GDPR & Cookie UX for Pet-Care Sites (UK)

Your privacy notice: what it must cover

Include: why you process data, how long you keep it, who you share it with, people's rights, and how to complain. Decide lawful bases before collecting (contract, consent, legitimate interests, etc.).

Microcopy

"We collect your details to arrange and deliver bookings (contract). We keep records for up to 24 months after your last booking, then delete them unless law requires longer."

Forms that feel safe (and convert)

• Ask only what you need to deliver the service (name, contact, pet info, address for visits).
• Separate marketing opt-in (unchecked by default).
• Add a short link to your privacy notice next to the submit button.

Microcopy by the checkbox

"I'd like occasional tips and offers by email (optional). You can opt out anytime."

Cookie banners that meet UK rules (and don't annoy)

• Tell people you use cookies, explain what they do, and get consent for non-essential ones (e.g., analytics/ads). Provide Accept/Reject options with equal prominence. Essentials don't need consent.

Good banner example (text)

"We use essential cookies to make our site work. With your permission, we'd also use analytics to improve it. Choose 'Accept analytics' or 'Reject analytics'. You can change your choice anytime in 'Cookie Settings'."

Email & SMS: keep it tidy

• Booking updates usually rely on contract.
• Newsletters/promos need consent (PECR). Keep proof of consent and easy unsubscribe.

Data retention & access

• Set clear retention (e.g., forms: 24 months; invoices: per HMRC rules).
• Offer a simple path for subject access or deletion requests.

Footer link set

• Privacy Notice • Cookie Settings • Data Request (email link or short form)