Privacy Policy

Last updated: 01/09/2026

This policy explains what personal information Active Dog Behaviour collects through this website and The Active Dog Academy, why we collect it, who it is shared with, and what rights you have over it.

1. Who we are

Active Dog Behaviour is the controller of the personal information described in this policy. That means we decide what is collected and what happens to it.

  • Business: Active Dog Behaviour
  • Address: Serenite, La Mine Doree, Rue De La Boullerie, St. Andrew, Guernsey, GY6 8XQ,
  • Email: activedogbehaviour@gmail.com
  • Phone: 07781 424013

2. What this policy covers

This policy covers:

  • this website, activedogbehaviour.co.uk
  • The Active Dog Academy, the paid online membership
  • the enquiry form and the free lesson sign-up form on this website

If you also train with Katie in person, we will tell you separately how we handle the information you give us for those services. This policy is about the website and the Academy.

3. What we collect, why, and on what legal basis

Under section 10 and Schedule 2 of the Law we must have a lawful condition for everything we do with your information.

If you send us an enquiry

What we collect: Your first name, email address and whatever you write in the message box.

Where it comes from: You, directly.

Why: To read your enquiry and reply to it.

Our condition under Schedule 2: Our legitimate interests. we cannot answer a question without holding the question and a way to reply. If you are asking about booking, we also rely on taking steps at your request before entering into a contract.

Do you have to provide it: No. There is no obligation to use the form. You can phone, WhatsApp or email instead.

How long we keep it: 2 years from your last contact with us.

If you ask for the free lesson

What we collect: Your email address.

Where it comes from: You, directly.

Why: To send you the free lesson, and then a short series of emails about The Active Dog Academy.

Our condition under Schedule 2: Your consent. You gave it by entering your email to receive the lesson, and you can withdraw it at any time.

Do you have to provide it: No, but we cannot email you a lesson without an email address.

How long we keep it: Until you unsubscribe or ask us to remove you, and for 2 years after that so we do not add you back by mistake.

Every marketing email we send has an unsubscribe link in it. Withdrawing your consent does not affect anything we did with your information before you withdrew it.

If you join The Active Dog Academy

What we collect: Your name, your email address, and a password. We also store the state of your membership: whether you are on trial, active, cancelled, suspended or ended; the date your trial ends; the date your current paid period runs to; a PayPal subscription reference; a reference to the last billing event we processed; and how you signed up.

Where it comes from: You, when you sign up. The membership status information comes from PayPal each time something happens to your subscription.

Why: To create your account, let you log in, give you access to the lessons, take your monthly payment, keep your access in step with your subscription, and send you the emails the membership needs (welcome, payment problems, cancellation confirmations).

Our condition under Schedule 2: Performance of our contract with you. You cannot have a membership without an account, and the account cannot work without this information

Do you have to provide it: Yes. It is a contractual requirement. If you do not provide it we cannot give you a membership.

How long we keep it: For as long as you are a member, and for 2 years after your membership ends, so you can come back without starting again and so we can deal with any query about your payments. Records we need for tax and accounting purposes are kept for three years.

Your password is stored by our membership provider in a scrambled (hashed) form. We cannot see it, and neither can they.

Your card details

We never see your card details, and we never store them. When you start your membership, payment is taken by PayPal. You enter your card details on PayPal's own screen, and they go to PayPal, not to us. What comes back to us is a reference number for your subscription, whether it is active, and the date it is paid up to.

PayPal is a controller in its own right for the payment. Their own privacy notice governs what they do with your card details.

When you watch a lesson

Lesson videos are hosted by Vimeo and play inside our website. Vimeo receives technical information needed to deliver the video, which will include your IP address, your browser and device type, and which video you played. Vimeo sets cookies in your browser to do this.

We also record which lessons you have marked as watched, so your progress shows on your dashboard. This is stored in your own browser session.

Our condition under Schedule 2: performance of our contract with you. We cannot deliver a video library without delivering videos.

When you simply visit the website

Our website host records standard server logs, which include IP addresses, for a short period, for security and to keep the site running. This happens on every website and we do not use it to identify you.

Our condition under Schedule 2: our legitimate interests in keeping the site secure and available.

4. Special category data

We do not ask for special category data, the sensitive categories listed in Schedule 3 of the Law, such as health, racial or ethnic origin, religious beliefs, or sexual orientation.

Please do not include health information about yourself in the enquiry form. If you do mention something of that kind while explaining your situation, we will only use it to reply to you, and we will not keep it any longer than we keep the rest of the enquiry.

Information about your dog is not personal data under the Law. The Law protects living individuals, not animals.

5. Where your information is collected from

Everything in this policy comes from you directly, apart from your membership and payment status, which comes from PayPal when your subscription starts, renews, fails, or is cancelled. None of it is obtained from publicly available sources.

6. Who we share it with

We do not sell your information and we do not share it for anyone else's marketing.

We use the following service providers to run the website and the membership. They process your information on our instructions, under a written contract, and they may not use it for their own purposes.

Webflow: Hosts the website and receives enquiry form submissions. Your data is processed in the United States.

Memberstack: Runs member accounts, logins and passwords, and stores the membership status fields. Your data is processed in the United States.

Make: Moves information between PayPal, Memberstack and our email, and sends the membership emails. Also writes a log of what it did. Your data is processed in the European Union.

Vimeo: Hosts and streams the lesson videos. Your data is processed in the United States.

MailerLite: Sends the free lesson and the marketing emails. Your data is processed in the European Union.

Google: Sends the membership emails, holds the automation log, and provides the mailbox your enquiry arrives in. Your data is processed in the United States and other locations.

PayPal: Takes your payment and manages the subscription. Your data is processed in the United Kingdom.

We may also share information where we are required to by law, or where it is necessary to establish, exercise or defend a legal claim.

7. Transfers outside the Bailiwick

Some of the providers above process your information outside the Bailiwick of Guernsey.

Transfers to authorised jurisdictions. Make and MailerLite process within the European Union, and PayPal within the United Kingdom. These are authorised jurisdictions as listed by the ODPA, so no additional safeguard is needed.

Transfers to unauthorised jurisdictions. Webflow, Memberstack, Vimeo and Google process in the United States, which is not an authorised jurisdiction in general terms. Where a provider is certified under the EU–US Data Privacy Framework, that certification is the safeguard. Otherwise the safeguard is the EU Standard Contractual Clauses, as approved by the ODPA for use by Guernsey controllers, which form part of our contract with that provider.

8. How long we keep things

The retention periods are set out against each type of information in section 3. Where we have not given a fixed period, the criteria we use are: how long we need it to do the thing you asked us to do, how long we might reasonably need it to deal with a query or a dispute afterwards, and any period the law requires us to keep records for.

9. Automated decision-making and profiling

We do not make automated decisions that produce legal effects for you or similarly significantly affect you, and we do not profile you.

Your access to the Academy is granted and removed automatically based on the status of your PayPal subscription. That is simply the system carrying out the agreement between us rather than a decision about you, and there is always a human at the other end of the contact details in section 1 if something looks wrong.

10. Cookies

We use cookies that are necessary for the site to work:

  • Memberstack sets cookies that keep you logged in and remember your session. Without them you could not stay signed in.
  • Webflow sets cookies needed to serve the site.
  • Vimeo sets cookies when a lesson video loads, to play the video and remember playback settings.

We do not use advertising cookies, and we do not run analytics or tracking pixels on this website.

You can block or delete cookies in your browser settings. If you block the Memberstack cookies you will not be able to log in.

11. Other websites

Booking a consultation call takes you to Calendly, and the WhatsApp and social media links take you to Meta and TikTok. Those are separate services with their own privacy notices, and what you do there is governed by their terms, not this policy.

12. Your rights

The Law gives you the following rights over your personal information. All of them are free to exercise, and we will respond within the time the Law allows.

  1. The right to information (sections 12 and 13) — to be told what we do with your information. That is what this policy is for.
  2. The right of access (section 15) — to ask for a copy of the personal information we hold about you. This is sometimes called a subject access request.
  3. The right to object to direct marketing (section 17) — to tell us to stop sending you marketing at any time. This is absolute; we must stop.
  4. The right to object (section 18) — to object to processing we carry out on public-interest or legitimate-interests grounds.
  5. The right to rectification (section 20) — to have inaccurate information corrected and incomplete information completed. You can correct your own name and email address yourself from your account page.
  6. The right to withdraw consent (section 11) — where we rely on your consent, such as the marketing emails, to withdraw it at any time.
  7. The right to erasure (section 21) — to ask us to delete your information, sometimes called the right to be forgotten.
  8. The right to restriction of processing (section 22) — to ask us to pause what we do with your information while something is being sorted out, such as a dispute about accuracy.
  9. The right not to be subject to automated decision-making, including profiling (section 24). As set out in section 9, we do not do this.
  10. The right to data portability (section 23) — to receive the information you gave us in a common, machine-readable format, and to have it sent to another provider where that is technically possible.

To exercise any of these, contact us using the details in section 1. We may need to check who you are before we act, which usually means replying from the email address on your account.

Some of these rights have conditions and exceptions under the Law. If we cannot do what you have asked, we will tell you why.

13. Complaints

If you are unhappy with how we have handled your information, please tell us first — most things are quicker to fix directly.

You also have the right to complain to the Office of the Data Protection Authority ("the ODPA") at any time:

Office of the Data Protection Authority

Block A, Lefebvre Court, Lefebvre Street, St Peter Port, GY1 2JP

Telephone: +44 1481 742074

Email: info@odpa.gg

Website: odpa.gg

You have a right of appeal against decisions of the ODPA.

14. Changes to this policy

If we change how we use your information, we will update this page and change the date at the top. If the change is significant, we will tell members by email.