Sobs / privacy

Privacy policy

Draft for owner and legal review. This page is not a final legal document.

Who controls your information

Owner must provide the legal entity, registered address, privacy contact, and controller/processor responsibilities.

Information we process

Account details, customer contact information, appointment records, and subscription identifiers support the booking service. Do not submit sensitive information in appointment notes.

Providers and retention

The deployment uses Supabase, Stripe, Resend, Vercel, and optionally Sentry. Owner must review processor contracts, data locations, international transfers, lawful bases, cookies, and retention periods.

Your choices

Workspace owners can export customer records. A documented deletion request workflow is included in the deployment guide. Owner must establish a verified contact channel and review UK data protection obligations.