Privacy Policy

About this notice

Please read this privacy notice carefully. It explains who we are, how and why we collect, use, store and share personal information, your rights under UK data protection law, and how to contact us or the Information Commissioner’s Office (ICO) if you have a concern.

This notice applies to our website (including our online shop, member account, boarding enquiries, care guides, contact and newsletter forms), in-store dealings where we record your details, and related communications. It is written for visitors and customers in the United Kingdom.

This notice is provided for information and does not constitute legal advice. We may update it from time to time; the “Last updated” date at the top of this page shows the current version.

Who we are (data controller)

The data controller responsible for your personal information is Birmingham Reptiles and Pets Ltd (company number 09506230), trading as Birmingham Reptiles, of 274 Slade Road, Erdington, Birmingham, B23 7LX, United Kingdom.

When we say “we”, “us” or “our”, we mean that company. We are regulated under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and we also follow the Privacy and Electronic Communications Regulations (PECR) for cookies, similar technologies, and electronic marketing.

We do not currently appoint a Data Protection Officer. For privacy questions, use the contact details in “How to contact us” below.

Our website and Wix

This website is built and hosted as a Wix Headless (Wix-managed) site. Wix.com Ltd and its group companies (“Wix”) provide the platform that powers our online store, member accounts, checkout, forms, content management, media hosting, and related infrastructure.

In practice that means personal information you submit on this site (for example orders, account details, boarding enquiries, contact messages, or newsletter sign-ups) is processed using Wix systems and may be stored on Wix’s servers. Wix acts as our processor for those platform services under our arrangements with Wix, and may also process certain technical data as described in Wix’s own privacy materials.

You can read more about how Wix handles data in Wix’s privacy policy and related notices (available on wix.com). Payment card details entered at checkout are handled by Wix’s payment partners under PCI-DSS standards; we do not store full card numbers on our own systems.

Personal information we collect

We only collect personal information that we need for clear purposes. Depending on how you use our services, this may include:

• Identity and contact details — name, email address, telephone number, and postal / delivery address
• Account details — member login email, profile information you save (for example delivery address), and preferences linked to your account
• Order and payment information — products ordered, order history, delivery choices, billing details, and payment status (card data is processed by payment providers; we receive confirmation and limited payment metadata, not full card numbers)
• Boarding and animal-care information — enquiry details, service type, dates, messages, and information you provide about your animals (for example name, species, morph, notes, medications or husbandry needs). Please only share what we need to care for your animals safely
• “My Reptiles” library — animal names, species, morph, notes, and preferred boarding service you choose to save for faster bookings
• Communications — messages sent via our contact form, email, phone, WhatsApp, or social channels, and records of our replies
• Marketing preferences — newsletter subscription status and opt-out choices
• Technical and usage data — IP address, device and browser type, approximate location derived from IP, pages viewed, referring URLs, and cookie or similar identifiers (see “Cookies and similar technologies”)
• Security and fraud-prevention data — logs and signals used to protect accounts, checkout, and our systems

How we collect information

We collect personal information when you:

• browse or use this website (including cookies and similar technologies, subject to your choices)
• create or use a member account, update My Details, or manage My Reptiles
• add items to your cart, check out, or complete a purchase
• submit a boarding enquiry or manage boarding-related requests
• use our contact form, email us, call us, message us on WhatsApp, or contact us via social media
• subscribe to our newsletter or other marketing (where offered)
• visit our store and provide details for an order, boarding, or enquiry
• interact with embedded third-party content you choose to load (for example maps or social embeds), subject to those providers’ terms

How we use your information and our lawful bases

Under UK GDPR we must have a lawful basis for each use of personal information. The main bases we rely on are: contract (or steps you ask us to take before a contract); legitimate interests (balanced against your rights); legal obligation; and consent (where required — for example certain cookies under PECR, or some marketing).

When providing information is required

If you want to place an order, create an account, or submit a boarding enquiry, we need certain details (typically name, contact details, and for orders a delivery or collection arrangement). Without that information we may not be able to complete your request.

Optional fields (for example marketing tick-boxes, non-essential cookies, or extra animal notes) are not required to browse the public site. Checkout and account features that rely on strictly necessary cookies will still need those essential technologies to work.

Who we share information with

We do not sell your personal information. We share it only where needed, with appropriate safeguards:

• Wix — website hosting, online store, members, cart and checkout infrastructure, forms, CMS, media delivery, and related platform services
• Payment providers used via Wix checkout — to take and confirm payment securely
• Delivery and logistics partners — to ship or arrange collection of orders where relevant (livestock shipping is subject to our store policies and legal requirements)
• Professional advisers — for example accountants, insurers or lawyers, where needed
• IT and security tools that support the site (including those provided through Wix)
• Regulators, courts or law enforcement — when required by law or to protect rights, safety or property
• Staff and authorised contractors who need access to serve you (under confidentiality duties)

International transfers

We are based in the United Kingdom. Because we use Wix and other technology providers, personal information may be transferred to or accessed from countries outside the UK (and, where relevant, the European Economic Area).

Where that happens, we take steps designed to ensure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement / Addendum, or standard contractual clauses approved for UK transfers, together with any supplementary measures our providers apply.

Wix describes its international transfer approach in its privacy documentation. If you would like more detail about a specific transfer, contact us using the details below.

How long we keep information

We keep personal information only as long as needed for the purposes above, including legal, accounting and reporting requirements. Typical periods include:

• Orders, invoices and tax records — usually at least 6 years (UK tax and company record-keeping)
• Member account data — for as long as the account remains open, then a short period afterwards unless we must keep records longer
• Boarding enquiries and related animal notes — for the boarding relationship and a reasonable period afterwards for welfare, safety and dispute handling (and longer if required by law)
• Contact form messages — for as long as needed to resolve your enquiry and for a limited archive period
• Newsletter lists — until you unsubscribe or we delete inactive addresses
• Cookie consent choices (for example our local “brConsent” preference) — until you clear site data or update your choices
• Security logs — for a limited period appropriate to investigating incidents
• When information is no longer required, we delete or anonymise it where practicable

Cookies and similar technologies

We use cookies and similar technologies (such as local storage and pixels) on this site. UK PECR rules apply alongside UK GDPR where personal data is involved.

Strictly necessary technologies are used to provide services you request — for example keeping your shopping cart, maintaining a secure login session, protecting checkout, load and security features, and remembering your cookie preferences. These do not require consent under PECR, but we still explain them here.

Optional technologies may include functional preferences, analytics or performance measurement, and advertising or personalisation. We only set non-essential cookies where the law allows — typically after you make a choice in our cookie banner, or where a narrow PECR exception applies (for example certain first-party statistics with clear information and an easy way to object).

Marketing communications

If you subscribe to our newsletter, we will use the email address you provide to send it. You can unsubscribe using the link in any marketing email or by contacting us.

If you are an existing customer, we may occasionally tell you about similar products or services where PECR allows, unless you opted out when we collected your details or you opt out later. We will not spam you, and every marketing email will include a simple way to stop future messages.

We do not send marketing texts or automated calls without the consent or other PECR basis required by law.

Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects about you (for example automated refusal of service without human involvement). Fraud and security checks may use automated tools, but significant decisions about customers are handled with appropriate human oversight.

Your rights

Under UK GDPR you have rights over your personal information. They are not always absolute — exceptions can apply — but we will explain if we cannot fully meet a request. Your rights include:

• Right to be informed — clear information about how we use your data (this notice)
• Right of access — a copy of the personal information we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — ask us to delete data in certain circumstances
• Right to restrict processing — limit how we use data in certain circumstances
• Right to data portability — receive certain data in a reusable format where the legal conditions are met
• Right to object — object to processing based on legitimate interests, and to direct marketing (you can always object to marketing)
• Rights related to automated decision-making — as applicable
• Right to withdraw consent — where we rely on consent (including optional cookies), you can withdraw it at any time without affecting earlier lawful processing

Keeping information secure

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or alteration. That includes relying on Wix’s platform security features, limiting staff access to those who need it, and using secure connections (HTTPS) on this site.

No online service can be guaranteed 100% secure. Please keep your member password confidential and use a strong, unique password. If you suspect misuse of your account or data, contact us promptly.

Where a personal data breach risks your rights and freedoms, we will notify the ICO and affected individuals when the law requires it.

For general online safety advice, see https://www.getsafeonline.org/.

How to contact us

For questions about this notice or the personal information we hold about you:

Birmingham Reptiles and Pets Ltd, 274 Slade Road, Erdington, Birmingham B23 7LX, United Kingdom.

Email: hello@birminghamreptiles.co.uk · Telephone: 0121 386 1160 · Web: https://www.birminghamreptiles.co.uk/contact

How to complain

We hope we can resolve any concern. Please contact us first so we can try to put things right.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/ or telephone 0303 123 1113. The ICO’s website explains how to raise a concern: https://ico.org.uk/concerns/.

Changes to this notice

We may update this privacy notice to reflect changes in law, our services, or how we use personal information. The latest version will always be published on this page with an updated date. Where changes are significant, we may also highlight them on the site or contact you if appropriate.

This version was published on 23 March 2026 and replaces earlier privacy wording on this website (including the previous March 2022 notice).

Do you need extra help?

If you would like this notice in another format (for example large print), please contact us and we will do our best to help.