Privacy Policy

Last updated: 1 November 2026

Introduction

This Privacy Policy explains what information is collected when you visit our website, why it is collected, how it is used and the rights available to individuals under UK data protection law.

Our breeding programme is no longer active. Our kitten waiting list has been permanently closed and all associated personal data has been deleted.

1. Data Controller and Privacy Contact

Contact: noticekeeper@pm.me

2. Information We Collect

When you visit our website, we may collect technical information including:

IP address; browser and device characteristics such as screen and window properties, hardware and language settings, time zone, graphics and font information; network provider; approximate location derived from your IP address; interaction signals such as time on page, scrolling, and counts of clicks, mouse movements and key presses; request and traffic-routing information; URLs visited; timestamps.

We never record the content of anything you type.

To recognise returning visitors for security purposes, a random identifier may be stored on your device.

3. Why We Collect This Information

We use this information solely for website security and protection against abuse, including:

detecting bots, automated scripts, scraping and fraud; distinguishing genuine visitors from automated or unattended monitoring sessions; identifying the use of tools commonly associated with automated or investigative access; protecting our website, business and household; preventing impersonation and misuse of our content and photographs; complying with legal obligations; establishing, exercising or defending legal rights.

Our lawful basis is our legitimate interest in securing our website and preventing fraud.

This information is never sold, never used for advertising, marketing or audience analytics, and never shared with third parties except as described in section 6 or where required by law.

4. Squarespace

Our website is hosted using Squarespace. When you visit, Squarespace may process information including IP address, browser information, device information, pages visited, clicks, scrolling activity and timestamps. Squarespace provides hosting, website functionality and analytics services.

5. Cloudflare

We use Cloudflare to assist with website security, network performance and protection against malicious or automated traffic. When you access our website, traffic may pass through Cloudflare before reaching the website.

Cloudflare may process technical information such as IP address, request and traffic-routing information, URLs requested, browser or User-Agent information, system and network configuration information, timestamps and security and threat indicators.

We also use Cloudflare Turnstile to verify that certain requests come from genuine visitors rather than automated tools.

6. Who We May Share Information With

Where reasonably necessary, limited information may be shared with:

Squarespace, as our website hosting provider; Cloudflare, as our security and performance provider; Google (Google Apps Script and Google Sheets), which stores security monitoring data collected by our own security layer on our behalf as a service provider and does not use it for its own purposes; law-enforcement or competent authorities where disclosure is necessary and lawful.

We do not sell personal information.

7. Cookies and Similar Technologies

Necessary Squarespace cookies

Squarespace uses necessary cookies to provide and secure website functionality, including cookies used for security, preventing cross-site request forgery, remembering cookie choices and website sessions.

Cloudflare security cookies

Cloudflare may place security-related cookies including:

__cf_bm — used by Cloudflare's bot-management systems, normally expires after 30 minutes of inactivity; cf_clearance — may be issued after a visitor passes a Cloudflare security challenge, normally lasts approximately 30 minutes; _cfuvid — may be used to distinguish visitors sharing an IP address.

These cookies are used for security and abuse-prevention purposes, not advertising.

IconicSX security identifier

Our own security layer may store a random identifier on your device to recognise returning visitors for security purposes. It does not identify you by name and is not used for advertising or analytics. As it is strictly necessary for website security and fraud prevention, it does not require separate consent.

Cookie choices

Visitors may change browser settings to block or delete cookies. Blocking necessary cookies may affect the functionality or security of the website.

8. International Data Transfers

Some of our service providers operate internationally and personal information may therefore be processed outside the United Kingdom. Where restricted international transfers occur, we rely on appropriate safeguards recognised under UK data protection law.

9. How We Store and Protect Information

We use appropriate technical and organisational measures to protect information against unauthorised access, misuse, loss, alteration or disclosure, including access-controlled accounts, password-protected systems and use of reputable service providers.

10. How Long We Keep Information

Website traffic and security information processed by our providers is retained according to the relevant provider's services, configuration and retention periods.

Security monitoring data collected by our own security layer is retained for up to 30 days, unless it relates to a security incident, in which case it may be retained for as long as necessary to investigate the matter, obtain professional advice, protect our legal rights, establish or defend a claim or cooperate with competent authorities. Such retention will be periodically reviewed.

11. Existing Ownership and Pedigree Records

Sale Agreements, ownership records, microchip-transfer information, registration information, pedigree, genetic testing and health records relating to previously placed IconicSX cats may be retained for the lifetime of the cat and a reasonable period afterwards where necessary for proof of ownership, lifetime return provisions, breeder support, health warranties, legal claims or regulatory requirements.

Financial and accounting records are retained for the applicable statutory retention period.

12. Your Data Protection Rights

Depending on the circumstances, you may have rights including the right to access personal information we hold about you, the right to request correction, erasure, restriction of processing, to object to certain processing and to data portability where applicable.

To exercise a data protection right, contact noticekeeper@pm.me.

13. Right to Object

You have the right to object to processing based on our legitimate interests. If you object, we will consider your request and whether there are compelling legitimate grounds requiring the processing to continue.

14. Complaints

If you have concerns about how IconicSX has handled your personal information, please contact us first so that we have an opportunity to investigate and respond.

You also have the right to complain to the Information Commissioner's Office (ICO).

Our ICO registration number is ZB734232.

15. Changes to This Privacy Policy

We may update this Privacy Policy where our practices, services, technology or legal obligations change. The current version will always be published on this website with the date of the latest update.