Privacy Policy

1. Data Controller

REDLINE MANAGEMENT LTD, 35 Goldfinch Drive, Sandy, SG19 2SA, United Kingdom.

Privacy contact: [email protected]. General contact: [email protected]. We respond to data requests within 30 days.

2. Data We Collect

Depending on how you use the platform, we process the following categories of data:

• Account data — name, email address, password hash, business name, role, and language preference of Tenant users and platform operators.
• Booking data — guest name, email, phone number, appointment details, service selection, notes, and history entered when a booking is made.
• Billing data — subscription plan, billing status, and (where paid features are used) payment metadata processed by our payment provider.
• Technical data — IP address, browser/device information, and pages visited, collected via server logs and analytics.
• Communication data — emails and support messages exchanged with us.

3. Purpose and Legal Basis

We process personal data on the following legal bases under the GDPR:

• Performance of a contract (Art. 6(1)(b)) — operating accounts, managing bookings, sending booking confirmations and reminders.
• Legitimate interests (Art. 6(1)(f)) — securing the platform, preventing abuse, and improving the service.
• Consent (Art. 6(1)(a)) — non-essential cookies, analytics, and marketing pixels, where required.
• Legal obligation (Art. 6(1)(c)) — accounting and tax record-keeping.

4. Third-Party Services and Processors

We use a limited set of vetted processors to operate the service:

• Hosting — Hetzner Online GmbH (EU data centres).
• Email delivery — Brevo (transactional booking and account emails).
• Analytics and advertising pixels — where enabled by a Tenant: Google Analytics 4, Google Tag Manager, Meta Pixel/Conversions API, TikTok Pixel, and LinkedIn Insight Tag.
• Payments — our payment provider for paid subscriptions (processed only when paid features are purchased).
• We do not sell personal data. Processors act only on our documented instructions.

5. Data Storage and Retention

Data is stored on EU-based infrastructure. Account and booking data are retained for as long as the related account is active and for a reasonable period thereafter to meet legal and accounting obligations.

Tenants can delete guest and booking records at any time. When a platform account is closed, associated personal data is deleted or anonymised, except where retention is legally required.

6. Security Measures

We apply industry-standard safeguards including encrypted transport (TLS), hashed passwords, role-based access control, tenant data isolation, and restricted administrative access. No method of transmission or storage is fully secure, but we work to protect your data using appropriate technical and organisational measures.

7. Cookies and Local Storage

We use strictly necessary cookies to keep you signed in and to operate the booking flow, and — with consent where required — analytics and marketing technologies. See our Cookie Policy for details.

8. Your Rights (GDPR)

You have the right to access, rectify, erase, restrict, and port your data, and to object to certain processing. See our GDPR Rights page for how to exercise them. You also have the right to lodge a complaint with a supervisory authority.

9. Data Deletion

You can request deletion of your personal data at any time. See our Data Deletion page for the process and timelines.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by an updated "Last updated" date and, where appropriate, additional notice.

11. Contact

For any privacy question, contact [email protected].