How we handle your personal data
Last updated: September 2026
Wilson and Partners is a veterinary practice with surgeries in Cupar, Leven, and St Andrews, Fife. We are committed to protecting your personal information and being transparent about how we use it.
The data protection contacts for the practice are Amanda Thompson and John Stewart. You can reach us at admin@wilsonandpartners.co.uk.
We process your personal information under the following lawful bases:
We collect and use your personal information to:
| Data Type | Shared With | Retention Period |
|---|---|---|
| Contact details and demographics | Practice staff, laboratories, specialist referral centres, reminder services, insurance companies | 7 years |
| Clinical records about your pet (consultation notes, treatments, prescriptions, laboratory results) | Practice staff, our cloud database and hosting providers (Supabase, Vercel), an artificial-intelligence provider (Anthropic) for short extracts as described below, laboratories, specialist referral centres, insurance companies | 7 years from your pet's last visit |
| Financial information | Practice staff, debt recovery agencies | 10 years |
| CCTV footage | Practice staff, police (where required) | 12 months |
Your and your pet's records are kept in our practice management system, which runs on servers at the practice. So that our staff can see records securely from any of our three surgeries, and so that we can produce our own reports, a copy of those records is held by Supabase, a cloud database provider, in a data centre in London. Our staff reach that copy through our own web application, which is hosted for us by Vercel and runs in London. Every time a member of staff opens a patient or client record through it, the access is logged.
When you fill in a form on our website, such as registering as a new client or ordering a repeat prescription, your details are sent to that same web application, stored in the Supabase database in London and emailed to your chosen surgery. We delete the website copy after 90 days, once the details have been added to our practice management system.
When we check that consultations have been written up, short extracts of clinical notes may be sent to Anthropic, an artificial-intelligence provider, to judge whether a note has been completed. These extracts do not include your name or your pet's name. Anthropic does not use this information to train its systems and deletes it within thirty days. Anthropic processes data in the United States under contractual safeguards recognised by UK data protection law.
Emails we send you go through Google Workspace.
None of these providers may use your information for their own purposes, and we do not sell your information. Records about our staff are covered by a separate staff privacy notice.
Under data protection law, you have the right to:
To exercise any of these rights, please contact us at admin@wilsonandpartners.co.uk.
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.