Last Updated: 1 July 2025

GDPR Policy — Pussy Galore

1. Introduction

At Pussy Galore, we are committed to protecting the privacy and data rights of our clients. This GDPR Policy outlines our approach to complying with the General Data Protection Regulation (GDPR) and our ongoing commitment to safeguarding personal data.

2. Data Collection and Processing

• Lawful Basis: We collect and process personal data only for legitimate purposes directly related to the services we provide. This may include client names, contact information, medical history, and relevant health data.

• Consent: We obtain explicit consent from clients prior to collecting and processing any personal data. Clients may withdraw their consent at any time.

3. Data Security

• Security Measures: We implement technical and organisational safeguards to protect personal data against unauthorised access, disclosure, alteration, or destruction.

• Data Storage: Personal data is securely stored in both digital and physical formats, with regular reviews of security protocols.

4. Data Retention

• Retention Period: Personal data is retained only as long as necessary to provide services and meet legal obligations. Regular reviews are conducted to ensure appropriate data retention.

5. Data Subject Rights

• Access & Rectification: Clients have the right to access their personal data and request corrections or updates.

• Erasure (Right to be Forgotten): Clients can request deletion of their data where applicable under GDPR.

• Data Portability: Clients may request their personal data in a structured, commonly used, and machine-readable format.

6. Data Processing Records

• Record Keeping: We maintain clear records of all data collection, processing, and sharing activities to ensure GDPR compliance.

7. Data Breach Response

• Notification Protocol: In the event of a data breach, appropriate authorities and affected individuals will be notified in accordance with GDPR requirements.

8. Data Transfer

• International Transfers: We do not transfer personal data outside of the European Economic Area (EEA) unless adequate data protection measures are in place.

9. Consent Management

• Consent Records: We maintain records of all client consents for data processing.

• Withdrawal of Consent: Clients can withdraw consent at any time by contacting us.

10. Data Protection Officer

• Designated Officer: Julie White is responsible for overseeing data protection compliance at Pussy Galore.

11. Client Communication

• Transparency: We communicate clearly with clients regarding data handling, privacy practices, and GDPR compliance.

12. Policy Updates

• Revisions: This policy may be updated to reflect changes in legal requirements or operational practices. Significant updates will be communicated to clients.

By using our services, clients acknowledge and agree to this GDPR Policy.

Pussy Galore
1 July 2025

Contact Us:
If you have any questions or concerns regarding this policy, please contact us at:
📧 info@pussygalore.org.uk
🌐 www.pussygalore.co.uk