Portal Privacy Notice

Starter draft — solicitor review pending before final launch.

1. Who this notice is for

This notice covers personal data collected from users of the CompareMyVet Portal at comparemyvet.uk/portal (and its subdomain alias portal.comparemyvet.uk during the migration phase). Pet owners using the main CompareMyVet site are covered by our main privacy notice.

2. Data we collect

Account data: your email address (used for magic-link login).
Organisation data: the name and kind (independent / group) of the practice-side entity you represent.
Claim data:the practice you are claiming, your email domain and the practice’s website domain (used by our automated verification ladder), the timestamp of your claim, and any moderator notes.
Submission data: any information you submit about a practice (opening hours, phone numbers, prices, etc.), together with evidence URLs you provide.
Audit data: every claim and submission you make is logged with a timestamp and outcome. See §5 Retention.

3. Legal basis (UK GDPR)

Our lawful basis for processing this data is:

Contract: to operate the portal service you have signed up for (Art. 6(1)(b)).
Legitimate interest: to verify the authenticity of claims and maintain an accurate public dataset (Art. 6(1)(f)).

4. Who we share it with

Supabase (our backend infrastructure provider), hosted in West Europe.
Namecheap Private Email (our transactional email provider) for account setup and moderator notifications.
We do not sell your personal data. We do not share it with marketing partners.

5. Retention

Audit logs are retained for six years (subject to solicitor confirmation). Live account and organisation records are retained for as long as your account is active, plus six years after closure.

6. Your rights

You have the standard UK GDPR rights: access, rectification, erasure, portability, restriction, and objection. To exercise any of these, email hello@comparemyvet.uk.

7. Cookies and sessions

We use a first-party session cookie scoped to portal.comparemyvet.uk (and later comparemyvet.uk once the routing migration lands — sessions do NOT persist across that migration; you will re-authenticate once). The cookie is strictly necessary for the portal to function and does not require additional consent under PECR.

8. Contact

For any privacy questions, email hello@comparemyvet.uk.