GDPR Compliance

Last updated: May 21, 2026

Our Commitment to GDPR

Zesty Scrub is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we comply with these regulations.

Data Controller Information

Zesty Scrub is the data controller for the personal information we process. Our contact details are:

Email: [email protected]
Address: 45 Meadowbrook Lane, Kensington, London, W8 6TQ, United Kingdom

Your Rights Under UK GDPR

1. Right to Be Informed

You have the right to clear information about how we use your personal data. This information is provided in our Privacy Policy.

2. Right of Access

You can request a copy of all personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond within one month of receiving your request.

How to request: Email [email protected] with "Subject Access Request" in the subject line.

3. Right to Rectification

If your personal data is inaccurate or incomplete, you can request that we correct or complete it.

4. Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data in certain circumstances, including:

  • The data is no longer necessary for the purpose it was collected
  • You withdraw consent (where consent was the legal basis)
  • You object to processing and there are no overriding legitimate grounds
  • The data was unlawfully processed

Note: We may be required to retain certain data for legal or regulatory purposes.

5. Right to Restrict Processing

You can request that we limit how we use your data in certain situations:

  • You contest the accuracy of the data
  • Processing is unlawful but you don't want the data erased
  • We no longer need the data but you need it for legal claims
  • You've objected to processing pending verification

6. Right to Data Portability

You can request that we provide your personal data in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller.

7. Right to Object

You can object to:

  • Processing based on legitimate interests
  • Direct marketing (including profiling)
  • Processing for research or statistical purposes

8. Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or significantly affects you.

How to Exercise Your Rights

To exercise any of these rights, please contact us:

  • Email: [email protected] (preferred method)
  • Post: Zesty Scrub, 45 Meadowbrook Lane, Kensington, London, W8 6TQ

We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this by two months and will inform you of the extension.

Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Contract: Processing is necessary to fulfil our service agreement with you
  • Consent: You have given clear consent for specific processing activities
  • Legitimate interests: Processing is necessary for our legitimate business interests
  • Legal obligation: Processing is necessary to comply with the law

Data Security Measures

We implement appropriate technical and organisational measures to ensure data security, including:

  • Encryption of data in transit and at rest
  • Access controls and authentication
  • Regular security assessments
  • Staff training on data protection
  • Secure backup procedures

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours. If the breach poses a high risk, we will also notify affected individuals without undue delay.

International Data Transfers

We primarily process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as:

  • Adequacy decisions
  • Standard contractual clauses
  • Binding corporate rules

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.

Typical retention periods:

  • Booking records: 3 years
  • Email correspondence: 2 years
  • Marketing consent: Until withdrawn

Children's Data

We do not knowingly process personal data of children under 16 without parental consent. Our services are intended for adults booking appointments for their pets.

Complaints

If you believe we have not complied with UK GDPR, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Updates to This Information

We may update this GDPR information from time to time. The latest version will always be available on our website with the updated date noted at the top.

Contact Us

For any questions about our GDPR compliance or to exercise your rights, please contact:

Email: [email protected]
Address: 45 Meadowbrook Lane, Kensington, London, W8 6TQ, United Kingdom