Privacy Policy
Last updated: 25 July 2026
1. Who we are
B McCormack, trading as Seatbooker is the data controller responsible for your personal data. We operate the website at seatbooker.co.uk and provide online appointment booking services to independent salons, therapists, and beauty professionals in the United Kingdom.
Trading address: Upton, Corsebar Road, Paisley, PA2 9NA
Contact: privacy@seatbooker.co.uk
This policy explains what personal data we collect, why we collect it, how we use it, and what your rights are under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What data we collect and why
We collect personal data in two contexts: from business owners who register to use Seatbooker, and from customers who make bookings.
Business owners (registered accounts)
| Data | Purpose | Lawful basis |
|---|---|---|
| Name and email address | Creating and managing your account | Performance of a contract (UK GDPR Art. 6(1)(b)) |
| Business name, address, phone number, description | Populating your public booking page | Performance of a contract (UK GDPR Art. 6(1)(b)) |
| Profile photo, business logo | Displayed on your dashboard and booking page | Performance of a contract (UK GDPR Art. 6(1)(b)) |
| Google account details (if signing in with Google) | Authentication via Google OAuth | Performance of a contract (UK GDPR Art. 6(1)(b)) |
| IP address and browser information | Security, fraud prevention and service improvement | Legitimate interests (UK GDPR Art. 6(1)(f)) |
Customers making bookings
| Data | Purpose | Lawful basis |
|---|---|---|
| Name, email address, phone number (optional) | Processing and confirming your booking | Performance of a contract (UK GDPR Art. 6(1)(b)) |
| Appointment details (service, date, time) | Delivering your booking and sending reminders | Performance of a contract (UK GDPR Art. 6(1)(b)) |
| Booking notes (if provided) | Communicating relevant information to the business | Performance of a contract (UK GDPR Art. 6(1)(b)) |
| Booking outcomes (attended, cancelled, missed) and your trust score | Giving businesses a fair indication of booking reliability, so they can decide whether to confirm a booking | Legitimate interests (UK GDPR Art. 6(1)(f)) |
Your trust score
Every customer account carries a trust score, a single percentage reflecting how reliably you keep the bookings you make. Accounts start at 90%. The score drops by 10 percentage points if you miss an appointment without cancelling, or if you cancel inside the notice period the business has set. It is always between 0% and 100%.
The score does not rise again over time or through later attendance. It only goes back up if a mark against you is corrected - for example, where a business recorded a no-show for an appointment you actually attended.
Who sees it: when you book with a business, that business can see your current score from the moment you book until your appointment. It is never shown publicly, never shared with businesses you have not booked with, and never sold or used for advertising.
Our lawful basis is legitimate interests. Late cancellations and no-shows cost small businesses time they cannot recover, and a simple reliability signal lets them make an informed decision. We have weighed this against your interests: the score is a single number rather than a history of your bookings, it is only visible to a business you have chosen to book with, and it does not prevent you booking anywhere. You can object to this processing at any time - see section 6.
No automated decisions: the score does not automatically approve or decline anything. Every booking decision is made by a person at the business, who may take the score into account alongside anything else they know.
If you think it is wrong, email us at privacy@seatbooker.co.uk and we will investigate and correct it where appropriate. You have the right to have inaccurate data rectified and you do not have to take this up with the business yourself, though contacting them can often be the quickest route since they hold the underlying record.
3. Transactional emails
We send emails that are necessary to deliver the service. These are not marketing emails and cannot be opted out of while using the service. They include:
- Booking request confirmation
- Booking approval or cancellation notifications
- Appointment reminders (sent the evening before)
- Password reset links
- Account welcome email
These emails are sent via Resend (Resend Inc.), our email delivery provider. Resend processes email addresses on our behalf as a data processor. Their privacy policy is available at resend.com/legal/privacy-policy.
4. Sharing your data
We do not sell your personal data. We share it only in the following circumstances:
Between customers and businesses
When a customer makes a booking, their name, email address, phone number, and appointment details are shared with the relevant business owner. This is necessary to fulfil the booking.
The customer's trust score is also shared with that business, from the moment the booking is made until the appointment. It is not shared with any other business. See section 2 for how the score works and why we use it.
Third-party service providers (data processors)
We use the following processors who handle personal data on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Google Cloud Platform | Hosting, database, and infrastructure | EU / UK |
| Resend Inc. | Transactional email delivery | USA (Standard Contractual Clauses apply) |
| Google LLC | OAuth authentication (Sign in with Google) | USA (Standard Contractual Clauses apply) |
| Google LLC | Website analytics (Google Analytics 4), only where you have accepted analytics cookies | USA (Standard Contractual Clauses apply) |
Where processors are based outside the UK, we rely on appropriate safeguards such as UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses.
Legal obligations
We may disclose personal data where required to do so by law, court order, or at the request of a regulatory authority.
5. How long we keep your data
| Data | Retention period |
|---|---|
| Business owner account data | For the duration of the account, plus 90 days after deletion request |
| Customer booking records | 3 years from the date of the appointment |
| Password reset tokens | 1 hour (automatically deleted after use or expiry) |
| Email delivery logs | As per Resend's data retention policy (30 days) |
We may retain data for longer where required to comply with a legal obligation or to resolve disputes.
6. Your rights under UK GDPR
As a UK resident, you have the following rights in relation to your personal data:
Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete data.
Right to erasure: You can ask us to delete your personal data in certain circumstances (for example, if it is no longer necessary for the purpose it was collected).
Right to restriction: You can ask us to restrict how we use your data while a dispute is being resolved.
Right to data portability: You can request your data in a structured, machine-readable format.
Right to object: You can object to processing based on legitimate interests. We will stop unless we have compelling grounds to continue.
Rights related to automated decisions: We do not make any solely automated decisions that significantly affect you.
To exercise any of these rights, contact us at privacy@seatbooker.co.uk. We will respond within one calendar month.
7. Cookies
Essential cookies
These are required to operate the service and are set without consent, as permitted by the Privacy and Electronic Communications Regulations. They include the session cookies used to keep you signed in to your account.
You can disable cookies in your browser settings, but doing so will prevent you from staying signed in to your account.
Analytics cookies
We use Google Analytics 4 to understand how the site is used, so we can improve it. This sets cookies in your browser that record things like which pages you visit and how you arrived at the site. We have disabled advertising features and Google Ads data sharing, so this data is never used to target advertising to you.
These cookies are only set if you accept them. We use Google Consent Mode, which means that until you accept, Google Analytics does not read from or write to your device, and only receives anonymous, cookieless signals that cannot identify you. If you decline, no analytics cookies are set at any point.
You can change your mind at any time using the control below. Your choice is remembered in your browser, so you will need to set it again on each device or browser you use.
We do not use advertising cookies
We do not run advertising on Seatbooker and we do not set advertising or cross-site tracking cookies under any circumstances.
8. Security
We take reasonable technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), hashed password storage (bcrypt), and access controls limiting who can access production data.
No method of transmission over the internet is completely secure. If you believe your data has been compromised, please contact us immediately at privacy@seatbooker.co.uk.
9. Children
Our service is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to this policy
We may update this privacy policy from time to time. When we do, we will update the date at the top of this page. Where changes are significant, we will notify registered business owners by email.
11. How to complain
If you are unhappy with how we have handled your personal data, please contact us first at privacy@seatbooker.co.uk. We will do our best to resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF