Privacy notice

1. Information we handle

• Account and business information: names, contact details, login identifiers, business profile, locations, team roles and preferences.
• Booking information: customer contact details, services, appointment times, notes, intake-form answers, cancellations, attendance and communication preferences.
• Payment information: transaction references, amounts, currency, payment status, refunds and connected-account status. Stripe collects and processes full card details; SeatBound does not store full card numbers or security codes.
• Communications: messages, support requests, reminders and delivery status where the relevant feature is used.
• Technical and security information: device, browser, approximate network information, authentication events, audit logs, diagnostics and fraud-prevention signals.

2. Why we use information

We use information to provide and secure SeatBound, process subscription administration, deliver bookings and communications, prevent abuse, troubleshoot faults, meet legal obligations and improve the service. Depending on the context, the legal basis may be performance of a contract, legitimate interests in operating a secure service, compliance with law, or consent where consent is required.

Connected businesses decide why their customer and staff information is used. Questions about a specific appointment, marketing message, intake form or retention decision should normally be directed to that business first.

3. Payments and connected accounts

Subscription payments and connected-business payments use Stripe-hosted services. A connected business that accepts a deposit or payment through its own Stripe account is the merchant of record for that customer transaction. Stripe's own privacy notice also applies to information it collects directly.

4. Who receives information

We disclose only what is reasonably needed to infrastructure, hosting, payment, email, messaging, customer-support and security providers used to operate SeatBound; to a connected business and its authorised staff; or to authorities when legally required. We do not sell personal information.

Some providers may process information outside the United Kingdom. Where required, we use recognised transfer safeguards and assess the protections available.

5. Retention and deletion

We keep information only while it is needed for the service, security, dispute resolution and legal or accounting obligations. Connected businesses control retention of their operational booking data and can export or delete supported records. Backups and fraud-prevention logs may remain for a limited period before secure deletion or anonymisation.

6. Your choices and rights

Depending on the law that applies, you may ask for access, correction, deletion, restriction, portability or an objection to certain uses. You may withdraw consent where processing relies on consent. For records held for a connected business, contact that business; SeatBound will assist it with an authenticated request.

To exercise rights concerning a SeatBound account or website, email [email protected]. We may need to verify your identity. You can also complain to the data-protection authority where you live or work.

7. Security, storage and cookies

SeatBound uses access controls, encryption in transit, tenant isolation, audit records and payment-tokenisation controls intended to protect information. No internet service can promise absolute security. Report a suspected vulnerability to [email protected].

The application uses local storage and similar technology required for sign-in, preferences, offline operation and security. Optional analytics or marketing technology must be configured and presented in accordance with the consent rules that apply.

8. Changes and contact

We may update this notice as the service or law changes. Material changes will be dated here and, where appropriate, communicated in the service.

Questions: [email protected].