1. Introduction

With the following information we want to give you an overview of the processing of your personal data on our website https://lolaspetsalon.com// (“website“). We also want to inform you about your rights under data protection laws. The processing of your personal data by us is always in accordance with the UK General Data Protection Regulation (“UK GDPR“) and all applicable country-specific data protection regulations.

Last updated: February 2025

1. Introduction
2. Controller
3. Updates to this Privacy Policy
4. Use of Third-Party Tools
5. How is Your Personal Data Collected
6. How is Your Personal Data Processed
7. Cookies
8. Contact
9. Application
10. Social Networks
11. Data security
12. Your Rights

2. Controller

References to the terms “we”, “us” and “our” in this privacy policy are to The World Of Lola Limited ‘Lola’s Pet Salon’, a private limited company incorporated in England and Wales with registered number 16033356.

The controller according to Art.4 Nr. 1 UK GDPR is

The World Of Lola Limited,

Connect House 133-137 Alexandra Road, Wimbledon, Email address: [email protected]

3. Use of Third-Party Tools

We use third-party services to provide certain functions and services on our website. The specific services can be found in the corresponding chapters.

In some cases, we use service providers that are based in a third country, i.e., outside the European Economic Area. We only transfer data to a third country with an adequate level of data protection or where appropriate safeguards pursuant to Art. 44-49 UK GDPR have been concluded. You have the right to request a copy of the appropriate safeguards we have put in place. For this purpose, please send us an email to the email address mentioned in this privacy policy.

4. How is Your Personal Data Collected

We use different methods to collect data from and about you including through:

• Direct interactions.

You may give us your personal data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

• request for our products or services;
• complete an online submission form;
• request marketing to be sent to you;
• employment applications;
• submitting funding applications and any related materials including slide decks, presentations and web submissions;
• give us some feedback;
• use of our website (https://lolaspetsalon.com/); or use of our social media pages including Instagram (https://www.instagram.com/lolaspetsalon/) and LinkedIn (https://www.linkedin.com/company/lolas-pet-salon/)
• Automated technologies or interactions.

As you interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns. This information does not reveal your specific identity. We collect this personal data by using server logs and other similar technologies such as IP address identification and logging.

• Lola’s Pet Salon may also use cookies to collect information on you such as your browser type, time spent on the services, pages visited, language preferences, and other traffic data.
• Third parties or publicly available sources.

We may receive personal data about you from various third parties including analytics providers, advertising networks and search information providers. We require third parties to have lawful rights to collect, use and share your data before providing any data to us.

• Identity data from data brokers or aggregators.
• Public sources. Identity data from publicly available sources such as Companies House and the Electoral Register.

5. How is Your Personal Data Processed

“Personal data” is information that identifies you as an individual or relates to an identifiable individual.

We will only use your personal data when the law allows us to and we will not sell, trade or otherwise deal with your personal data in any way that contravenes this privacy policy.

We have set out below a description of the ways we plan to use your personal data, and on which legal basis we do so. Where we rely on our legitimate interests as a legal basis for processing, we have identified the nature of those legitimate interests.

We may also collect, use and share aggregated data such as statistical or demographic data for any purpose. Such may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy policy.

Unless we request it, we ask that you not send us, and you not disclose, any sensitive personal data (e.g., national insurance numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through the services or otherwise.

5.1 Provision of the Website

When you visit our website, data that your browser transmits to our server, is automatically processed. This data is stored in the log files of the server (in so-called “server log files”). The following personal data is processed:

• Browser type and browser version
• Operating system used
• Referrer URL (previously visited website)
• Host name of the accessing computer
• Date and time of server request
• IP address

5.1.1 Purpose of Processing

We do not use the data stored in server log files to draw any conclusion about your person. The purposes pursued by us include:

• the guarantee of a smooth connection set-up of the website,
• the clarification of acts of abuse or fraud,
• problem analysis in the network, and
• the evaluation of system security and stability.

5.1.2 Legal Basis

The legal basis for processing your personal data is our legitimate interest pursuant to Art. 6 (1) (f) UK GDPR. We have a prevailing interest in being able guarantee the website’s stability and security.

5.1.3 Retention Period

The log files are stored for security reasons (e.g., to clarify acts of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further retention is required for evidentiary purposes will be retained until the matter has been finally clarified.

5.1.4 Recipients of Personal Data

We use the following service provider:

Terra Host AS

6. Cookies

6.1 General Information

We use cookies on our website. These are files that your browser automatically creates and that are stored on your IT system when you visit our site. Information is stored in the cookie that is related to the specific device used.

Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the visited websites and servers to distinguish the individual browser of the data subject from other browsers that contain other cookies. A specific browser can be recognised and identified via the unique cookie ID.

When you visit our website or a sub-website for the first time and it contains cookies, you will be shown “data protection settings”. There you will be informed about the individual cookies that we use. You can find out about each individual cookie in terms of the name, the provider, the purpose of the processing and the storage period. In addition, you can allow us to use non-essential cookies and reverse this decision there.

In legal terms, a distinction must be made between essential and non-essential cookies:

6.2 Essential Cookies

We use essential cookies. These are cookies that are technically necessary to provide all functions of our website. The legal basis for processing your personal data is our legitimate interest pursuant to Art. 6 (1) (f) UK GDPR. We have a prevailing interest in being able to offer our a technically functioning service.

6.3 Non-essential Cookies

We also use non-essential cookies (e.g. analysis and marketing cookies). These are cookies that are not technically necessary. We use them to understand your behaviour on our website and to improve our services.

