Privacy Policy
Last updated: 17 July 2026
1. Who we are
VetPricelist ("we", "us", "our") operates the website at https://vetpricelist.co.uk. We are the data controller for the personal data described in this policy.
Contact us at: [email protected]
2. What data we collect and why
Price alert subscriptions. When you sign up for price alerts we collect your email address and postcode. Legal basis: contract — to provide the alert service you have requested. We retain this data until you unsubscribe.
Price submissions. If you submit a vet price you may optionally provide your email address for follow-up verification. Legal basis: consent. We retain submissions indefinitely as part of our public price database; personal contact details are deleted after verification is complete or after 12 months, whichever is sooner.
Practice accounts. Vet practices that claim a listing or subscribe to a featured plan provide their name, practice name, email address, RCVS number, and payment details (processed by Stripe — we never store card numbers). Legal basis: contract. We retain account data for the duration of the contract and for 7 years thereafter for accounting purposes.
Free listing requests. When a practice requests a free listing we collect practice name, email address, postcode, and optionally RCVS number. Legal basis: legitimate interests (operating a directory of veterinary practices). Retention: indefinitely while the listing is live; deleted within 30 days of a removal request.
Server logs. Our hosting provider (Vercel) automatically records IP addresses, browser type, pages visited, and timestamps for security and performance purposes. Retention: 30 days. Legal basis: legitimate interests (security).
3. Cookies
We use the following cookies:
- Strictly necessary cookies — set by our authentication provider (Supabase) to keep you logged in to your practice account. These cannot be disabled without breaking account functionality.
- Analytics cookies (Google Analytics) — we use Google Analytics to understand how visitors use the site (pages viewed, approximate location, device type). These cookies (including
_gaand_ga_*, which last up to 2 years) are only set if you click "Accept" on our cookie banner — they are never loaded before you consent, and you can withdraw consent at any time via "Cookie settings" in the footer. Governed by Google's privacy policy. - Payment cookies (Stripe) — if you proceed to checkout, Stripe sets cookies to detect fraud and process your payment securely. These are governed by Stripe's privacy policy.
We do not use advertising, tracking, or third-party profiling cookies.
4. How we use your data
- To send price alert emails you subscribed to
- To operate and verify your practice listing
- To process subscription payments via Stripe
- To respond to enquiries and support requests
- To detect and prevent fraud or misuse
- To comply with our legal obligations
We will never sell your personal data to third parties, and we will never use it for advertising or profiling purposes.
5. Who we share data with
We share data only with the following service providers, under data processing agreements:
- Supabase (database and authentication) — servers located in the EU (Frankfurt). Privacy policy: supabase.com/privacy
- Resend (transactional email) — US-based, EU SCC transfer mechanism. Privacy policy: resend.com/legal/privacy-policy
- Stripe (payment processing) — UK/EU regulated. Privacy policy: stripe.com/gb/privacy
- Vercel (hosting) — US-based, EU SCC transfer mechanism. Privacy policy: vercel.com/legal/privacy-policy
- Google (analytics, only if you accept cookies) — US-based, EU SCC transfer mechanism. Privacy policy: policies.google.com/privacy
We may disclose data to law enforcement or regulatory authorities where required by law.
6. International transfers
Some of our service providers are based outside the UK/EEA. Where we transfer personal data internationally, we ensure appropriate safeguards are in place — either Standard Contractual Clauses (SCCs) approved by the ICO, an adequacy decision, or both.
7. Your rights under UK GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — ask us to restrict processing in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, email us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Price alert unsubscribe
Every price alert email includes an unsubscribe link. Clicking it permanently removes your subscription for that postcode and procedure. You can also email us at [email protected] to remove all your alert subscriptions at once.
9. Children
VetPricelist is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Security
We use industry-standard measures to protect your data: HTTPS encryption for all data in transit, encrypted storage at rest, access controls, and regular security reviews. No system is completely secure; if you believe your data has been compromised, please contact us immediately.
11. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be notified to practice account holders by email.
12. Contact
For any privacy-related questions or requests, contact us at:
VetPricelist
[email protected]