Last updated: 3 November 2026
This page explains what personal data Siamese Cat Breeder collects about you when you use the website, what we do with it, how long we keep it, who we share it with, and what rights you have over it under UK data protection law.
We’ve tried to write this in plain English rather than legalese. If anything is unclear, email us using the contact form and we’ll explain it properly. For cookie-specific information, see the separate Cookie Policy.
Who we are (the data controller)
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller for this website is Icon Media Solutions Ltd, trading as Siamese Cat Breeder. You can contact us using the contact form.
Icon Media Solutions Ltd is registered with the Information Commissioner’s Office (ICO), registration number ZC280149.
What data we collect and why
1. Contact form submissions
When you use our contact form we collect the name, email address and message content you provide. We use this data solely to respond to your enquiry.
Lawful basis: Legitimate interests (UK GDPR Article 6(1)(f)), responding to a direct request from you.
Retention: Contact enquiries and their replies are retained for 24 months after the last exchange, then deleted.
2. Comments left on articles
If you leave a comment on an article, we collect the name, email address and comment content you submit. Your name and comment are displayed publicly. Your email address is not displayed publicly but is stored so we can recognise you as a repeat commenter and reply if appropriate. We also log your IP address and browser user agent for spam filtering.
Lawful basis: Consent (UK GDPR Article 6(1)(a)), given when you submit the comment form.
Retention: Comments are retained indefinitely unless you ask us to delete them, in which case they are removed within 30 days.
3. Breeder directory listings
If you list a cattery, litter or stud cat in the directory, we collect your name, email address, cattery name, contact details, the outward part of your postcode, your listing text and photographs, and any details you add about your cats (for example GCCF registration, microchip and vaccination status). If you are a licensed seller, we also collect your licence number and the council that issued it.
What is published: your listing is public. Anyone can see the cattery name, the outward postcode, the contact details you choose to show, your photographs, your licence number if you have one, and the details you enter about your cats. Your account email address and login details are never published.
Payments: paid listings are taken through Stripe. Stripe collects your card details directly; we never see or store them. We receive your name, email address and confirmation of payment.
Lawful basis: Contract (UK GDPR Article 6(1)(b)), to provide the listing you asked for. Legitimate interests (Article 6(1)(f)), to moderate listings and keep the directory free of misleading or unlawful adverts. Legal obligation (Article 6(1)(c)), to keep payment records.
Retention: listing data is kept while your listing is live and deleted on request, or within 30 days of the listing expiring. Payment records are kept for six years, as UK tax law requires.
4. Email lists
Some forms on this site (for example the colour photo competition, the colour predictor and the genetics course sign-up) let you join our email list. We only add you if you tick the box to say yes. We hold your name, email address and the interests you chose (for example pet owner, breeder or exhibitor) so we can send you emails that are relevant to you. Every email has an unsubscribe link.
Lawful basis: Consent (UK GDPR Article 6(1)(a) and PECR Regulation 22).
Retention: until you unsubscribe or ask us to delete you.
5. Server log files
Our web host automatically logs standard server data when you visit any page, including your IP address, browser user agent, the page requested, the referring page, and a timestamp. This data is used solely for security monitoring, troubleshooting, and spam prevention. It is not combined with any other data to identify you.
Lawful basis: Legitimate interests (UK GDPR Article 6(1)(f)), site security and technical operation.
Retention: Server logs are retained for 30 days and then automatically deleted.
6. Analytics data
We use Google Analytics to understand how visitors use the site (which pages are popular, how people arrived at the site, roughly where in the world they are). Analytics cookies are only set if you give consent via the cookie banner. If you decline, no analytics cookies are set. See the Cookie Policy for full detail.
Lawful basis: Consent (UK GDPR Article 6(1)(a), PECR Regulation 6).
Retention: 14 months, after which visit-level data is deleted.
7. Photo competitions
CattyLicious Calendar Photo Competition. This website displays photographs entered in the annual CattyLicious Calendar Photo Competition, run by Icon Media Solutions Ltd t/a CattyLicious.com. Entry details (your name, email address and photographs) are collected and held by CattyLicious.com. This site uses only the photograph and your name, shown as a photo credit.
SCB Colour Photo Competition. When you enter, we collect your name, email address, the details of your cat and your photographs. Photographs are stored in our Dropbox account, organised by breed and colour, until we decide whether to publish them.
Lawful basis: Consent (UK GDPR Article 6(1)(a)), given when you enter.
