Data Processing Terms

Who is responsible for what

Your clients' details — their name, email, phone number, booking notes — belong to you. In data protection terms you are the controller and PocketBiz is your processor. We only handle that information to run the service for you, and only on your instructions, which are set by how you use the app.

What we do with it

Store bookings, show your booking page, prevent double-bookings, send booking confirmations and reminders, take deposits and create invoices. Nothing else. We never sell it, never use it to market to your clients, and never use it to train AI models.

Who else touches the data

We use a small number of trusted suppliers to run PocketBiz. Each is bound by its own data protection terms:

• Stripe — payments and payouts. Handles card details directly; we never see them.
• Supabase — the database, file storage and sign-in system behind PocketBiz.
• Lovable Cloud — hosting for the website and the emails we send on your behalf.
• Cloudflare — serving the site and protecting it from abuse.

If we add or change a supplier that handles personal data, we'll update this page and give you reasonable notice.

Where the data is stored

Data may be stored or processed outside the UK, including in the United States. Where that happens, transfers rely on the UK International Data Transfer Addendum or equivalent safeguards offered by the supplier.

How long we keep things

• Bookings and client records: while your account is open.
• After you close your account: deleted within 30 days, except where the law requires us to keep records.
• Payment and invoice records: kept for 6 years to meet UK tax and accounting rules.
• Email delivery logs: up to 12 months.

Security

Data is encrypted in transit and at rest. Access is restricted so each account can only ever reach its own records, enforced at the database level. Passwords are stored hashed, never in readable form.

If something goes wrong

If there's a personal data breach affecting your account, we'll tell you without undue delay and within 72 hours of becoming aware of it, with what we know and what we're doing about it, so you can meet your own reporting duties.

Helping you with requests

If one of your clients asks for a copy of their data, asks for corrections or asks to be deleted, we'll help you respond. Email support@pocketbiz.co.uk and we'll action it.

Getting your data out

You can export your bookings and earnings as a spreadsheet from your dashboard at any time, including after you decide to leave.