Data Rights & Compliance

Data Controller and Contact Information

MD Puppies Online, operated by Celeste Farnell, acts as the data controller for the personal information processed through this website. The registered address for data protection correspondence is University of Bristol, Senate House, Tyndall Avenue, Bristol BS8 1TH, United Kingdom. For any matters regarding data protection, GDPR compliance, or privacy queries, data subjects may contact our Data Protection Officer by emailing [email protected]. We value transparency and provide full disclosure of data processing practices to ensure our users are well-informed of their rights under the United Kingdom's adaptation of the General Data Protection Regulation (GDPR).

Lawful Basis for Processing Personal Data

Our collection and processing of personal data is strictly based on legally recognised grounds under Article 6 of the UK GDPR. Where personal data is necessary for the fulfilment of our contractual obligations to you, your consent, the pursuit of our legitimate interests, or to comply with statutory or regulatory duties, each processing activity is bound by a documented lawful basis. When consent is the only applicable justification, users are given a clear, unambiguous option to grant or withdraw consent at any time, and the withdrawal of consent does not impact the legality of processing performed prior to its withdrawal. Legitimate interest assessments are regularly conducted to ensure the intended processing does not override users’ fundamental rights and freedoms.

Types of Data Collected and Uses

We collect a range of personal and non-personal data in order to provide accurate pharmaceutical information and enhance user interaction with the website. The types of data may include identification information such as name and contact details, usage data related to your browsing activity, technical data including IP address and device information, and user submissions in the form of enquiries or feedback. Such information may be processed for purposes including, but not limited to, delivering personalised content, responding to queries, analytics and website optimisation, ensuring network and information security, and compliance with applicable law. Data minimisation principles are rigorously observed to avoid retaining personal data unnecessarily and all information not relevant to our objectives is not collected or deleted promptly.

Data Retention and Safeguarding Practices

We retain personal information for a period necessary to fulfil the original purposes for which the data was collected, consistent with our legal, accounting, and reporting obligations. Where possible, retention periods are predetermined and documented, and when data is no longer necessary or upon an individual’s request in compliance with statutory limitations, data is erased or anonymised. Data integrity and confidentiality are maintained through robust technical and organisational safeguards, including but not limited to encryption, access controls, and frequent security assessments. Physical, electronic, and managerial procedures are in place to guard against accidental loss, destruction, or misuse of your personal information while in our custody.

Data Subject Rights Under GDPR

As per GDPR and relevant UK data protection laws, all users of MD Puppies Online are entitled to exercise specific rights regarding their personal data. These rights include the right to access, rectify, or erase personal data; the right to object to or restrict processing; the right to portability; and the right to withdraw consent where applicable. Users also hold the right to lodge a complaint with the Information Commissioner’s Office (ICO) if they believe their data has been mishandled. All requests related to data subject rights are processed promptly, usually within one calendar month, and identification may be required to verify the authenticity of requests made to our data protection contact at [email protected]. Our policies ensure no individual suffers detriment for exercising their statutory rights.

International Transfers of Personal Data

Personal data collected by MD Puppies Online is primarily stored and processed within the United Kingdom and the European Economic Area (EEA). Where transfers outside of these regions are necessary to deliver our services, such transfers shall only occur to countries recognised as providing an adequate level of data protection or under safeguards validated by the UK GDPR, such as Standard Contractual Clauses. Prior to any such transfer, thorough risk assessments are conducted and appropriate measures, contractual or otherwise, are enforced to protect data integrity, confidentiality, and data subject rights. We strive to maintain the highest standards of data protection, regardless of geographic location.

Cookies and Tracking Technologies

MD Puppies Online uses cookies and similar tracking technologies to ensure a seamless browsing experience, facilitate certain functionalities, and analyse website performance. Users are clearly informed about the types and purposes of each cookie category. Non-essential cookies are only used following the receipt of user consent via our cookie banner or settings panel, and preferences may be adjusted by the user at any time. All data derived from cookies is processed in accordance with the GDPR and relevant UK legislation, with full transparency as to the retention periods, categories involved, and methods by which data may be anonymised or erased upon user instruction or expiry of necessity.

Third-Party Data Sharing

We do not sell, rent, or lease personal data to third-party organisations for their marketing purposes. Limited data sharing with external processors or partners occurs solely when required to support our provision of website services, under the terms of binding contractual agreements that ensure the same standard of personal data protection as mandated by law. Where external parties are involved, due diligence is performed to assess their security practices and data protection capabilities. In all events, users are made aware of third-party involvement, and explicit consent is obtained where legally necessary before transmitting data beyond our organisational or geographic boundaries. Details of these recipients are available upon request by contacting [email protected].

Children's Data Protection

Although our website provides medical and pharmaceutical information accessible to a wide audience, we do not knowingly collect or maintain personal data from children under the age of 16 without parental consent. Should we become aware that children’s data has been collected without such consent, the information will be promptly deleted and parents or guardians will be notified if contact details are available. Users under the age of 16 are encouraged to use the website under adult supervision and seek consent before submitting any personal data. Our aim is to foster a safe and compliant digital environment for all users.