This Privacy Notice aims to demonstrate that Bimbles Dog Adventures has all the relevant processes and procedures in place to deal with those wishing to exercise their rights, and to assure patients that information held in all formats, is processed and shared, where appropriate, fairly, lawfully and securely.

General Data Protection Regulation (GDPR) states those who record and process personal information must be open about how the information is used, and must ensure personal data are:

• Processed lawfully, fairly and in a transparent manner
• Collected for specific, lawful and legitimate purposes
• Adequate, relevant and limited to what is necessary for the purpose
• Accurate and up to date
• Kept for no longer than necessary
• Protected and processed securely

When we process your data, our legal basis is usually that the use is necessary:

• For the provision of the services we provide (contract)
• To monitor and improve our website services (legitimate interests)
• To contact you to provide information relating to the services you have taken (legitimate interests)
• To contact you regarding other services we may offer (consent)

UK and European law determines how organisations can use personal information. The key legislation and guidance governing the use of information is listed below:

• General Data Protection Regulation 2016
• The Human Rights Act 1998
• Freedom of Information Act 2002
• Computer Misuse Act 1998
• Common law Duty of Confidentiality

Depending on the situation, where necessary we will share appropriate, relevant and proportionate personal information in compliance with the law, with the following:

• Payment service providers, where payments are made via our website
• Our insurers

Bimbles Dog Adventures does not sell personal details to any external or third party organisations.

Bimbles Dog Adventures is committed to taking all reasonable measures to ensure the confidentiality and security of sensitive personal data for which we are responsible, whether computerised or on paper.

All customers have the right to be informed if they have been involved in a personal data breach.

If you would like to receive a copy of your data held by Bimbles Dog Adventures, you have the right to request this under a Subject Access Request. There will usually be no charge for receiving copies of your data held by Bimbles Dog Adventures, but there may be a charge for additional copies or if you have received it previously.

If you are not satisfied with the response you receive you may refer your complaint to an independent arbiter such as the Information Commissioner.

Maintaining the confidentiality and security of personal information is of utmost importance to Bimbles Dog Adventures. When requesting information a form of identification may be required.  You will be advised if this is required after submitting your request.

You can submit a Subject Access request by clicking here.

Requests for access to your data should be completed within one month of receipt of request. This can be extended by up to an additional sixty (60) days, if the request is deemed complex, requires additional clarification or multiple requests have been made. Bimbles Dog Adventures will provide a clear explanation as to why this deadline might be extended in the event of a complex query.

If at any time you feel information held by Bimbles Dog Adventures relating to you is incorrect, please notify us and it will be investigated. Rectification requests on non factual information, or opinions, are unlikely to be successful but will be assessed on a case by case basis.

You may exercise your right to object to data being processed if you believe data about you is being collected, processed or shared unlawfully, and whilst this is investigated, it may be restricted until a decision is made. You have the right to withdraw your consent to data processing and usage at any time. On investigation, it is the responsibility of Bimbles Dog Adventures to justify why we are continuing to process the data or if the objection will be upheld.

You can submit a Rectification request by clicking here.

The right to erasure is also known as "the right to be forgotten" and in general refers to an individual's right to request the deletion or removal of personal information where there is no compelling reason for Bimbles Dog Adventures to continue using it.

As with other rights, there are particular conditions around this right and it does not provide individuals with an absolute right to be forgotten.

Individuals have the right to have their personal information deleted or removed in the following circumstances:

• When it is no longer necessary for the purpose for which it was collected. When Bimbles Dog Adventures no longer has a legal basis for using your personal information, for example if you gave us consent to use your personal information in a specific way and you withdraw your consent, we would need to stop using your information and erase it unless we had an overriding reason to continue to use it
• When you object to Bimbles Dog Adventures using your personal information and there is no overriding legitimate interest for us to continue using it
• If we have used your personal information unlawfully.
• If there is a legal obligation to erase your personal information, for example by court order

Bimbles Dog Adventures can refuse to deal with your request for erasure when we use your personal information for the following reasons:

• There is a legal requirement to retain your information
• The exercise or defence of legal claims

When using personal information our legal basis is usually that its use is necessary to provide our services to you. This means that in most circumstances we can refuse requests for erasure. However we will advise you of this as soon as possible following receipt of your request.

You can submit an Erasure request by clicking here.

You have the right to control how we use your personal information in some circumstances. This is known as the right to restriction. When processing is restricted, Bimbles Dog Adventures is permitted to store your personal information, but not further use it until an agreement is reached with you about further processing. We can retain enough information about you to ensure that your request for restriction is respected in the future.

Examples of ways you can restrict our processing would be:

• If you challenge the accuracy of your personal information, stop using it until we check its accuracy
• If our use of your personal information is found to be unlawful and you ask for restriction instead of full erasure we will restrict our processing
• If we no longer need your personal information but you need it to establish, exercise or defend a legal claim, we will restrict our processing

If we have shared your personal information with any individuals or organisations, if we restrict our processing, we will tell those individuals or organisations about our restriction if it is possible and not an unreasonable amount of effort.

Whenever we decide to lift a restriction on processing we will tell you.

You can submit a Restriction request by clicking here.

We will keep your data for up to two (2) years after your last appointment or contact with us.

It is Bimbles Dog Adventures' aim that that you receive the best possible service from us, and have a positive experience. However, if you have been unhappy with any aspects of the service provided to you, you can raise any issues with us.

If you wish to formally complain, please contact:

Bimbles Dog Adventures

Email: [email protected]

You can also direct any complaints to the Information Commissioners Office by contacting:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number

Website: ico.org.uk/concerns