KVCANGUS LIMITED trading as Kidd Veterinary Centre takes the privacy of all of its customers, suppliers, partners and employees seriously and takes great care to protect their personal information.
The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) replaces the Data Protection Regulation (Directive 95/46/EC) from 25 May 2018. The Regulation aims to harmonise data protection legislation across EU member states, enhancing privacy rights for individuals and providing a strict framework within which commercial organisations can legally operate. Even though the UK has expressed its intention to leave the EU in March 2019, the GDPR will be applicable in the UK from 25th May 2018.
Your new rights under the GDPR are set out in this notice but will only apply once the GDPR becomes law on 25th May 2018.
Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
Who controls your personal data?
The Data Controller is Kidd Veterinary Centre a company registered in Scotland: Company Number SC528237. Registered office: 15 Academy St, Forfar, DD8 2HA If you have any questions or concerns about our use of your personal information, then please contact us at email@example.com or call 01307 463582.
What is personal data?
Personal data is data that can identify you as an individual. The personal data we collect or receive may include the following as applicable: Name Address Email address Telephone and mobile numbers
The information we use and where we get it from
Most of the information we use will have been provided by you. Kidd Veterinary Centre supplies a range of products and veterinary services. We may obtain your personal data from the following sources:
You (e.g. via contact over the phone or in person to register your details as a new client.
Completing registration forms, consent forms, signing up to a health plan, product orders or marketing subscriptions)
Conversations on the telephone or email.
When we provide veterinary care to your animal.
When you are referred by a vet to one of our specialist referral centres.
Our websites and software applications e.g. enquiry form or online service.
Visiting our stand at trade shows. Enter prize draws or competitions.
Choose to complete any surveys we send you. Use our microchipping service.
Comment on or review our products or services.
Have given a third party permission to share the personal information they hold about you with us.
Use our car parks or veterinary surgeries which may have CCTV systems operated for the security of both customers and colleagues and for the prevention of crime. These systems may record your image during your visit. We collect the personal data from the following types of people to allow us to undertake our business;
• Prospective and existing customers. • Supplier contacts to support our services. • Employees and business consultants.
You may have contacted us directly (e.g. over the phone) or we may have your details from our research / information already in the public domain. We are able to process your data if we have a legal basis for doing so.
How we will use your personal data:
The processing of your personal information may include:
Collecting and storing your personal data.
Notifying you of reminders, potential new products, services and offers.
To market our products and services. For the purposes of backing up information on our computer systems.
Why we process your personal data and our legal justification for doing so:
There are six legal bases for processing data but we will rely on (1) that the processing is necessary for the performance of a business transaction with you, (2) compliance with legal obligations, (3) that we have a legitimate interest in processing your personal data or (4) your consent to send direct marketing messages about products and services.
1. Entering into and performing a contract with you:
In order to provide our products and services, we may enter into a contract with you and/or a third party. In order to enter into a contract, we will need certain information, for example your name and address. A contract will also contain obligations on both your part and our part and we shall process your data as is necessary for the purpose of those in order to process your order on your behalf.
2. Compliance with legal obligations (regulatory and statutory obligations):
We must comply with a number of statutory provisions when providing our products and services, which necessitate the processing of personal data, which amongst other things requires us to: • Verify your business details • Maintain records for specific periods Where we engage in a contract with a business or person to supply our products or services, there are other statutory obligations that must be complied with including, tax, HMRC reporting requirements, and any other law or regulation. We are also required to comply with statutory and regulatory obligations relating to business generally, for example complying with tax, bribery, fraud/crime prevention and data protection legislation, and co-operating with regulatory authorities such as HMRC or the Information Commissioner’s Office.
3. Our legitimate interests (carrying on the commercial activity of the provision of products and services):
In providing our products and services, we will carry out some processing of personal data which is necessary for the purpose of our legitimate interests, which include:
• Retaining records of our dealings and transactions and where applicable, use such records for the purposes of establishing compliance with contractual obligations with customers or suppliers
• Addressing any query or dispute that may arise including establishing, exercising or defending any legal claims • Protecting our reputation
• Maintaining a backup of our system, solely for the purpose of being able to restore the system to a particular point in the event of a system failure or security breach Using your personal data to:
• Assess suitability and contact you regarding our products and services
• Collate market information or trends on products and services source potential products and services as part of our overall services
• Personalise your experience and our offering, whether via our website or otherwise
• This means that for our commercial viability and to pursue these legitimate interests, we may continue to process your personal data.
