Privacy Policy
WhatTheVet is a UK veterinary price comparison service operated as a sole trader trading as WhatTheVet, Staffordshire, UK. This policy explains what personal data we collect, how we use it, and your rights under UK GDPR (UK General Data Protection Regulation).
1. Who is the Data Controller?
WhatTheVet is the data controller for personal data collected through this website and the WhatTheVet mobile application. Contact: hello@whatthevet.co.uk
2. What Data We Collect
Data you provide
- Email address - if you join our waitlist or contact us directly
- Message content - if you email us or use a contact form
Data collected automatically
- Search queries and filters - e.g. location, service type, entered during use of the app or website
- Approximate location - only if you grant permission via your device, to show nearby practices. We do not store precise GPS coordinates.
- Usage analytics - pages visited, session duration, device type, browser. Collected via Plausible Analytics (privacy-first, no cross-site tracking, no personal identifiers stored).
- Technical data - IP address (anonymised), referring URL, and standard server log data retained for security and performance purposes.
We do not require account creation. We do not collect your name unless you contact us directly.
3. Legal Basis for Processing
- Legitimate interests (Article 6(1)(f) UK GDPR) - analytics and service improvement, where our interest in understanding usage does not override your privacy rights
- Consent (Article 6(1)(a)) - analytics cookies, where required by UK PECR, obtained via our cookie banner
- Contract performance (Article 6(1)(b)) - to deliver the service when you use it
- Compliance with legal obligations (Article 6(1)(c)) - where required by law
4. How We Use Your Data
- To return relevant vet price results based on your search
- To understand how the service is used and improve it
- To respond to enquiries you send us
- To send launch or product updates if you have joined our waitlist (you may unsubscribe at any time)
- To maintain the security and integrity of our systems
We do not sell your data to third parties. We do not use your data for automated decision-making or profiling.
5. Third-Party Services
We use the following services which may process data on our behalf as data processors:
| Service | Purpose | Data location |
|---|---|---|
| Netlify | Website hosting and form submissions | EU / US (Standard Contractual Clauses) |
| Plausible Analytics | Privacy-first usage analytics | EU (Germany) |
| Supabase | Waitlist data storage | EU |
| Google Play Store | Android app distribution | Google Privacy Policy applies |
| Apple App Store | iOS app distribution | Apple Privacy Policy applies |
Each of these processors is bound by their own privacy terms and, where applicable, data processing agreements with us. We do not share your personal data with vet practices listed on the platform.
6. Cookies
We use the following categories of cookies:
- Essential cookies - required for the site to function (e.g. security, preferences). No consent required.
- Analytics cookies - used to understand usage patterns via Plausible Analytics. Only set with your consent via our cookie banner.
You can withdraw consent at any time by clearing cookies or adjusting your browser settings.
7. Data Retention
- Waitlist emails - retained until you unsubscribe or request deletion
- Contact enquiries - retained for up to 2 years for correspondence purposes
- Analytics data - aggregated and anonymised; no retention limit applies to individual-level data as none is stored
- Server logs - retained for up to 90 days for security purposes
8. Your Rights Under UK GDPR
You have the right to:
- Access - request a copy of personal data we hold about you
- Rectification - request correction of inaccurate data
- Erasure - request deletion of your data ("right to be forgotten")
- Restriction - request we limit processing of your data
- Portability - receive your data in a structured, machine-readable format
- Object - object to processing based on legitimate interests
- Withdraw consent - at any time where processing is based on consent
To exercise any of these rights, contact us at hello@whatthevet.co.uk. We will respond within one calendar month as required by UK GDPR.
If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Data Security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. All data is transmitted over HTTPS. Access to stored personal data is restricted to the data controller.
10. Children's Privacy
WhatTheVet is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this policy from time to time. Where changes are material, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the service after changes have been posted constitutes acceptance of the updated policy.
12. Contact
WhatTheVet, trading as a sole trader
Staffordshire, UK
hello@whatthevet.co.uk