly upon verification.

Right to Erasure

You may request deletion of your personal data under certain circumstances, including:

• The data is no longer necessary for the purposes collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Note: We may retain certain data where required by law or for legitimate business purposes (e.g., financial records, professional care documentation).

Right to Restriction of Processing

You can request that we restrict processing of your personal data when:

• You contest the accuracy of the data
• Processing is unlawful but you don't want data erased
• We no longer need the data but you need it for legal claims
• You have objected to processing pending verification of legitimate grounds

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time. This does not affect the lawfulness of processing prior to withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: glossy-flip.com

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with:

• Your full name and contact information
• Details of the specific right you wish to exercise
• Any relevant supporting information

We may require proof of identity before processing your request. We will respond within 30 days, or inform you if we need additional time.

Data Categories We Process

Data Category	Purpose	Legal Basis
Identity Data (name, contact details)	Service delivery, communication	Contract, Consent
Pet Information (name, breed, health)	Care provision, record keeping	Contract, Legal Obligation
Financial Data (payment information)	Transaction processing	Contract, Legal Obligation
Usage Data (website interactions)	Service improvement, analytics	Legitimate Interests
Marketing Data (preferences)	Communication about services	Consent

Data Sharing and Transfers

We only share your data with:

• Service providers who process data on our behalf under strict contractual obligations
• Professional partners (e.g., veterinarians) with your explicit consent
• Legal and regulatory authorities when required

We ensure appropriate safeguards are in place for any international data transfers, including Standard Contractual Clauses approved by the European Commission.

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security audits and vulnerability assessments
• Staff training on data protection principles
• Incident response procedures for data breaches

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the ICO within 72 hours of becoming aware
• Inform affected individuals without undue delay where high risk exists
• Provide details of the breach, potential consequences, and mitigation measures

Children's Data

We do not knowingly process personal data of individuals under 18 years of age without parental consent. Our services are intended for adults arranging pet care.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Data Retention

We retain personal data only as long as necessary:

• Active customer records: Duration of relationship plus 2 years
• Pet care records: 7 years (professional standards requirement)
• Financial records: 6 years (legal requirement)
• Marketing data: Until consent is withdrawn

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through our website and, where appropriate, directly to you.

Contact Us

For questions about GDPR compliance or to exercise your rights, contact us:

Glossy Flip
127 Ashford Gardens
Bristol BS7 9QT
United Kingdom
Email: [email protected]