Version 22 October 2026. Read with our privacy page.
Part A: Boarder terms
These terms form a contract between Small Pet Bookings and the boarding business that accepts them.
A1. Parties. “We” means Small Pet Bookings, run by Martin Maran trading as Redbeck Rabbit Boarding, a sole trader, of 48 Caldene Avenue, Bradford BD12 0JP. “You” means the boarding business named on the account, and the person accepting confirms they can bind it.
A2. The service. We provide an online booking page, a booking planner and admin area, vaccination document uploads, and automatic booking emails (the Service). We may improve or change features, but will not remove a core feature without 30 days’ notice.
A3. Payments between you and your customers. The Service records deposits and payments only. It does not take, process or hold money, or card or bank details. Your customers pay you directly, and you are responsible for your prices, refunds, deposits and your own terms with customers.
A4. Price and billing. Setting up and previewing is free. The Service costs £5 a month from the day you go live, billed monthly in advance through our payment provider. We will give 30 days’ notice of any price change.
A5. Cancelling. You can cancel at any time in the portal. There is no contract period. Your booking page stays live to the end of the month you have paid for, then goes offline. Clause B10 sets out what happens to your data.
A6. Your responsibilities. You are responsible for the content of your booking page, your terms with customers, giving customers a privacy notice, and keeping your login secure. You must not use the Service for anything unlawful.
A7. Suspension. We may suspend your booking page if payment fails and is not put right within 14 days, or if the Service is being used unlawfully. We will tell you first unless the law or urgent security needs prevent it.
A8. Availability. We aim to keep the Service available at all times but do not guarantee it will be uninterrupted. We will tell you about planned maintenance in advance where we can.
A9. Liability. Nothing limits liability for death or personal injury caused by negligence, or for fraud. Otherwise, our total liability in any 12 months is limited to the fees you paid in those 12 months, and neither side is liable for loss of profit, business or goodwill.
A10. Changes to these terms. We will give 30 days’ notice of any change by email. If you do not agree, you may cancel before the change takes effect.
A11. Law. These terms are governed by the law of England and Wales, and the courts of England and Wales have jurisdiction.
Part B: Data processing agreement
This agreement meets Article 28(3) of the UK GDPR. It applies to personal data we process for you through the Service.
B1. Roles. You are the controller of your customers’ personal data. We are your processor. Schedule 1 sets out the subject matter, duration, nature and purpose of the processing, the types of personal data and the categories of data subjects.
B2. Instructions. We process the personal data only on your documented instructions, including on transfers outside the UK. These terms, and your use of the Service’s settings and features, are your instructions. If the law requires other processing, we will tell you first unless the law forbids it. We will tell you at once if we believe an instruction breaks data protection law.
B3. Confidentiality. Everyone we authorise to process the personal data is bound by confidentiality.
B4. Security. We apply the technical and organisational measures in Schedule 2, as required by Article 32.
B5. Subprocessors. You give general authorisation for the subprocessors in Schedule 3. We will give you at least 30 days’ notice by email of any new or replacement subprocessor. You may object on reasonable data protection grounds; if we cannot resolve it, you may cancel without charge before the change. Each subprocessor is bound by data protection terms no less protective than these, and we remain liable to you for its performance.
B6. Your customers’ rights. We will help you, through the Service’s features and on request, to respond to your customers when they exercise their rights, including access, correction, deletion and data portability. If a customer contacts us directly, we will pass the request to you without delay and not answer it ourselves.
B7. Breaches and other assistance. We will tell you without undue delay, and in any event within 48 hours, after becoming aware of a personal data breach affecting your data. We will give you the information you need to meet your own duty to report to the ICO within 72 hours. We will also help you with security, data protection impact assessments and consultation with the ICO, taking into account the information available to us.
B8. International transfers. Our subprocessor may process data outside the UK. Any such transfer is made under a valid UK transfer mechanism, such as adequacy regulations or the UK International Data Transfer Addendum.
B9. Audits. We will make available all information needed to show we meet Article 28, and allow and contribute to audits and inspections by you or an auditor you appoint, on reasonable notice. We may first answer in writing to keep costs reasonable.
B10. End of the Service. When you cancel, you can download all your data for 30 days after your booking page goes offline. We then delete it permanently, unless the law requires us to keep it. Copies in backups are overwritten within a further 30 days. On request, we will confirm deletion in writing.
B11. Order of precedence. If Part A and Part B conflict on personal data, Part B wins.
Schedule 1: Details of processing
| Subject matter | Running your online booking page, planner, records and booking emails |
|---|---|
| Duration | While your account is open, plus up to 30 days to download and a further 30 days for backups to clear |
| Nature | Collecting, storing, organising, displaying, emailing, exporting and deleting |
| Purpose | Taking and managing bookings for your small animal boarding business |
| Data subjects | Your customers, and anyone they name as an emergency contact |
| Personal data | Name, email, phone, address, emergency contact, booking dates, deposit and payment records (amounts and dates only, no card or bank details), pet names and care notes |
| Uploaded documents | Vaccination cards and vet records uploaded by customers, which may show the owner’s name and address and the vet practice |
| Special category data | None intended. Booking notes are free text, so you should tell customers not to include their own health details |
Schedule 2: Security measures
- Each boarder’s data is tagged with their account and every query filters on it, so one boarder cannot see another’s data
- Uploaded documents are private and served only to the logged in boarder who owns them
- All traffic is encrypted in transit (HTTPS only)
- Data is encrypted at rest by our hosting provider
- Boarder logins use strong passwords or emailed sign in links, with sessions that expire
- Repeated failed logins are slowed or blocked
- Daily point in time backups kept for 30 days
- Full export of bookings, customers and documents at any time
- Automatic permanent deletion 30 days after the page goes offline
- Only the Small Pet Bookings operator can reach the admin systems, using two factor sign in
- Card and bank details are never collected
Schedule 3: Approved subprocessors
One subprocessor handles your customers' data.
| Subprocessor | What it does | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, document storage and sending booking emails | Global network; transfers covered by Cloudflare’s data processing addendum |
Our payment provider, Stripe, handles only your £5 subscription. It never sees your customers’ data, so it is not a subprocessor under this agreement.
Contact
Questions about these terms: hello@smallpetbookings.co.uk. Small Pet Bookings is run by Martin Maran trading as Redbeck Rabbit Boarding, 48 Caldene Avenue, Bradford BD12 0JP.