1. Who we are
Remi is an online platform for UK Royal Kennel Club dog show entry management. Remi is a trading name of Michael James and Amanda McAteer, a partnership trading from William House, Mobbs Way, Lowestoft, NR32 3AL, United Kingdom.
We are registered with the UK Information Commissioner’s Office, registration number C1920187.
For the purposes of UK GDPR and the Data Protection Act 2018 the partners are jointly the data controller for the personal data of our exhibitor account holders.
When a show society uses Remi to collect entries for their show, the society is the data controller for the entry data relating to that show, and Remi acts as their data processor under Article 28 UK GDPR.
Data protection questions: privacy@remishowmanager.co.uk
2. What we collect
We collect the following categories of data:
- Account data — name, email address, password hash (or Google OAuth identifier), postal address, phone number, role, organisation memberships.
- Dog records — registered name, call name, breed, sex, date of birth, RKC registration number, sire/dam, breeder, co-owners, titles, photos.
- Entry data — which shows and classes you enter, NFC markers, Junior Handler details, special requirements.
- Payment data — order total, line items, payment status. Card numbers and bank details are handled directly by Stripe; Remi never sees or stores them.
- Communications — emails you send us (including feedback replies), emails we send you, and limited delivery metadata.
- Technical data — IP address, device/browser fingerprint from session cookies, basic request logs for security and debugging.
3. Why we use it — lawful basis
- Contract (Art. 6(1)(b)) — to provide your account, process entries and payments, send confirmation and payment-receipt emails, and operate the Service.
- Legitimate interests (Art. 6(1)(f)) — security and fraud prevention, detecting abuse, improving the Service, and responding to feedback.
- Legal obligation (Art. 6(1)(c)) — keeping financial records required by HMRC and responding to lawful requests.
- Consent (Art. 6(1)(a)) — used only where required, e.g. optional marketing communications. You can withdraw consent at any time.
We do not use automated decision-making or profiling that produces legal effects.
4. Who we share it with
We share personal data with the following categories of recipient:
- Show societies whose shows you enter — they receive the exhibitor and dog details needed to run the show (name, dog details, class selections, contact address). They act as independent data controllers for that entry data.
- Stripe — our payment processor (data controller for payment card data; see stripe.com/gb/privacy).
- Resend — our transactional email provider, handles outbound and inbound email content.
- Render — our application and database hosting provider.
- Cloudflare — our DNS provider and object storage (R2) for photos and generated PDFs.
- Google — if you sign in with Google, Google provides your OAuth profile (name, email, avatar).
- Law enforcement or regulators — where required to comply with a lawful request.
We do not sell personal data and we do not share it for third-party marketing.
5. International transfers
Some sub-processors (Stripe, Google, Cloudflare) operate globally and may transfer data outside the UK. Where they do, the transfer is protected by the UK International Data Transfer Agreement, UK addendum to the EU Standard Contractual Clauses, or an adequacy decision, in line with UK GDPR Articles 44–49.
6. How long we keep it
- Account data — for as long as your account is active. If you close your account we keep the minimum needed for legal records (below).
- Entry and show records — retained for the lifetime of the dog show season’s reference value and then archived. RKC audit-relevant records (judge contracts, award entries, catalogue) are retained for at least 6 years.
- Payment records — retained for 6 years after the transaction to comply with HMRC record-keeping rules.
- Emails and feedback — retained while useful for support, then deleted on request or when no longer needed.
- Server logs — rotated within 30 days.
7. Your rights
Under UK GDPR you have the right to:
- access a copy of the personal data we hold about you
- have inaccurate data corrected
- have data erased (subject to legal retention rules)
- restrict or object to certain processing
- data portability in a machine-readable format
- withdraw any consent you have given, at any time
To exercise any of these rights, email privacy@remishowmanager.co.uk. We will respond within one month.
You can also complain to the UK Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to resolve any concern first.
8. Security
We protect your data with HTTPS/TLS in transit, encryption at rest, hashed passwords, role-based access controls, and restricted access to production systems. If you ever spot something that looks like a security issue, please let us know at privacy@remishowmanager.co.uk and we’ll investigate promptly.
9. Cookies
We use a small number of essential cookies to keep you signed in, remember your active organisation, and protect forms against CSRF. We do not use advertising or cross-site tracking cookies.
10. Children
Remi is not intended for under-16s. Junior Handler entries are submitted by a parent or guardian’s Remi account on behalf of the young handler. If you believe we are holding data about an under-16 who has their own account, contact us and we will remove it.
11. Changes to this policy
If we make material changes we’ll notify active users by email or on sign-in. The “Last updated” date at the top reflects the current version.