Rule 4 · UK GDPR / Data Protection Act 2018
Privacy.
What data this site collects, why, how long we keep it, who we share it with, and what you can do about it. If anything isn't clear, email hi@jaycosten.co.uk and we'll explain.
Who I am
I'm Jay Costen, a sole trader based in Beverley, East Yorkshire, trading as Arwyn & The Pack. I walk dogs. For the purposes of UK GDPR I am the data controller for any personal data this site collects about you.
- Trading name: Arwyn & The Pack
- Address area: Beverley, East Yorkshire HU17
- Contact: hi@jaycosten.co.uk
What data I collect
The site itself collects almost nothing. The booking process (off-site, by email or in person) collects a bit more.
From this website
- Nothing automatic. No analytics. No cookies. No third-party trackers.
- If you click the "Send me a message" button, your email client opens a pre-filled mail to me — the website never sees what you type.
When you book a walk (off-site, by email or at the meet-and-walk)
- Your name, address, and contact number
- Your dog's name, breed, age, vaccination status, and any health/behaviour notes
- Your vet's name and number (for emergencies only)
- The key or access arrangement we agree (if I'm key-holding)
- Walk dates, times, and notes
Why I collect it
Lawful basis under UK GDPR Article 6:
- Booking data — Article 6(1)(b), to perform the service you've engaged me for (the walks).
- Emergency contact (vet) — Article 6(1)(f), legitimate interest in your dog's welfare during a walk.
- Accounting records — Article 6(1)(c), legal obligation (HMRC requires me to keep them).
How long I keep it
- Active client records: for as long as you're booking walks plus 12 months after the last walk.
- One-off enquiries (didn't become a client): 6 months, then deleted.
- Accounting / invoice records: 7 years, because HMRC requires it.
- Key arrangements: destroyed within 7 days of the engagement ending.
Who I share it with
Only with whoever is genuinely needed to deliver the service or run the business:
- Vercel (hosting, EU-region) — serves this site. Doesn't see any client data because the site doesn't collect any.
- Google Workspace (email, EU/US) — my email runs through it, so booking emails are stored there.
- Your vet — only in an emergency on a walk, and only what's necessary to get your dog seen.
- HMRC — only the bits the tax authority can legally require.
- My insurer — only if a claim is made; only the relevant facts.
I will never sell your data, never share it with marketing platforms, ad networks, or pet-product sales lists.
Your rights
Under UK GDPR you have the right to:
- Ask me what data I hold about you (a Subject Access Request)
- Ask me to correct anything that's wrong
- Ask me to delete your data (subject to HMRC retention on accounting records)
- Ask me to stop processing it
- Receive a copy in a portable format
- Object to processing based on legitimate interest
- Withdraw consent at any time (where consent is the basis)
To exercise any of these, email hi@jaycosten.co.uk. I'll reply within seven days and complete the request within 30 days, as UK GDPR requires.
If you're not happy
If you think I've handled your data poorly and emailing me hasn't resolved it, you have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.
Cookies
This site doesn't set any cookies. There's no analytics, no advertising pixel, no third-party tracking. If that ever changes, this page will say so first, and a consent banner will appear before anything fires.
Changes to this policy
If I change this policy, I'll update the "last updated" date at the top. If the change is material I'll email anyone who's a current client.