Privacy notice

Last updated: 3 November 2026

This privacy notice explains how the data controller of Rescue Rabbit Finder (‘we’, ‘us’) handles personal data. You can contact us at contact at this website’s domain.

Listings from rescue organisations

We collect rabbit-listing information from UK rescue organisations’ publicly available adoption pages. Listings normally include a rabbit’s name, age, sex, breed, description, photograph, rescue name, approximate location and a link to the rescue’s original page.

Our purpose is to help rabbits find suitable homes. Our lawful basis is legitimate interests: making publicly available adoption listings easier to find, while keeping the processing limited and giving rescues and individuals a straightforward way to object.

We do not seek personal data in listings. Before storing a description, we automatically remove email addresses and UK telephone numbers. A description may occasionally still contain a person’s name or another incidental reference. If a listing mentions you, or if you represent a rescue and want a listing removed, contact us and we will review the request promptly.

We display photographs directly from the rescue’s listing and do not retain copies ourselves.

For selected listings, we use Anthropic’s API to help extract, standardise and quality-check rabbit-listing information. Before text is sent to Anthropic, we remove email addresses and UK telephone numbers. Text may still contain an incidental personal reference, such as a name. Anthropic acts as our processor and may use that text only to provide this service to us; it is not used to make decisions about people.

When a rabbit is marked as adopted, we show the listing as recently adopted for 30 days. We delete its record from our database after two months.

Messages and contact forms

If you contact us by email or use our contact form, we process your:

• name;
• email address;
• optional subject; and
• message.

A name and email address are required to use the contact form, because we need them to identify and reply to the sender. Our lawful basis is legitimate interests: responding to enquiries, handling inclusion requests, recording rescue permissions or objections, and dealing with complaints.

The contact form uses Cloudflare Turnstile to prevent spam. Cloudflare receives technical browser and device information needed to distinguish people from automated traffic. Our email and hosting providers process messages in order to send, receive, forward and store them.

Email retention and deletion

We apply the following routine:

• Spam, duplicate and misdirected messages are deleted within 30 days.
• Ordinary enquiries are deleted from the working mailbox, archive and sent items 12 months after the last substantive contact.
• For a rescue’s permission, opt-out or removal request, we retain only a minimal record of the organisation, contact channel, request, outcome and date while the source relationship or suppression request remains active. We review these records annually and delete them two years after the relationship or request ends.
• For data-rights requests, complaints and takedown requests, we retain the relevant correspondence and outcome for three years after closure. If a legal claim is underway or reasonably anticipated, we retain only the necessary material for up to six years after closure.
• Deleted email may remain in a provider’s rolling backup until that backup expires, but is not used except for recovery or security purposes.

Visiting the website

We have no user accounts and do not display advertising.

Hosting and security

Our hosting provider processes technical information that browsers send when accessing a website, including IP address, browser information and request logs. We use this to deliver, secure and troubleshoot the site. Our lawful basis is legitimate interests.

Google Analytics

We use Google Analytics solely to produce aggregate statistics about how visitors use Rescue Rabbit Finder, so that we can improve the website.

Google receives event-level technical data before we see aggregated reports. This can include the Google Analytics cookie identifier, pages viewed, public listing-click events, referring page, browser and device information, and the IP address accompanying the request.

We use only aggregate reports and do not use analytics to identify, profile or make decisions about people. We do not enable Google Signals, advertising links, Google data sharing, User-ID or user-level reporting. We do not use analytics for advertising, conversion sharing or cross-site tracking. Google acts only as our processor to help improve this website.

Google Analytics cookies are enabled by default under the statistical-purpose exception in PECR. You can object free of charge at any time using the “Google Analytics cookies for statistics” switch below. Turning it off stops future analytics hits and removes this site’s Google Analytics cookies.

We retain event-level analytics data for two months. This period is necessary for a small site to identify reliable traffic, usability and technical-performance patterns before using aggregate statistics. We do not retain or use individual-level analytics data for longer than that period.

Cloudflare Web Analytics

We also use Cloudflare Web Analytics to count visits without storing cookies or other information in your browser. Cloudflare receives technical information, such as IP address, page, referrer and browser information, to produce these statistics. Our lawful basis is legitimate interests. To object, contact us using the details above.

Location searches, maps and saved preferences

If you search for a town, postcode or place, your search is sent directly from your browser to Nominatim, an OpenStreetMap service. Nominatim receives the search and associated technical information, including IP address. The place you searched for can appear in the address of the page that opens.

If you use “Near me”, your browser asks for permission before sharing your location. Your selected location, coordinates and search radius can be stored only in your browser, so the site can remember them on a future visit. You can turn this off at any time using the “User preferences” switch; doing so deletes the saved location from this browser.

Map images are loaded from OpenStreetMap. If you choose to open a rescue address in a map application, that address is sent to Google Maps.

International transfers

Some of our providers may process personal data outside the UK. Where this occurs, we use an approved transfer mechanism, such as the UK–US Data Bridge where the provider is certified, or the UK International Data Transfer Agreement or UK Addendum to standard contractual clauses.

Cookie settings

We use Google Analytics solely to produce aggregate statistics about how visitors use Rescue Rabbit Finder, so that we can improve the website. Nevertheless, you can turn off these cookies at any time. Your decision itself is stored in this browser’s local storage so that we can honour it on future visits. Please note that clearing this site’s browser data resets your choices.

• Google Analytics cookies for statistics

  Aggregated, non-identifiable data, used to improve the service.

  On
• Analytics for advert preferences

  We don't display adverts, so this is permanently off.

  Off

User preferences

Your selected location, coordinates and search radius are stored in your browser, so the site can remember them on a future visit. If you choose to disable this function, you can do it here, which will clear the already saved search data as well as preventing new data storage. Your decision itself is stored in this browser’s local storage so that we can honour it on future visits. Please note that clearing this site’s browser data resets this setting too.

• User preferences

  Remembers the location you chose.

  On

Your rights

You may ask us to:

• access the personal data we hold about you;
• correct inaccurate data;
• erase data;
• restrict processing; or
• object to processing based on legitimate interests.

Send your request to contact at this website’s domain. Please write to us if you have any other questions or concerns about our handling of your personal data. We aim to respond within two working days and will respond within the applicable legal time limit. You may also complain to the Information Commissioner’s Office.

Changes to this notice

We may update this notice when our processing changes. The date at the top shows when it was last updated.

Your use of this website and its content is governed by our terms of use.