PRIVACY NOTICE
How Mishmish Operations Ltd looks after your details and your cat’s.
Who we are
Mishmish Operations Ltd is the data controller for the membership and this website. Mishmish Cover Limited, the Fund, sees requests for assistance so that its Grants Officer can decide them. For anything about your data, email hello@mishmishcover.com.
What we collect, and why
Your details: name, email, address and postcode, and your phone number if you choose to give it. We need these to set up and run your membership, send your certificate and contact you about it. Legal basis: performing our agreement with you.
Your cat’s details: name, date of birth, breed, sex, microchip number, vaccination record and, if you give it, the date of the last dental check. We use them to confirm eligibility and the contribution band. Legal basis: performing our agreement with you.
Documents you send with a request: the vet’s invoice and clinical history. We use them to consider the request. Legal basis: performing our agreement with you, and our legitimate interest in checking that requests are genuine.
Payment status from Stripe, our payment provider: whether a contribution succeeded or failed. Your card number never reaches us. Legal basis: performing our agreement with you.
The time and internet address recorded when you accept the membership terms, so we can show the agreement was made. Legal basis: our legitimate interest in keeping a record of the agreement.
We collect nothing else. There is no marketing list, no profiling, and no data bought from anyone.
How the AI document reader works
Vaccination records, invoices and clinical histories are read by an AI document reader (Claude, made by Anthropic) that pulls out dates, amounts and conditions and drafts a memo for the Grants Officer. Documents are sent over an encrypted connection, are not used to train the model, and are held by Anthropic for no more than 30 days. Every decision on a request is made by a person, never by the software.
Who we share it with
Our providers process data on our behalf and only on our instructions: Airtable (membership records), Stripe (payments), Loops (membership emails), Cloudflare (our system and email routing), Anthropic (document reading), Framer (website hosting) and Plausible (visit counts, with no personal data). Some of these are in the USA; transfers are covered by the UK’s international data transfer agreement or the UK extension to the EU–US Data Privacy Framework.
We may contact your vet practice to confirm an invoice. We do not sell your details or share them for anyone else’s marketing. We share data with authorities only where the law requires it.
How long we keep it
Membership records: for the life of the membership and 6 years after it ends, the limitation period for agreements in England and Wales. Requests and the documents behind them: 6 years after the decision. Registrations that never proceed to a first payment: deleted after 90 days. Visit counts: aggregated from the start, so there is nothing to delete.
Your rights
You can ask for a copy of your data, have it corrected or deleted, restrict or object to how we use it, and take it elsewhere in a portable form. Email hello@mishmishcover.com and we reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Security
Data is encrypted in transit and at rest with our providers, access is limited to the people who run the membership, and no card numbers are stored anywhere we control. Documents and health details are kept out of our technical logs.
Cookies and children
This site sets no cookies; see Cookies and tracking. Membership is for adults, and we do not knowingly collect details from anyone under 18.
Changes
We update this notice when something changes and email members about anything that matters. Last updated 6 September 2026.
Last updated 6 September 2026.