Last updated: 30 October 2026
This page explains what personal data we collect when you use this website or ask us about a kitten, what we do with it, how long we keep it, who else handles it, and what rights you have under UK data protection law. We have kept it in plain English. If anything is unclear, email us and we will explain it properly.
Who we are
Burnthwaites Siamese & Orientals is our cattery. We are Ross Davies and Paula Davies, and we are joint data controllers for this website and for the Burnthwaites kitten waiting list under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You can contact either of us about anything on this page.
You can email us at ross@burnthwaitessiamese.co.uk.
What we collect and why
1. Kitten enquiries and the waiting list
When you send a kitten enquiry, we collect what you type into the form: your name, email address, phone number if you give one, your town or area, the country you live in if you give it, the breed, whether you would like a boy or a girl, the colour you would like, whether you are looking for a pet, a show cat or a breeding cat, when you are hoping to bring a kitten home, what you tell us about your home, and anything else you add.
We use it to reply to you, to work out whether one of our kittens would suit you, and to keep your place on our waiting list. Alongside your enquiry we keep a status (for example waiting, offered or reserved) and our own private notes, such as when we last spoke. Your enquiry is kept on this website and is not visible to the public. Only we can open the waiting list, using a single-use sign-in link sent to our own email.
Lawful basis: steps taken at your request before a possible sale (UK GDPR Article 6(1)(b)), because you have asked us about a kitten, and our legitimate interest in running a fair waiting list (Article 6(1)(f)).
How long we keep it: your enquiry is deleted automatically 12 months after it was last updated, or sooner if you ask us to remove it.
2. Litter news emails
The enquiry form has a separate box: “Yes, tell me when a litter that suits me is born”. It is not ticked unless you tick it. If you do, we may email you when a litter that might suit you is on the way or has been born. We write and send these ourselves, only when we have news. They may include photographs of our cats and kittens and a link to a page about the litter. Each person gets their own email, so nobody sees anyone else’s address, and every email has a link to stop them.
Lawful basis: consent (UK GDPR Article 6(1)(a) and the Privacy and Electronic Communications Regulations, regulation 22). You can withdraw it at any time with the link in any of our emails, or by emailing us.
How long we keep it: until you unsubscribe or your enquiry is deleted. When you unsubscribe, we keep a scrambled (one-way hashed) copy of your email address, so that an older enquiry cannot be emailed by mistake. If you later send a new enquiry and tick the box again, we will treat that as a fresh yes.
3. The contact form
The contact form collects your name, email address and message. It is not stored on this website. The form emails it straight to us, and we use it only to reply to you.
Lawful basis: legitimate interests (UK GDPR Article 6(1)(f)), replying to a message you have sent us.
How long we keep it: up to 24 months after our last exchange, then deleted.
4. Comments on blog posts
If you leave a comment, we collect your name, email address and comment. Your name and comment are shown publicly once approved. Your email address is not. WordPress also records your IP address and browser details to help filter out spam.
Lawful basis: consent (UK GDPR Article 6(1)(a)), given when you submit the comment.
How long we keep it: until you ask us to remove it. We will do that within 30 days of your request.
5. Server logs
Our web host automatically records standard technical details when any page is visited, including your IP address, browser details, the page requested and the time. These are used only for security and to fix problems, and are not combined with anything else to identify you.
Lawful basis: legitimate interests (UK GDPR Article 6(1)(f)), keeping the site secure and working.
How long we keep it: 30 days, then deleted automatically.
6. Visitor statistics (Google Analytics)
We use Google Analytics to see which pages people read and how they found the site. It only runs if you accept analytics cookies in the cookie banner. If you decline, no analytics cookies are set and nothing is sent to Google Analytics.
Lawful basis: consent (UK GDPR Article 6(1)(a) and the Privacy and Electronic Communications Regulations, regulation 6).
How long we keep it: no longer than 14 months, after which Google deletes the visit-level data.
7. Fonts
The lettering on this site is loaded from Google Fonts. To show it, your browser connects to Google’s servers, which means Google receives your IP address. No cookies are set for this.
Lawful basis: legitimate interests (UK GDPR Article 6(1)(f)), displaying the site properly.
Cookies
- Analytics cookies (Google Analytics): only if you accept them in the cookie banner.
- Comment cookies (WordPress): only if you leave a comment and choose to have your details remembered.
- Waiting-list sign-in cookie: used only when we sign in to our own waiting list. Visitors never receive it.
This site does not use advertising or social-media tracking cookies.
Who else handles your data
We do not sell, rent or trade your personal data. These service providers handle it only as far as they need to for the website to work:
- Hostinger: hosts the website and its database, including enquiries and comments, and runs the content delivery network that serves the pages.
- Google: delivers the website’s emails (Google Workspace), measures visits if you accept analytics cookies, and serves the fonts.
- Gravity Forms: the software that runs the enquiry form. It runs on this website and does not send your enquiry anywhere else.
- Cats Whiskers Web Designs: builds and maintains this website and may see enquiry data while doing so.
Police, councils and other authorities
We do not routinely pass data to public authorities. We will share information with the police, a local council, Trading Standards or a court only when the law requires it, or where it is necessary to prevent or detect fraud or crime, or to protect a cat’s welfare.
Data outside the UK
Google may process personal data outside the United Kingdom. Where that happens, it is covered by a UK adequacy decision (including the UK-US Data Bridge) or by approved contract terms (the UK International Data Transfer Agreement or Addendum).
Your rights
- Access: ask for a copy of the personal data we hold about you.
- Correction: ask us to put right anything that is wrong.
- Deletion: ask us to delete your data, including taking you off the waiting list.
- Restriction: ask us to pause using your data in certain circumstances.
- Portability: ask for your data in a format you can take elsewhere.
- Objection: object to anything we do on the basis of legitimate interests.
- Withdrawing consent: where we rely on your consent, you can withdraw it at any time.
To use any of these rights, email us at ross@burnthwaitessiamese.co.uk. We will reply within one calendar month and there is no charge.
Keeping it safe
The whole site runs over an encrypted (HTTPS) connection. The waiting list is on a private page that search engines are told not to index and that only opens with a single-use link sent to our own email. Access to the website’s admin area is restricted.
No system is completely secure. If a breach of personal data is likely to put your rights at risk, we will report it to the Information Commissioner’s Office within 72 hours and tell anyone affected without undue delay.
Children
This site is not aimed at children under 13, and we do not knowingly collect their data. If you think a child under 13 has sent us their details, email us and we will delete them.
Changes to this policy
If we change how we use your data, we will update this page and the date at the top.
Complaints
If you are unhappy with how we have handled your data, please email us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk