Privacy notice

Last updated: 13 November 2026.

This notice explains what personal information AURORAGOLD Labradors collects through www.auroragold.co.uk, why we hold it, who we share it with, how long we keep it and what you can ask us to do about it.

Who we are. AURORAGOLD Labradors, North Leigh, Witney, Oxfordshire. We are the data controller for this website. For any question or request about your information, email info@auroragold.co.uk.

What we collect. Enquiries: your name, email address, telephone number, the type of enquiry and your message. Accounts: your email address, your name, and whether you are a boarding customer, a puppy enquirer or a puppy owner.

Boarding records. When you book boarding we ask for your contact details, home address and postcode, your preferred contact method, and an emergency contact (name, relationship, telephone number, email address and whether they may make decisions about your dog). We also record your dog's identity and records, documents you upload such as vaccination certificates, health and behaviour information you tell us (illness, injuries, vaccination, medication, veterinary visits and fears), collection and travel arrangements, and signatures and dates at check-in and check-out.

Puppy records. When you apply for a puppy we record what you tell us in your application, visit and collection dates, our own review notes, records of payments and signatures, and messages between us. Our notes on your application are never shared with other applicants.

Testimonials and photographs. We publish a testimonial only with your permission, and we use your name or photographs only where you have agreed. We do not publish photographs of children without their parent's or guardian's permission.

Information about other people. If you give us details of an emergency contact, an authorised collector or members of your household, please make sure they are happy for you to do so and point them to this notice.

Why we hold it. We use your information to answer your enquiry and provide the boarding or puppy services you have asked for; for the health, safety and welfare of dogs in our care, and to keep the records our insurance, tax and (once granted) animal activity licence obligations require; for marketing only where you have asked to hear from us; and to understand how the website is used, as described under "Visitor analytics" below.

Our legal basis. UK data protection law requires a legal reason for each use of your information:

Do you have to give us your information? We need your contact details and your dog's health, vaccination, vet and behaviour information to care for a dog safely and meet our licence conditions. Without it we cannot accept a booking or sell a puppy. Marketing, testimonials and photograph consent are always optional.

How long we keep it.

At the end of each period the records are deleted or anonymised. Enquiries that do not lead to a booking or application are kept only while we are in contact with you. Website analytics data is kept as described below.

Visitor analytics. Our website platform, Lovable, counts visits to help us understand which pages are useful. It uses no cookies, stores nothing on your device, does not keep your IP address and does not identify you or recognise a returning visitor. It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how quickly pages load, errors, and which buttons and links are clicked. Detailed data is kept for 90 days and daily summaries for a year. Lovable collects this data for us. Lovable's privacy policy (https://lovable.dev/privacy) explains how it handles it. Clicks are recorded only after a visitor in the UK, the EU/EEA, Switzerland or Canada accepts analytics in the banner, and elsewhere unless the visitor rejects them. If your browser sends a Global Privacy Control signal, your clicks are never recorded. Page visits, time on page, page speed and errors are recorded for every visitor, without cookies and without identifying anyone.

Other services we use. Messages sent from the website are delivered through Mailgun, and our own mailboxes are hosted by Google Workspace; both process email for us. This website, its database and its files are hosted by Lovable Cloud, whose servers are in Ireland (AWS eu-west-1). The website's fonts are served from our own site, so your browser does not connect to Google to load them. Photographs and customer documents are held in private storage and shared through signed links that expire. We do not take card payments through this website; payment records are notes we make when you pay us another way.

Who we share it with. We never sell, rent or trade personal information. Within AURORAGOLD, only staff who need it can see customer records, using two-step sign-in. We share information only where needed with: our vet or your vet if your dog needs treatment; your emergency contact if we cannot reach you; the local authority licensing inspector when they inspect our records; the Royal Kennel Club, to register litters and transfer a puppy's registration to its new owner; the microchip database, to transfer a puppy's keeper details; our insurer, professional advisers, the police or other authorities where the law requires or to protect a person or animal; and the service providers listed under "Other services we use", who act only on our instructions. We do not use automated decision-making or profiling.

Transfers outside the UK. Our database and files are hosted in Ireland, which UK data protection law recognises as giving adequate protection. Some providers, such as Mailgun and Google, may process information in the United States or elsewhere. Where they do, they rely on safeguards recognised under UK law, such as the UK-US data bridge or the UK International Data Transfer Agreement.

How we protect it. Two-step staff sign-in, private document storage with expiring links, invitation links that expire and are tied to the email address they were sent to, and passwords that are never stored in plain text.

Your rights. You can ask for a copy of the information we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop processing it, and ask us to transfer information you gave us to another provider (data portability). You can withdraw a marketing consent, or your permission for testimonials and photographs, at any time. Email info@auroragold.co.uk; we may need to confirm who you are. We aim to reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

If you ask us to delete your information, we may still have to keep some records for the periods above where the law, our licence or our insurance obligations require it, or where a record is needed to show what we did and why.

Changes. We may update this notice from time to time. The date at the top shows when it last changed.