The rights you have over your personal data, how to use them, and how statutory registry retention interacts with them.
The controller is Aegis Pet Hub Ltd, registered in England & Wales. Send data rights requests to support@aegispethub.co.ukwith “Data rights request” in the subject line, or write to our registered office. A dedicated secure request form will be added to your account area; until then, email is the primary route. What data we hold and why is explained in the Privacy Notice at /privacy.
You can ask for a copy of the personal data we hold about you, together with information about how we use it. We provide it free of charge in a commonly used electronic format unless you ask for something different (see also alternative formats at /accessibility).
You can ask us to correct inaccurate data or complete incomplete data. For registry records you can update most details yourself in your account, and keeping keeper details accurate is also a regulatory requirement. Where a correction affects a registry record we may keep an audit trail of the previous value, as the regulations require records of changes.
You can ask us to restrict processing while a dispute about accuracy or our lawful basis is resolved, or where you need the data preserved for legal claims. Restricted data is stored but not otherwise used except in the limited circumstances the law allows.
You can object to processing based on our legitimate interests, and we will stop unless we can show compelling legitimate grounds that override your interests, rights and freedoms. You can object to direct marketing at any time and we will stop without exception — though note we only send marketing with consent in the first place.
You can ask us to delete your personal data, and we will do so where no lawful reason to keep it remains — for example account data after closure, or support correspondence no longer needed.
However, microchip registry records are subject to statutory retention requirements placed on database operators, which can lawfully override the right to erasure. This means we may be unable to delete a registry entry (such as the link between a microchip number and its keeper history) even at your request. Where we refuse an erasure request in whole or in part, our response will identify the specific legal basis for the refusal and tell you which data we can and cannot delete, and about your right to complain to the ICO.
Before acting on a request we must be satisfied you are who you say you are, so that registry data is not disclosed or altered for the wrong person. Where possible, send your request from the email address on your account. We may ask for further proportionate evidence, such as confirmation of details already held on the record. We only use verification information for that purpose.
We respond within one calendar month of receiving a valid request. For complex or numerous requests we may extend by up to two further months, and will tell you within the first month if so. If a request is manifestly unfounded or excessive we may charge a reasonable fee or refuse, explaining why.
Please raise concerns with us first via the Complaints Policy at /complaints. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, helpline 0303 123 1113) at any time.