Legal
Last updated: 2 June 2026
We take the privacy and security of your personal information seriously. This policy explains what we collect, how we use it, and the rights you have under UK data protection law.
Whisker & Coat Ltd ("we", "us", "our") is the data controller for personal information collected through whiskerandcoat.co.uk and our booking, membership and shop services. You can contact us at whiskerandcoat@gmail.com.
We collect: (a) contact details you provide (name, email, phone, address); (b) information about your cat(s) such as breed, age and health notes you choose to share; (c) booking, membership and purchase history; (d) payment details, processed securely by Stripe, we never store full card numbers; (e) limited technical data such as IP address, browser type and basic analytics.
We use your data to deliver bookings, manage memberships, fulfil shop orders, send service-related communications, improve our website, comply with legal obligations and, only with your consent, send marketing updates. We do not sell your data to third parties.
We process personal data under the UK GDPR on the basis of (a) contract, to deliver the services you book; (b) legitimate interests, to run and improve our business safely; (c) legal obligation, for accounting and tax records; and (d) consent, for optional marketing communications, which you can withdraw at any time.
Personal data is stored on secure, encrypted infrastructure within the UK/EU. Access is restricted to authorised staff via role-based authentication. Customer accounts are protected by industry-standard password hashing and row-level security policies on our database. Payment information is handled exclusively by PCI-DSS compliant providers (Stripe). We review our security posture regularly.
We share limited data only with processors needed to run the service: Stripe (payments), Shopify (shop orders), Supabase (secure backend hosting), Resend (transactional email), Google (reviews integration) and our booking platform. Each provider is bound by data protection agreements.
We use essential cookies to keep you signed in and to remember your cart, plus minimal analytics cookies to understand site performance. No third-party advertising cookies are used. You can clear or block cookies in your browser settings.
Under UK GDPR you have the right to access, correct, delete, restrict or port your personal data, and to object to processing. To exercise any of these rights, email whiskerandcoat@gmail.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).
We retain booking and membership records for up to 7 years to meet legal and accounting obligations. Marketing data is held only while you remain subscribed. You may request deletion of your account at any time, subject to records we must legally retain.
We may update this policy occasionally. Material changes will be notified by email or via a prominent notice on this page. The "last updated" date below reflects the most recent revision.