Retention: Photographs stay on the site for as long as they are in use. To have a photograph or credit removed, email ross@siamese-cat-breeder.co.uk with the subject line “Photo Removal Request” and we will remove it within 30 days. Withdrawal does not affect the lawfulness of earlier use. Full terms are in the Terms and Conditions.
8. Spam checks
Our forms use Google reCAPTCHA to tell people from bots. When you submit a form, your IP address is also checked against AbuseIPDB, a service that keeps a database of IP addresses reported for spam and hacking. Only your IP address is sent to AbuseIPDB, which is based in the United States. If a form is flagged as spam, its IP address is blocked from our forms for 24 hours.
Lawful basis: legitimate interests (UK GDPR Article 6(1)(f)), keeping the site free of spam and abuse.
Cookies
This site uses cookies to help it function correctly and, where you have consented, to understand how visitors use the site. Full detail of every cookie used is in the separate Cookie Policy.
Affiliate links
Some articles on this site contain affiliate links, primarily to Amazon (UK). When you click an affiliate link, Amazon may set tracking cookies on your device so it can attribute any resulting purchase to this site and pay us a small commission. These cookies are set by Amazon, not by us, and are governed by Amazon’s own privacy notice.
We do not receive or store any information about what you buy. For full detail, see the Affiliate Disclosure page.
Who we share your data with
We do not sell, rent or trade your personal data to anyone. We share it only with the following service providers, and only as far as needed to run the website:
- Web host (Hostinger): stores the site files and the database, including comments, form submissions and directory listings.
- Stripe: takes payment for paid listings.
- SendFox: holds our email list and sends our emails, if you have joined it.
- Dropbox: stores photographs entered in the SCB Colour Photo Competition.
- Google: reCAPTCHA checks our forms for spam; Google Workspace delivers the site’s emails; Google Analytics measures visits if you consent.
- Gravity Forms: the software that runs our forms.
- AbuseIPDB: checks the IP address of anyone who submits one of our forms against its list of known spam sources.
Police, councils and other authorities
We do not routinely pass any data to public authorities. We will share information with the police, a local council (for example its animal licensing team), Trading Standards, Ofcom or a court only when the law requires us to, or where we believe it is necessary to prevent or detect fraud or a crime, or to protect a cat’s welfare. Where that involves a listing, we may also remove the listing.
International transfers
Some of our service providers (for example Google, Stripe, SendFox, Dropbox and AbuseIPDB) may process personal data outside the United Kingdom. Where this happens, we rely on one of the following UK GDPR transfer mechanisms:
- an adequacy decision made by the UK government (including the UK-US Data Bridge for certified US companies);
- Standard Contractual Clauses (the UK International Data Transfer Agreement or the EU SCCs with the UK Addendum);
- any other safeguard permitted under UK GDPR Article 46.
Your rights under UK GDPR
You have the following rights in respect of the personal data we hold about you:
- Right of access (Article 15): you can ask for a copy of the personal data we hold about you.
- Right to rectification (Article 16): you can ask us to correct inaccurate data.
- Right to erasure (Article 17): you can ask us to delete your data, subject to certain legal exceptions.
- Right to restriction (Article 18): you can ask us to restrict processing in certain circumstances.
- Right to data portability (Article 20): you can ask for your data in a machine-readable format.
- Right to object (Article 21): you can object to processing based on legitimate interests.
- Right to withdraw consent: where processing is based on consent, you can withdraw it at any time.
- Right to complain to the ICO: see the complaints section below.
To exercise any of these rights, use the contact form. We will respond within one calendar month, as UK GDPR Article 12 requires, and we do not charge a fee.
Security
We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure or alteration. These include:
- HTTPS encryption across the entire site
- Password hashing (no plain-text password storage)
- Regular software and plugin updates
- Restricted admin access with strong passwords
- Regular off-site backups
- Spam filtering on our forms
No system is 100% secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours as UK GDPR Article 33 requires, and we will tell affected individuals without undue delay where Article 34 requires it.
Children
This site is not directed at children under 13, and the breeder directory is for adults only. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe we have collected data from a child under 13, please contact us and we will delete it.
Changes to this policy
We review this policy regularly and may update it from time to time. The “Last updated” date at the top of this page will change when we do.
Complaints
If you are unhappy with how we have handled your personal data, please contact us first via the contact form so we can try to put things right.
If you are still dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: https://ico.org.uk
