Last updated: April 2026
This page explains what personal data Siamese Cat Breeder collects about you when you use the website, what we do with it, how long we keep it, who we share it with, and what rights you have over it under UK data protection law.
We’ve tried to write this in plain English rather than legalese. If anything is unclear, email us using the contact form and we’ll explain it properly. For cookie-specific information, see the separate Cookie Policy.
Who we are (the data controller)
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller for this website is:
Siamese Cat Breeder
Operator: Ross Davies
Contact: via the contact form
We are a small website run by a single individual. We are not registered with the Information Commissioner’s Office (ICO) because our processing activities fall within the exemptions in Schedule 1 of the Data Protection (Charges and Information) Regulations 2018 — specifically, we only process personal data for core business purposes (contact enquiries, comments, breeder directory listings, and basic analytics) and do not hold personal data for marketing, profiling, or commercial resale.
What data we collect and why
1. Contact form submissions
When you use our contact form we collect the name, email address and message content you provide. We use this data solely to respond to your enquiry.
Lawful basis: Legitimate interests (UK GDPR Article 6(1)(f)) — responding to a direct request from you.
Retention: Contact enquiries and their replies are retained for 24 months after the last exchange, then deleted.
2. Comments left on articles
If you leave a comment on an article, we collect the name, email address and comment content you submit. Your name and comment are displayed publicly. Your email address is not displayed publicly but is stored to help us identify you as a repeat commenter and to send you a reply if appropriate. We also log your IP address and browser user agent for spam-filtering purposes (via Akismet or equivalent).
Lawful basis: Consent (UK GDPR Article 6(1)(a)) — given by you when you voluntarily submit the comment form.
Retention: Comments are retained indefinitely unless you request deletion, in which case they are removed within 30 days.
3. Breeder directory listings
If you apply to be listed in the Siamese breeder directory, we collect your name, cattery name, contact details and location. This information is displayed publicly as part of your listing for the duration it is live.
Lawful basis: Contract (UK GDPR Article 6(1)(b)) — we need this data to provide the listing service you have requested.
Retention: Directory data is retained while your listing is active and deleted promptly on request, or within 30 days of listing expiry.
4. Server log files
Our web host automatically logs standard server data when you visit any page, including your IP address, browser user agent, the page requested, the referring page, and a timestamp. This data is used solely for security monitoring, troubleshooting, and spam prevention. It is not combined with any other data to identify you.
Lawful basis: Legitimate interests (UK GDPR Article 6(1)(f)) — site security and technical operation.
Retention: Server logs are retained for 30 days and then automatically deleted.
5. Analytics data
We may use basic web analytics to understand how visitors use the site (which pages are popular, how people arrived at the site, roughly where in the world they are). Analytics cookies are only set if you give consent via the cookie banner. If you decline, no analytics cookies are set and no analytics data is collected about your visit. See the Cookie Policy for full detail.
Lawful basis: Consent (UK GDPR Article 6(1)(a), PECR Regulation 6).
Retention: Analytics data is aggregated and retained for 14 months, after which individual visit-level data is deleted.
6. Calendar photo competition submissions
This website displays photographs submitted to the annual CattyLicious Calendar Photo Competition, run by Icon Media Solutions Ltd t/a CattyLicious.com. When you enter the competition you provide your name, email address and one or more photographs. The personal data associated with your submission (your name and email address) is held by CattyLicious.com, not by this website. However, your photographs may be published on this site as part of calendar promotion.
Photographs are used under a signed copyright release granting non-exclusive worldwide rights for calendars and related promotional materials. Your name may appear as a photo credit alongside the image.
Lawful basis: Consent (UK GDPR Article 6(1)(a)) — given when you signed the copyright release and submitted your photographs.
Retention: Photographs are retained on the website for as long as they remain part of calendar promotional content. If you wish to withdraw consent for future display, email ross@siamese-cat-breeder.co.uk with the subject line “Photo Removal Request” and we will remove the image(s) within 30 days. Withdrawal of consent does not affect the lawfulness of use prior to withdrawal. Full terms are set out in the Terms and Conditions.
