Trust & Security

Hosting & platform

The site is built and deployed on the Lovable platform, which runs on managed cloud infrastructure with HTTPS enforced on every page. Lovable provides the underlying hosting, database, authentication and edge runtime capabilities we use; we are responsible for how those capabilities are configured for this site.

Access & authentication

• The public site is read-only — no visitor account is required to browse articles, services or case studies.
• Editorial tools (drafting, publishing, media) are protected behind authenticated, role-restricted admin routes. Only accounts with an explicit admin role can read or change editorial data.
• Database access uses row-level security policies so that editorial workflow fields are not exposed through the public API.

Data we collect

• Contact enquiries — when you use the contact form we receive the name, email address, optional subject and message you supply so we can reply.
• Technical logs — standard request logs (IP, browser, timestamp) generated by our hosting and database providers for security and reliability.
• Embedded media — some pages embed YouTube via the privacy-enhanced youtube-nocookie.com domain, which does not set tracking cookies until you press play.

We do not run advertising, cross-site tracking or analytics profiles on this site, and we do not sell or share personal data with third parties for marketing.

Subprocessors

• Lovable — application hosting, database, authentication and edge runtime.
• Brevo — transactional delivery of contact form messages to our inbox.
• YouTube (Google) — embedded video playback on selected pages, using the privacy-enhanced domain.

Retention & deletion

Contact enquiries are kept only as long as needed to respond and maintain a record of any work undertaken, then deleted. Server and database logs are rotated by our providers on a short cycle. You can ask us to delete the information you have sent us at any time.

Your rights

Under UK GDPR you may ask us to access, correct or delete personal data we hold about you, or to restrict how we use it. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk). Full detail on lawful basis, cookies and your rights is on the Privacy & Cookies page.

Reporting a security issue

If you think you have found a vulnerability or a privacy concern with this website, please tell us through the contact page with “Security” in the subject. We will acknowledge your report and work in good faith to fix verified issues. Please do not publicly disclose details until we have had a reasonable chance to respond.

DBS disclosure

Working with zoos, schools, open farms and family settings often brings Animal Insights Consultancy into contact with children and vulnerable adults. To support safer recruitment by the organisations that engage us, Carl Groombridge holds a current Enhanced Disclosure and Barring Service (DBS) certificate.

An Enhanced DBS check is the highest level of criminal record check available in England and Wales. It is issued by the UK Government’s Disclosure and Barring Service and discloses spent and unspent convictions, cautions, reprimands and final warnings held on the Police National Computer, together with any relevant information held locally by police forces and, where applicable, the children’s and adults’ barred lists.

The certificate itself is held by Carl and is not published online for data-protection reasons. Certificate details, including the issue date and reference number, are available on request to clients and partner organisations carrying out due diligence.

To request verification, please use the contact page or email us directly with “DBS verification” in the subject line and a brief note about your organisation and the engagement. We will normally respond within a few working days and can share a copy of the certificate, or arrange for it to be sighted in person, as required by your safer-recruitment policy.

Shared responsibility

Security depends on both the platform and the people using it. Lovable maintains the underlying infrastructure and platform controls; Animal Insights Consultancy is responsible for site configuration, editorial accounts, the content we publish and how we handle enquiries. Visitors are responsible for keeping their own devices and email accounts secure.