Privacy Policy
Two Rivers Veterinary Practice understands the importance of looking after the personal information that we collect from you, or that you provide to us. Our privacy policy ensures that that we comply with the law, but is also a genuine commitment that we will hold your information fairly and protect your privacy to the best of our ability.
This notice sets out what personal information we collect and store, why we need to collect it, and how we will use or process it. To ‘process’ information in this context means to collect, store, transfer, use or otherwise act on information.
In this document, ‘we’, ‘our’, or ‘us’ refers to Two Rivers Veterinary Practice Ltd. Company number SC450879. Registered office 157 High Street, Biggar, South Lanarkshire, ML12 6DL.
Our privacy policy complies with the Data Protection Act 2018, incorporating the EU General Data Protection Regulation (GDPR). It explains your privacy rights and how the law protects you.
Except as set out below, we do not share, sell, or disclose to a third party, any personal information collected from you or provided by you.
What personal information do we collect and why?
We may collect your forename, surname and title, full address and postcode, email address, mobile telephone number and landline, and any other information you have given to us for the purpose of communication or meeting. This is so that we can identify you and access your animal’s medical record, provide a service to you in respect of veterinary care, fulfil our obligations to you, and communicate with you regarding your pet(s), horses(s) or farm animals, including sending you information which is related to the services we provide to you.
We hold details of your appointments with us, including home, yard or farm visits and telephone conversations. We keep records of contact with third parties assisting in the care of your animal including (but not limited to) external laboratories, referral practices and your insurance company. We also store details about payments made by you, which may include your bank account and payment card details.
Please remember to let us know as soon as possible if any of your personal information changes, so that we may update our records.
How we will use your personal information
We will process your personal information insofar as it is necessary for the performance of the veterinary practice – client relationship we have with you. This will involve using your personal information to provide services to you, and to send you information which is related to the services we provide to you and our obligations to you.
Data retention
We will keep your Personal Information for as long as you are a client of Two Rivers Vets, and thereafter for as long as any legal claim may be made against us or our colleagues, and for as long as is required to comply with our legal and regulatory requirements including to HMRC and the RCVS.
Sharing your information
We are required to share your Personal Information in certain circumstances to ensure that we are able to provide you with services or carry out any obligations to you. In each case we will only share the data necessary for that purpose and it will only be in relation to that specified purpose. For example, we share Personal Data of Pet Health Club Members with Premier Vet Alliance for administration of our Pet Health Club only. Each third party is required to have in place comparable data security measures and to be fully compliant with the terms of the GDPR.
Email providers, printers and mailing houses
We may share your name, address and email address so that we can send you reminders, administrative information relating to the way we provide services to you, information about animal health issues relevant to you, and marketing communications if you have consented to receiving them.
Law Enforcement Agencies
If we receive a request in writing from a law enforcement agency, we may be required to provide your personal information. For these purposes the information we may share includes your name, address, email address, mobile telephone number and landline.
Save as set out above, we will not sell, lease or transfer your personal information to any other person or company without your prior consent.
Keeping your data secure
We recognise the importance of keeping your personal data safe and we have in place security measures and policies to prevent personal data from being lost, used or accessed without our permission. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality. All information you provide to us is stored on our secure servers.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
Your rights
The General Data Protection Regulation grants all data subjects the following rights without charge. These include the right to:
fair processing of information and transparency over how we use your use personal information;
access your personal information and to certain other supplementary information that this Privacy Policy is already designed to address;
require us to correct any mistakes in your information which we hold;
require the erasure of personal information concerning you in certain situations;
receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations;
object at any time to processing of personal information concerning you for direct marketing;
object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you;
object in certain other situations to our continued processing of your personal information;
otherwise restrict our processing of your personal information in certain circumstances
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under the General Data Protection Regulation.