Privacy Policy

1. Who we are

BookedYourSlot is owned and operated by AI Regenesis Ltd (company number 16376961), registered at 20 Wenlock Road, London, N1 7GU.

For any question about how we handle your data, email privacy@bookedyourslot.com.

2. What this policy covers

This policy explains the data we collect when you use BookedYourSlot — whether as a business owner running a booking page, or as a customer making a booking on someone else's page.

When you make a booking on a business's BookedYourSlot page, that business is the controller of your booking data. AI Regenesis Ltd acts as their data processor — we host and transmit the data on their behalf. If you want your data deleted or corrected, you can contact either the business directly or us at privacy@bookedyourslot.com and we'll work with them.

3. Data we collect

If you're a business owner

• Your name and email when you register.
• A hashed copy of your password (never the plain text).
• Your business profile: name, description, phone, address, timezone, logo.
• Your subscription plan and billing identifiers via our payment processor, Stripe.
• Email-verification and password-reset tokens (temporary, one-shot).
• Sign-in timestamps and IP address for security review.

If you're a booking customer

• Your name and email.
• Your phone number, only if you choose to enter it.
• The service, date, time and provider you booked.
• Any notes you add to your booking.

Technical data we collect from everyone

• Your IP address in our server logs (kept for 14 days for security).
• Two strictly-necessary cookies on the website — see our Cookies Policy for detail.
• Aggregate page-view statistics via regeninsite, our own in-house analytics tool. It does not identify you individually and does not set cookies. regeninsite is operated by AI Regenesis Ltd — the same legal entity that operates BookedYourSlot — so this is not a third-party share.

4. Why we process it (legal bases under UK GDPR)

• Performance of a contract — to provide the booking service you signed up for, take payment, deliver your bookings, and send transactional emails.
• Legitimate interest — security logging, fraud prevention, anti-spam, and aggregate website analytics. We've assessed these and concluded the value to you and to us outweighs the privacy intrusion (which is minimal).
• Legal obligation — retaining billing records for HMRC tax compliance (currently 7 years).
• Consent — we do not currently send marketing emails. If we ever do, we will ask for your specific opt-in consent first and give you a clear way to withdraw it.

5. Who we share it with

• Stripe (payment processing, subscription billing). Stripe is the controller of your card and payment data; see stripe.com/privacy.
• Hostinger (email delivery via SMTP, web hosting).
• The business owner for whom you made a booking (booking customers only).
• Authorities, if compelled by law, court order, or legitimate request.

We do not sell your data, ever. We do not share it with advertisers, data brokers, or third parties not listed above.

6. How long we keep it

• Business-owner account data — while your account is active, plus 90 days after closure for dispute resolution. After that we delete or anonymise it.
• Booking customer data — for as long as the business owner instructs us to keep it, plus 3 years for our records.
• Server logs — 14 days.
• Billing records — 7 years (HMRC requirement).

7. Your rights

Under UK GDPR you have the right to:

• Access — ask us what personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data, where we don't have a legal obligation to keep it.
• Restriction — ask us to stop using your data while a dispute is being resolved.
• Portability — get your data in a machine-readable format you can take elsewhere.
• Object — object to processing that relies on legitimate interest.

Email privacy@bookedyourslot.com to exercise any of these. We'll respond within one month.

8. Cookies

We set two strictly-necessary cookies (for logging you in and remembering that you ticked "Keep me logged in"). We do not set tracking or advertising cookies. See our Cookies Policy for detail.

9. International transfers

Stripe processes payment data globally under Standard Contractual Clauses approved by the European Commission and the UK ICO. All other data we collect is processed within the UK and EEA.

10. Children

BookedYourSlot is not intended for use by anyone under 16. We do not knowingly collect data from children. If you believe a child has registered, contact us and we'll delete the account.

11. How to complain

If you are not happy with how we've handled your personal data, you can lodge a complaint with the UK Information Commissioner's Office:

https://ico.org.uk/make-a-complaint/

12. Changes to this policy

We may update this policy as the service evolves. Material changes will be flagged by email to account holders. The "Last updated" date below always reflects the current version.