6.4 Cookie Banner

6.4.1 Scope of processing

In order to be able to present you with information regarding cookies in the form of the “privacy settings”, we use a cookie banner on our website. With our cookie banner, we inform you about the cookies we specifically use. In addition, we give you the opportunity to decide whether you want to consent to the setting of non-essential cookies.  The following can be processed:

• Usage data (e.g. web pages visited, time of access)
• Meta and communication data (e.g. IP address).

6.4.2 Purpose of processing

We process your personal data for the following purposes:

• Informing the user about the cookies we use.
• Enabling the user to consent to cookies that are not technically necessary.

6.4.3 Legal basis for processing

The legal basis for the use of the cookie banner is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have an overriding legitimate interest in using the cookie banner, which enables us to obtain the legally required consents for the use of non-essential cookies and to comply with our duty to provide information regarding cookies.

6.4.4 Storage period

The cookie banner stores preferences until you reset or adjust them.

6.4.5 Recipients of personal data

We don’t use an external provider and do not

6.5 Google Tag Manager

We use Google Tag Manager to control the use of code snippets (“tags”), such as tracking code on our website.

Through Google Tag Manager, we process, among other things, the following personal data:

· IP address

· Device data, such as operating system, browser version, screen resolution

6.5.1 Purpose of Processing

In doing so, the Google Tag Manager enables us to quickly and easily exchange code on our website via a web interface without having to intervene in the source code.

6.5.2 Legal Basis

The legal basis for processing your personal data is your consent pursuant to Art. 6 (1) lit a UK GDPR. The cookies are set only after you have given your consent via our cookie banner.

6.5.3 Retention Period

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. The storage period of personal data depends on the providers used.

6.5.4 Recipients of Personal Data

We use the following service provider:

Google Ireland Ltd.

Gordon House,

Barrow Street, Dublin 4

Ireland

7. Registration

7.1 General Information

Through our website you can register via our registration form.  To process your registration, we need the following personal data from you:

• First and last name
• Email address
• Date and time of the inquiry
• IP address
• Social media profile (voluntary)
• Information, you want to share with us (voluntary)

7.2 Purpose of Processing

We process your data to respond to your inquiry and other matters arising from it.

7.3 Legal Basis

If your request is connected to pre-contractual measures or in relation to an existing contract with us, the legal basis is the performance of the contract and implementation of pre-contractual measures pursuant to Art. 6 (1) (b) UK GDPR.

If your request is made independently of contractual or pre-contractual measures, we obtain consent to process your data

7.4 Retention Period

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of contact inquiries, this is usually the case when it is clear from the circumstances that the specific matter has been conclusively processed.

7.5 Recipients of Personal Data

We use the following service provider:

Superhuman Labs, Inc.

8. Contact

8.1 General Information

Through our website you can contact us by email. To contact you and to answer your request, we process the following personal data from you:

• First and last name
• Email address
• Date and time of the inquiry
• IP address
• Other personal data that you provide to us while contacting us.

8.2 Purpose of Processing

We process your data to respond to your inquiry and other matters arising from it.

8.3 Legal Basis

If your request is connected to pre-contractual measures or in relation to an existing contract with us, the legal basis is the performance of the contract and implementation of pre-contractual measures pursuant to Art. 6 (1) (b) UK GDPR.

If your request is made independently of contractual or pre-contractual measures, our prevailing legitimate interests pursuant to Art. 6 (1) (f) UK GDPR constitute the legal basis. The prevailing legitimate interest corresponds to the above-mentioned purposes.

8.4 Retention Period

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of contact inquiries, this is usually the case when it is clear from the circumstances that the specific matter has been conclusively processed.

8.5 Recipients of Personal Data

We use the following service provider:

Superhuman Labs, Inc.

9. Social Networks

9.1 General Information

We maintain presences in social networks to communicate with you and inform you about our services. We use the following social media networks: Instagram and LinkedIn.

We use the following social media plug-in: Instagram. This allows you to communicate with such services and like or comment from our website.

Please note that we neither have the control of the extent of personal data that is collected by the respective plug-in provider, nor do we know the processing’s purpose or the period your personal data will be retained.

Further information about the processing of your personal data in the provider’s course of operation is provided via their respective privacy policy. Moreover, you will be provided with further information regarding your rights and setting concerning privacy.

9.2 Purpose of Processing

The purpose of the processing is the maintenance of presences in social media. Social media plug-ins enable a direct communication between your device and the servers of the social media provider, allowing the social media provider to communicate with you and collect information about you browsing our website.

9.3 Legal Basis

The legal basis for the processing of personal data is based on Article 6 (1)  lit. a UK GDPR, your voluntary and revocable consent.

9.4 Recipients of Personal Data

We have company presences in the following social networks:

LinkedIn Ireland Unlimited

Company Wilton Place

Dublin 2

Ireland

LinkedIn Privacy Policy

Meta Platforms Ireland Ltd.

4 Grand Canal Square

Grand Canal Harbour

Dublin 2 Ireland

Meta Privacy Policy

10. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. We cannot guarantee the security of any personal data that you disclose online, for example when it is sent by email. You accept the inherent security risks of providing information online over the internet and will not hold Lola’s Pet Salon responsible for any breach of security unless this is due to Lola’s Pet Salon’s negligence or wilful default.

11. Your Rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

Right to Object

You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation, which is carried out on the basis of data processing in the public interest pursuant to Art. 6 (1) (e) UK GDPR or on the basis of our legitimate interest pursuant to Art. 6 (1) (f) UK GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Where we need to collect personal data by law, or under the terms of a contract we have (or are negotiating) with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with our services). In this case, we may have to cancel all or part of the services you have with us, but we will notify you if this is the case at the time.

You are not required to pay any charge for exercising your rights. We have one month to respond to you. Please contact us at [email protected], if you wish to make a request

11.1 How to complain

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113 ICO

website: https://www.ico.org.uk