Privacy Policy
This policy explains how ConsumaVet ("we") uses personal data when you visit consumavet.co.uk or use the ConsumaVet marketplace. We are the controller of this data. Contact: hello@consumavet.co.uk.
Who this covers
- Staff of veterinary practices who register, order or manage a practice account.
- Staff of suppliers who apply to join, manage a supplier account or receive purchase orders.
- People who register their interest in ConsumaVet before it opens.
- Visitors to our website and people who contact us.
What we collect
| Data | Examples | Source |
|---|---|---|
| Identity and contact | Name, job role, work email, phone | You or your practice / supplier admin |
| Business details | Practice or company name, address, RCVS premises number, VAT number | You, and the public RCVS register |
| Account and usage | Login details, user role, spend limits, orders, favourites, agreed prices, invoices | Created as you use the marketplace |
| Advertising data | Clicks on sponsored products and banners, linked to sales within 7 days | Our website |
| Technical data | IP address, browser type, essential cookies, error logs | Your device |
| Messages | Emails, support requests and live chat conversations (your name and email if you give them, and what you type) | You |
| Website usage statistics (only if you accept analytics cookies) | Pages you visit on our website, roughly where you are (town or region), your device and browser type, and whether you registered your interest, linked to Google Analytics cookies; never your name, email, phone number or postcode | Our website, through Google Analytics |
| Website visit history (only if you accept analytics cookies) | The pages you visit on our website and when. If you then register your interest, apply to join or register a practice, we link this to your name, email and company in our CRM | Our website, through Zoho SalesIQ |
| Ad measurement (only if you accept marketing cookies) | Pages you visit on our website and whether you registered your interest, linked to Meta's cookies; never your name, email or postcode | Our website, through the Meta pixel |
We do not collect payment card details. Supplier invoices paid by PayPal are processed by PayPal.
Why we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Running accounts, passing orders to suppliers as purchase orders, showing agreed prices | Contract with your organisation; legitimate interests |
| Checking practices against the RCVS register | Legitimate interests (only genuine practices can buy) |
| Website usage statistics with Google Analytics, so we can improve the website | Consent (analytics cookies), which you can withdraw at any time with "Cookie settings" |
| Recording your website visits with Zoho SalesIQ and linking them to your enquiry in our Zoho CRM when you sign up, so we can follow up on what interests you | Consent (analytics cookies), which you can withdraw at any time with "Cookie settings" |
| Measuring our Facebook and Instagram ads with the Meta pixel | Consent (marketing cookies), which you can withdraw at any time with "Cookie settings" |
| Billing suppliers and keeping financial records | Contract; legal obligation |
| Service emails (invites, order updates, invoices) | Contract; legitimate interests |
| Marketing reports for suppliers (clicks and revenue, never naming the practice) | Legitimate interests |
| Security, fraud prevention, fixing faults | Legitimate interests; legal obligation |
| Replying to people who register their interest, and sending launch news to those who tick the box asking for it | Legitimate interests; consent for launch news (you can unsubscribe at any time) |
| Business news and offers by email | Legitimate interests for business contacts, with an unsubscribe link in every email |
Who we share it with
- Suppliers you order from receive the order details, delivery address and the name of the person who placed it. Each supplier is responsible for how it uses that data.
- Distributors: where a supplier's product is delivered by a distributor (shown as "Supplied via"), that distributor may receive a copy of the purchase order so it can deliver.
- Your group's head office: if your practice belongs to a corporate group on ConsumaVet, the group's head-office users can see your practice's details, users, orders and spend.
- Practices see supplier business details and prices. They never see another practice's prices.
- Service providers acting for us: hosting (Medusa Cloud, EU servers in Frankfurt), database (Neon, EU), CRM and live chat (Zoho CRM and Zoho SalesIQ, EU data centre), email delivery (Resend, EU region), and PayPal for supplier payments.
- Google Ireland Limited (Google Analytics), only if you accept analytics cookies: Google Analytics tells us how our website is used, as a service provider acting for us. We have turned off Google's advertising features and Google signals. Google Analytics does not store IP addresses, and we keep the statistics for 14 months. Google may process the data in the United States, under the safeguards in its data processing terms (including the UK-US data bridge and standard contractual clauses). More at policies.google.com/privacy.
- Meta Platforms Ireland Ltd (Facebook and Instagram), only if you accept marketing cookies: the Meta pixel sends Meta the pages you visit on our website and when you register your interest, so we can measure our ads. Meta also uses this data for its own purposes as an independent controller, as explained in its privacy policy at facebook.com/privacy/policy, and may transfer it outside the UK under its own safeguards.
- Professional advisers and authorities where the law requires it.
We do not sell personal data. Our main providers store data in the UK or EU. Where data leaves the UK, we use the UK International Data Transfer Agreement or an adequacy decision.
How long we keep it
- Account data: while the account is open, then 2 years.
- Orders, invoices and financial records: 6 years after the financial year they relate to (HMRC rules).
- Enquiries that do not lead to an account: 12 months.
- Server and security logs: up to 90 days.
Your rights
You can ask to access, correct or delete your data, restrict or object to our use of it, or receive a copy in a portable format. Email hello@consumavet.co.uk. We reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes
We will post any changes on this page and email account holders about important ones. Last updated: 12 November 2026.