GDPR Compliance

Last updated: May 22, 2026

Our Commitment to GDPR

Dawn Arc is fully committed to compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We take your data protection rights seriously and have implemented comprehensive measures to ensure your personal information is processed lawfully, fairly, and transparently.

Legal Basis for Processing

We process your personal data under the following lawful bases:

• Consent: When you explicitly agree to us processing your information for specific purposes
• Contract: When processing is necessary to fulfill our service agreement with you
• Legal Obligation: When we must process data to comply with legal requirements
• Legitimate Interests: When processing serves our legitimate business interests without overriding your rights

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You can request a copy of all personal data we hold about you. We will provide this information in a commonly used electronic format within one month of your request.

Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to have it corrected. Contact us immediately if you notice any errors.

Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data in certain circumstances, including:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Note: We may need to retain certain information to comply with legal obligations or establish legal claims.

Right to Restriction of Processing

You can request that we limit how we use your data in specific situations, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we have compelling legitimate grounds that override your interests.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

How to Exercise Your Rights

To exercise any of these rights, please contact us:

• Email: [email protected]
• Post: Dawn Arc, 42 Meadowbrook Lane, Harrogate, North Yorkshire HG2 8DN, United Kingdom

We will respond to your request within one month. In complex cases, we may extend this by two additional months and will inform you of any delay.

Data Protection Officer

For data protection inquiries, contact our Data Protection Officer at [email protected].

Data Security Measures

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication protocols
• Staff training on data protection
• Secure data storage and backup systems
• Incident response and breach notification procedures

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Data Transfers

We primarily process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

Children's Data

We do not knowingly process personal data of children under 16 without parental consent. If you believe we have collected such information, please contact us immediately.

Third-Party Processing

We carefully select third-party service providers and ensure they comply with GDPR requirements. Data Processing Agreements are in place with all processors who handle your personal data on our behalf.

Retention Periods

We retain personal data only for as long as necessary:

• Customer records: 7 years (financial records requirement)
• Pet health records: In accordance with veterinary standards
• Marketing consents: Until withdrawn or after 3 years of inactivity
• Website analytics: 26 months

Right to Lodge a Complaint

If you believe we have not handled your data properly, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Phone: 0303 123 1113
Website: ico.org.uk

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through our website and, where appropriate, by email.

Contact Us

For any questions about GDPR compliance or data protection:

Dawn Arc
Email: [email protected]
Address: 42 Meadowbrook Lane, Harrogate, North Yorkshire HG2 8DN, United Kingdom