GDPR & Privacy
Last updated: 16 February 2026
This privacy policy explains how Lauren Jackson trading as Maple Tree Dog Training (the Controller, “we”, “us”, “our”) collects, uses, stores, shares and protects personal data when you use our dog training services or visit www.mapletreedogtraining.co.uk. It also explains your rights under UK GDPR and how to exercise them.
Data Controller and Contact
Data Controller
Name: Lauren Jackson trading as Maple Tree Dog Training
Website: www.mapletreedogtraining.co.uk
Contact: Use the contact form or the email address shown on our website to get in touch about data protection or to exercise your rights.
Personal Data We Collect
We collect personal data that is necessary to provide dog training services and to manage our relationship with you. This may include: name; contact details (email, phone, address); dog details (breed, age, health, behaviour notes); appointment records; payment and invoicing information; training progress notes; photographs or video of training sessions where consent is given; and communications you send to us.
How We Collect Personal Data
We collect data when you:
-
Contact us via the website, email, phone, or in person.
-
Book or attend training sessions or assessments.
-
Provide information about your dog’s health or behaviour.
-
Consent to photographs, videos, or referrals.
-
Make payments or receive invoices.
Purposes of Processing and Lawful Bases
We process personal data for the following purposes and on these lawful bases:
-
To provide dog training services and fulfil contracts with you (performance of a contract).
-
To manage bookings, payments and communications (performance of a contract; legitimate interests for administration).
-
To send service-related messages and optional marketing where you have given consent (consent).
-
To make referrals to other relevant services (for example, veterinary, behaviourists, groomers) where you have consented to the referral (consent).
-
To comply with legal obligations (legal obligation).
-
To maintain records and improve services (legitimate interests), where those interests do not override your rights.
The UK Information Commissioner’s Office explains the lawful bases and individuals’ rights in detail.
Referrals and Sharing with Third Parties
-
Referrals are consent based. We will only pass your personal data to other professionals or organisations (for example, vets, behaviourists, groomers, or other specialist services) if you have given explicit consent or where there is another lawful basis. You will be informed which information will be shared and with whom before any referral is made.
-
Limited sharing for service delivery. We may share the minimum necessary information with third parties who help deliver our services (payment processors, scheduling platforms, or professional partners).
-
Data processors. Where we use third-party processors, we require them to provide appropriate safeguards and to process data only on our instructions.
For guidance on data sharing and privacy notices for small organisations, see practical templates and guidance for UK businesses.
Consent
-
How we obtain consent. Consent will be obtained clearly and separately for activities that require it (for example, marketing, photographs/videos, and referrals). You can withdraw consent at any time by contacting us; withdrawal will not affect processing already carried out lawfully.
-
Recording consent. We keep records of consents given so we can demonstrate compliance.
Data Retention
We retain personal data only for as long as necessary for the purposes set out above, including to meet legal, accounting, or reporting requirements. Typical retention periods include: service records and training notes for the duration of the client relationship plus a reasonable period for follow-up and legal compliance; financial records for statutory accounting periods. If you need specific retention periods for particular categories of data, contact us and we will provide details.
Your Rights
Under UK GDPR you have the right to:
-
Access the personal data we hold about you.
-
Rectify inaccurate or incomplete data.
-
Erase your personal data in certain circumstances.
-
Restrict or object to processing in certain circumstances.
-
Request portability of your data where applicable.
-
Withdraw consent at any time where processing is based on consent.
-
Complain to the Information Commissioner’s Office if you believe your data protection rights have been breached.
The ICO provides clear guidance on exercising these rights.
Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. Access to personal data is limited to those who need it to perform their role. Where third-party services are used, we assess their security and contractual safeguards.
International Transfers
If we transfer personal data outside the UK, we will ensure appropriate safeguards are in place (for example, adequacy decisions, standard contractual clauses, or other lawful mechanisms) and we will inform you where required.
Cookies and Website Tracking
Our website may use cookies and similar technologies to operate and improve the site. You will be given information about cookies and the option to manage cookie preferences when you first visit the site.
Children
Our services are aimed at adults. If we collect personal data about children (for example, where a parent or guardian books on behalf of a minor dog owner), we will ensure appropriate parental consent and safeguards are in place.
Changes to This Policy
We may update this policy from time to time. When we make material changes we will publish the updated policy on our website with a revised date.
Complaints and Contact
If you have questions, want to exercise your rights, or wish to withdraw consent, contact us via the website contact form or the email address shown on www.mapletreedogtraining.co.uk. If you remain dissatisfied you have the right to complain to the Information Commissioner’s Office.
Additional Notes for Small Businesses
This policy is written to be proportionate for a small UK-based dog training business and follows practical guidance and templates commonly used by small organisations to meet UK GDPR obligations.