Cookies
This site uses cookies to help it function correctly and, where you have consented, to understand how visitors use the site. Full detail of every cookie category used — strictly necessary, analytics, and third-party embed cookies — is set out in the separate Cookie Policy.
Affiliate links
Some articles on this site contain affiliate links, primarily to Amazon (UK). When you click an affiliate link, Amazon may set tracking cookies on your device that identify the click as originating from this site, so that Amazon can correctly attribute any resulting purchase and pay us a small commission. These cookies are set by Amazon, not by us, and are governed by Amazon’s own privacy notice.
We do not receive or store any information about what you buy. Amazon simply tells us, in aggregate, how many items were ordered and how much commission was earned. We never see your name, address, payment details, or order contents.
For full detail on how we use affiliate links and which programmes we belong to, see the Affiliate Disclosure page.
Who we share your data with
We do not sell, rent or trade your personal data to anyone. We share data only with the following categories of data processor, and only to the extent needed to run the website:
- Web host: stores the site files and the database, including comments, contact form submissions, and directory listings.
- Spam filter (Akismet or equivalent): scans comments and contact submissions for spam. This involves transmitting the comment content, commenter name, email and IP address to the spam filter provider.
- Email provider: used only for transactional email (replies to contact enquiries, password reset emails).
- Analytics provider: if you consent, receives anonymised visit data.
- Gravity Forms: processes contact form submissions.
We may also disclose personal data to third parties if we are required to do so by law, or to protect the rights, property or safety of our users or others.
International transfers
Some of our processors (for example, the analytics provider and the spam filter) may transfer personal data outside the United Kingdom. Where this happens, we rely on one of the following UK GDPR transfer mechanisms:
- An adequacy decision made by the UK government (for example, the UK-EU adequacy decision);
- Standard Contractual Clauses (the UK International Data Transfer Agreement or the EU SCCs with the UK Addendum);
- Any other safeguard permitted under UK GDPR Article 46.
Your rights under UK GDPR
You have the following rights in respect of the personal data we hold about you:
- Right of access (Article 15): you can ask for a copy of the personal data we hold about you.
- Right to rectification (Article 16): you can ask us to correct inaccurate data.
- Right to erasure (Article 17): you can ask us to delete your data, subject to certain legal exceptions.
- Right to restriction (Article 18): you can ask us to restrict processing in certain circumstances.
- Right to data portability (Article 20): you can ask for your data in a machine-readable format.
- Right to object (Article 21): you can object to processing based on legitimate interests.
- Right to withdraw consent: where processing is based on consent, you can withdraw that consent at any time.
- Right to lodge a complaint with the ICO: see the complaints section below.
To exercise any of these rights, email us using the contact form. We will respond within one calendar month, as required by UK GDPR Article 12. We do not charge a fee for responding to data subject access requests (the £10 fee that applied under the 1998 Data Protection Act was abolished by UK GDPR).
Security
We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure or alteration. These include:
- HTTPS encryption across the entire site (TLS 1.2 or higher)
- Password hashing (no plain-text password storage)
- Regular software and plugin updates
- Restricted admin access with strong passwords and two-factor authentication
- Regular off-site backups held by the web host
- Spam filtering on comments and contact submissions
No system is 100% secure, and we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours as required by UK GDPR Article 33, and we will notify affected individuals without undue delay where required by Article 34.
Children
This site is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe we have collected data from a child under 13, please contact us and we will delete it.
Changes to this policy
We review this policy regularly and may update it from time to time. The “Last updated” date at the top of this page will change when we do. Material changes will be announced via a notice on the site homepage for at least 30 days.
Complaints
If you are unhappy with how we have handled your personal data, please contact us first via the contact form so we can try to put things right.
If you are still dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), which is the UK’s independent supervisory authority for data protection:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: https://ico.org.uk
