Privacy Policy
Last updated: June 2026
1. Who we are
AHC Form Generator (“we”, “us”, “our”) provides a form-completion tool used by vet practices (“us” in this context) to prepare Animal Health Certificates. The vet practice you are dealing with is the data controller for your personal data; contact them directly with privacy questions.
2. Data we collect
We collect and process the following categories of personal data:
From you
- Email address
- Full name and postal address
- Phone number
About your pets
- Pet name, species, breed, sex, colour, and date of birth
- Microchip number (a unique identifier under ISO 11784/11785)
- Rabies vaccination date, vaccine name, manufacturer, and batch number
- EU pet passport details where applicable
From your referring vet (where applicable)
- Vaccination confirmation details including the vet's name and practice
3. How we use your data
| Purpose | Legal basis |
|---|---|
| Processing your form and preparing the AHC | Performance of a contract (Article 6(1)(b) UK GDPR) |
| Sending confirmation and status emails | Performance of a contract |
| Sharing your details with the vet practice issuing your certificate | Performance of a contract |
| Sharing your details with your referring vet to obtain vaccination confirmation | Your consent (given on the pet details form) |
| Maintaining records for APHA compliance and audit purposes | Legal obligation (Article 6(1)(c)) |
| Fraud prevention and system security | Legitimate interests (Article 6(1)(f)) |
4. Who we share your data with
We share your personal data with the following third parties:
- Stripe, Inc. — payment processing. Data processed in the US under Standard Contractual Clauses.
- Resend (Resend, Inc.) — transactional email delivery.
- Neon (Neon Inc.) — database hosting.
- Vercel, Inc. — application hosting.
- The vet practice issuing your certificate — they receive your name, address, pet details, and vaccination history to prepare the AHC.
- Your referring veterinary practice — where you have given consent for us to contact them to confirm vaccination details.
We do not sell, rent, or share your personal data with any third party for marketing purposes.
5. How long we keep your data
Form records, including pet details and AHC information, are retained for 6 years from the date of the form. This period is required by APHA record-keeping rules and standard UK business accounting obligations.
6. Your rights
Under UK GDPR you have the right to:
- Access a copy of your personal data
- Rectify inaccurate data
- Erase your data (subject to legal retention requirements)
- Restrict or object to processing
- Data portability — receive your data in a machine-readable format
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact the vet practice you dealt with directly. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Cookies
We use only strictly necessary cookies required for authentication and payment processing. We do not use advertising or tracking cookies.
8. Changes to this policy
We may update this policy from time to time. The current version is always available on this page. Where changes are material, we will notify you by email if we hold your address.