Privacy Policy
This Privacy Policy explains how wearezumi Limited (“zumi”, “we”, “us”, or “our”) collects, uses, and protects your personal data when you use our website at wearezumi.com or our mobile application (“the App”). We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
wearezumi Limited is the data controller responsible for your personal data. We are a company registered in England and Wales.
You can contact us at:
Email: hello@wearezumi.com
Website: wearezumi.com
2. What Data We Collect
Account Information
When you register for a zumi account, we collect your name, email address, and password (stored in encrypted form). If you register as an RVN, we also collect your RCVS registration number, professional qualifications, and a profile photograph.
Location Data
We collect your approximate location to help connect you with RVNs or pet owners in your area. For pet owners, we use your postcode to show nearby providers. For RVNs, we use location to match you with local bookings. You can withdraw location consent at any time in your device settings.
Booking & Pet Information
We collect information about your pets (species, name, age, health notes you provide) and your booking history in order to deliver and improve our services.
Payment Information
We use Stripe to process all payments. zumi does not store your full card details. Stripe handles payment data in accordance with PCI DSS standards. We retain a record of transaction amounts and dates for accounting purposes.
Communications
If you contact us by email or through the App, we store the content of your messages. If you subscribe to our newsletter, we store your email address.
Technical Data
We collect standard technical information including your IP address, browser type, device identifiers, operating system, and app usage data to maintain and improve our services.
3. How We Use Your Data
We use your personal data to:
- Create and manage your zumi account
- Match pet owners with suitable RVNs
- Process bookings and payments
- Send booking confirmations and service notifications
- Verify RVN qualifications and RCVS registration
- Provide customer support
- Send marketing communications (where you have consented)
- Analyse usage patterns to improve the App
- Comply with legal and regulatory obligations
4. Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Providing the zumi service | Contract performance |
| Processing payments | Contract performance |
| Safety & fraud prevention | Legitimate interests |
| Marketing emails | Consent |
| Analytics & improvement | Legitimate interests |
| Legal compliance | Legal obligation |
6. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory reasons (for example, financial records must be retained for six years under UK tax law).
7. Your Rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Portability — receive your data in a structured, machine-readable format
- Restriction — ask us to limit how we use your data
- Objection — object to processing based on legitimate interests
- Withdraw consent — at any time, where processing is based on consent
To exercise any of these rights, please email hello@wearezumi.com. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encryption of data in transit (TLS), encrypted storage of passwords, and regular security reviews.
No method of data transmission over the internet is entirely secure. We cannot guarantee the absolute security of your data, but we will notify you and the ICO without undue delay if a breach is likely to result in a risk to your rights and freedoms.
10. Third-Party Links
Our website and App may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or a prominent notice in the App. The “last updated” date at the top of this page will always reflect the most recent revision.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us: