Privacy Notice for Visitors and Users of the Provet.com Service and Website

This privacy notice (“Privacy Notice”) describes how Nordhealth Finland Oy (“Nordhealth”) processes the personal data of the Service Users of the provet.com website when they visit the site or use the search and booking service.

Last updated: 16 June 2025

Introduction

Definitions used in this privacy notice:

Customer: Veterinaries and other healthcare professionals, as well as representatives and contacts of customer organisations such as clinics, who are customers of Nordhealth.

End User: The Customer’s own clients, such as pet owners

End User Data: Personal data as defined in the contract between the Customer and Nordhealth, e.g. pet owner’s data.

Service: provet.com search and booking service.

Service Users: Anyone who visits or uses the Service.

This Privacy Notice does not apply to Customers or End Users. We process End User Data on behalf of our Customers as a data processor. If you are an End User and have questions about how our Customers process your data, or if you wish to exercise your rights in relation to such data, you should contact the Customer with whom you booked your appointment.

1. Data Controller

Nordhealth Finland Oy (Business ID: 1733917-4)
Bulevardi 21
00180 Helsinki, Finland
Tel. +358 19 425 1610
(hereinafter “we”)

Our representative in the UK is Provet Cloud (UK) Limited.

2. Contact Details

Email: dpo@nordhealth.com

3. Purpose and Legal Basis for Processing, and Categories of Data Processed

Purpose	Personal Data	Legal Basis
Creating and maintaining a user account. Providing the Customer updates and sending important information about our terms and this Privacy Policy From your user account, you can view your previous bookings at different locations and make new appointments with clinics or professionals who use the provet.com service. The clinics own the data related to the bookings and act as the data controller for this information.	Name Contact details (telephone number, email address), PIN code, pet microchip number and insurance details	Contract
Development of our Service and website	Data collected through cookies and forms, such as IP address, language preference, browser and device type, country of browsing, operating system, search terms, search history, pages visited, frequency of visits, and information about on-site activities	Legitimate interest in improving and providing a better Service and website experience
Prevention and correction of technical problems and errors in our Service and website	Data collected through cookies and forms, such as IP address, language preference, browser and device type, browsing country, operating system, and information about on-site activities	Legitimate interest in ensuring the proper functioning of our Service and website
Ensuring the security of our Service and preventing misuse	Log data Data collected through cookies, such as IP address, browser and device type, browsing country, and operating system.	Legitimate interest in maintaining the integrity of our Service
For internal purposes to use data analytics, to identify usage trends, determine and measure the effectiveness of promotional campaigns and advertising and to improve our website, products/services, marketing, customer relationships and experiences	Data collected through cookies and forms, such as IP address, language preference, browser and device type, country of browsing, operating system, search terms, search history, pages visited, frequency of visits, and information about on-site activities	For the performance of a contract with you Also, in connection with our legitimate business interests in carry out our business and managing our relationship with the Customer
Using your personal data to comply with our own legal obligations and maintaining our records	Contact details Log data	For compliance with a legal obligation to which we are subject

4. Sources of Data

We collect personal data directly from you in connection with your use of the Service.

5. Disclosures and International Transfers

We do not disclose data from the register to external parties other than as part of our normal business activities or as necessary to provide the Service.

We use subcontractors who process personal data on our behalf to carry out our usual business practices. Those third-party processers are listed under https://www.provet.com/legal/third-party-data-processors.

We may also disclose your personal data to:

our group companies and affiliates;
HMRC, legal and other regulators or authorities, including those who request your personal data or to report any potential or actual breach of applicable law or regulation;
external professional advisers such as accountants, bankers, insurers, auditors and lawyers;
law enforcement agencies, courts or other relevant party, to the extent necessary for the establishment, exercise or defence of legal rights;
third parties where necessary for the purposes of prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties;
third parties which are considering or have decided to acquire some or all of our assets or shares, merge with us or to whom we may transfer our business (including in the event of a reorganisation, dissolution or liquidation).

It is possible that personal data we collect from Customers may be transferred, stored and/or processed outside the United Kingdom including outside the European Economic Area

In connection with such transfers we will ensure that:

there are appropriate safeguards in place such as binding corporate rules or approved model contractual clauses. A copy of the appropriate safeguard can be obtained by contacting us using the contact details set out in this notice; or
the transfer is to a country that provides an adequate level of protection; or
one of the derogations for specific situations applies to the transfer including explicit consent or necessary for the performance of a contract or exercise or defence of legal claims.

6. Data Security and Retention

We will store your personal data for the time period which is appropriate in accordance with the following criteria:

the on-going business operation / relationship that we have with you;
the completion of the purpose for which the personal data was given;
our legal obligations in relation to that personal data and other legal requirements;
the type and size of the data held and whether any if it is deemed to be special category personal data; or
our accounting requirements in relation to that personal data.

We keep the length of time that we hold your personal data for under review. These reviews take place in accordance with applicable laws.

In addition, we take reasonable steps to ensure that no incompatible, outdated, or inaccurate personal data is stored in the register, considering the purpose of the processing. We correct or delete such data without delay.

7. Your Rights as a Data Subject

Subject to applicable law including relevant data protection laws, you may have a number of rights in connection with the processing of your personal data, including:

Right of access to your personal data and to obtain a copy.
Right to rectification or, in some cases, erasure.
Right to modify or delete your own profile data.
Where processing is based on consent, right to withdraw or amend consent (without affecting prior lawful processing).
Right to data portability and restriction of processing in certain situations.
Right to object to processing based on legitimate interest, by specifying your particular situation.
Absolute right to object to processing for direct marketing.
No automated decision-making or profiling with legal or similarly significant effects.
Right to lodge a complaint with us if you believe we have not handled your personal data in accordance with data protection laws by contacting us using the in Section 1 or the email in Section 2.
Right to lodge a complaint with the Information Commissioner’s Office. Please see https://ico.org.uk/concerns/ for how to do this.

8. Updates to This Privacy Notice

We regularly review the compliance of this Privacy Notice and update it as necessary. The Privacy Notice may be updated, for example, if our processing activities change or if applicable data protection laws or guidelines are amended. The updated version of the Privacy Notice will be published on our website. If the changes are significant, we will also inform you through other means, such as by sending an email or posting a notice on our website.

9. Contact

All contacts and requests relating to this privacy notice should be sent to the address in Section 1 or the email in Section 2.

10. Cookies

Further information on cookies and their use in the Service is available in our Cookie Policy: https://my.provet.com/documents/cookie-policy-uk.html.

11. User authentication and third-party identity providers

To enable secure user authentication, login and use of the Service, Nordhealth processes user identification information, such as name, email address, profile picture (if used) and unique user identifiers. Users may choose to authenticate either using credentials provided by Nordhealth or through third-party identity providers (e.g. Google). Where a user chooses to authenticate through a third-party identity provider, Nordhealth may receive certain account information from that provider for authentication and account management purposes. Such identity providers operate independently from Nordhealth, and authentication-related information is exchanged with the identity provider selected by the user. The processing is based on Nordhealth's legitimate interest in enabling secure user authentication and access to the Service.