• To process the fees due for any treatment
• To contact clients about their pet or about their account with the Practice
• To deliver a safe and secure service by helping to prevent and detect fraud. (We may need to disclose information to assist legal or debt recovery processes)
• To contact clients in the event that an unpaid balance remains on their account, requesting prompt settlement or a commitment to settle the account within a mutually agreed time period. In the event that the balance remains unpaid, we reserve the right to engage the services of a debt collection agency, and will provide details to that third party to facilitate their contact with the client in question as part of the debt collection process.
• We will ask for clients’ consent to send, by text message, e-mail or post, reminders of treatments due for their animal or animals such as vaccination boosters, wormers and flea treatments.
4. Consent to our processing of your data:
We may process your personal data on the basis that you have consented to us doing so for a specific purpose, for example, if you have purchased from us previously you may have consented to our processing of the data that has been provided for the purpose of informing you of new products, services or offers considering your suitability either by previous choice of products purchased or by business type. In other cases, you may have provided your written or verbal consent to the use of your data for a specific reason such as receiving marketing updates on some of our additional services.
• You may withdraw your consent to our processing of your personal information for a particular purpose at any stage. Withdrawal of consent will not have any effect on the lawfulness of any processing based on consent before its withdrawal.
Who we share personal data with:
We may disclose your personal information to the following categories of recipients:
• to specialist referral centres or specialist veterinary hospitals, when we refer your pet for specialist diagnosis or treatment;
• to other veterinary professionals, if you request that we transfer your pet’s patient history on transferring to another veterinary surgery;
• to insurance companies with whom you have insured your pet;
• to laboratories and other suppliers who you have agreed we may provide your details to and who require them in order to provide services in relation to your pet;
o IT companies who support our Websites, Vet Management System and other business systems;
o Direct marketing companies or other third parties who help us manage electronic communications with you;
o Google, Facebook, Instagram, Twitter and similar platforms to show you services that might interest you while you’re browsing the internet; This is based on either your marketing consent or your acceptance of cookies, tracking pixels or similar tracking technology on our websites, as explained further under the heading “Cookies” below; and/or
o Debt Collection Agency
o Data insight and data analysis companies (to provide us with tools to analyse the data which we hold);
o Promotional partners;
o Customer review companies (so you can leave feedback and we can improve our service to you); and/or
o Competition or prize-draw partners
• to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights or apply our Terms and Conditions, or (iii) to protect your vital interests or those of any other person;
• to any other person with your consent to the disclosure.
Where we share your personal information with third party service providers and partners we apply a policy to ensure your personal information is safe and in order to protect your privacy. Our policy requires:
• We provide only the information they need to perform their specific services.
• They may only use your data for the exact purposes we specify in our contract with them.
• We work closely with them to ensure that your privacy is respected and protected at all times.
• If we stop using their services, any of your personal information held by them will either be deleted or rendered anonymous (subject to applicable law).
If you have any questions about the third parties we share your personal information with, please contact us.
If you do not wish to provide us with necessary data:
There may be circumstances where we require you to provide data which is necessary for us to meet statutory or contractual obligations, or perform our services. If you do not wish to provide us with information we request then please notify us. However, please be aware that as a result we may be unable to provide you, or the party you represent, with a service, and in some cases, this may result in a breach of the contract we have with you or a third party you represent.
Data Security and Confidentiality
It is our policy to ensure, in so far as is reasonably practicable, that our systems and records are secure and not accessible to unauthorised third parties in line with contemporary practice.
Changes to this Privacy Notice
This Privacy Notice is regularly reviewed and may be updated from time to time to reflect changes in our business, or legal or commercial practice.
• We take the protection of your personal data very seriously and it is important that you know your rights within that context, which include rights to:
• Request a copy of the personal data that we hold about you. If you would like to make a request for information, please contact firstname.lastname@example.org
• Object to our processing of your data where that processing is based upon legitimate interest and there are no compelling grounds for the continued processing of that data
• Request that we restrict processing of your data in certain circumstances
• Request that data is erased where the continued use of that data cannot be justified. Object to any decision, which significantly affects you, being taken solely by a computer or via another automated process
• Withdraw your consent to our processing of your personal data for a particular purpose at any stage.
• Request that direct marketing by us to you is stopped If you are dissatisfied about any aspect of the way in which your data is processed you may, in the first instance refer the matter to: email@example.com