azure-loom

GDPR Information

General Data Protection Regulation Compliance

While our practice operates in Australia, we recognize that some clients may be residents of the European Union or have data protection rights under GDPR. We are committed to respecting these rights and maintaining compliance with applicable international data protection standards.

Legal Basis for Processing

We process personal data under the following legal bases:

  • Contract performance: Processing necessary to provide veterinary services you have requested
  • Legal obligation: Maintaining records as required by Australian veterinary practice regulations
  • Legitimate interest: Improving service quality and maintaining practice operations
  • Consent: When you explicitly agree to optional communications or uses beyond core service delivery

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access: Request confirmation of what personal data we hold and receive a copy
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your data under certain circumstances
  • Right to restriction: Request limitation of how we process your data
  • Right to data portability: Receive your data in a structured, commonly used format
  • Right to object: Object to processing based on legitimate interests
  • Rights related to automated decision-making: We do not use automated decision-making systems

Data Processing Activities

We process the following categories of personal data:

  • Contact information: Name, email address, physical address
  • Animal health records: Medical history, treatment records, behavioral assessments
  • Transaction data: Service selection, appointment scheduling, payment records
  • Communications: Email correspondence and consultation notes

This data is processed by our staff members who require access to perform their professional duties. We do not transfer data to third-party processors outside Australia except when required for payment processing or with your explicit consent.

International Data Transfers

Personal data is stored on servers located in Australia. If data must be transferred internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data Retention Periods

We retain personal data for the following periods:

  • Medical records: Minimum seven years following last treatment, as required by Australian regulations
  • Financial records: Seven years as required by tax and accounting regulations
  • Marketing communications: Until you withdraw consent or request deletion
  • Website analytics: Maximum 26 months

Exercising Your Rights

To exercise any of your GDPR rights, contact us at [email protected] with the subject line "GDPR Request" and specify which right you wish to exercise. We will respond within 30 days of receiving your request.

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR.

Data Protection Officer

For GDPR-related inquiries, you may contact our data protection representative at [email protected]

Updates to This Information

We may update this GDPR information to reflect changes in our practices or regulatory requirements. Material changes will be communicated to affected individuals via email.

Last updated: June 16, 2026