Last updated: 17 July 2026
Publisher to complete before going live: replace [Company Legal Name], [Registered Address], and [ICO Registration No.] below, and have this document reviewed by a qualified adviser. This is a working draft, not legal advice.
This policy explains how [Company Legal Name] ("BooqIt", "we", "us") handles personal data in the BooqIt mobile app and at booqit.mwbm.io. BooqIt is a booking and subscription app for UK self-employed professionals and their clients. We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.
| Category | Examples | Why |
|---|---|---|
| Account | Name, email, role (professional/client), password (hashed), Sign in with Apple / Google identifier | Create and secure your account |
| Professional profile | Trade, bio, photos, services, prices, availability, location/coverage area | Show your public booking page |
| Bookings & activity | Appointments, subscriptions, loyalty stamps, event attendance, messages, reviews | Provide the core service |
| Payments | Handled by Stripe. We store amounts, status, and Stripe identifiers — never full card numbers | Take and record payments |
| Device & diagnostics | Push token, app version, first-party product analytics (searches, feature use) | Notifications and improving the app |
| Approximate location | Coarse location, only when you use "near me" discovery and grant permission | Find nearby professionals |
To provide bookings, payments, subscriptions and messaging; to send transactional notifications; to keep the service secure and prevent fraud; and, where you have opted in, to send marketing from a professional you follow. We rely on the lawful bases of contract, legitimate interests, legal obligation, and consent (for marketing and location).
We do not track you across other companies' apps or websites, we do not show third-party advertising, and we do not sell your personal data. Analytics are first-party only and are used to operate and improve BooqIt.
BooqIt's optional AI tools (profile builder, redesign, seasonal promotions) send your prompt and a small snapshot of your own public profile to our AI provider, Anthropic, PBC (the "Claude" family of models), to generate suggestions. We do not send your clients' personal data, booking history, messages, or payment information to the AI provider.
AI features use Anthropic's standard commercial API. We do not have a separate enterprise or data-processing agreement with Anthropic; your prompt and profile snapshot are processed under Anthropic's Commercial Terms of Service and Privacy Policy. Under those terms, data submitted through the commercial API is not used to train Anthropic's models, and may be retained by Anthropic for a limited period for safety and abuse-monitoring. Please refer to Anthropic's own policies for the definitive terms. See our About AI page for more detail.
We share data with the following processors who act on our instructions:
| Provider | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication, file storage, backend hosting | EU (eu-west-1) |
| Stripe | Payment processing and payouts (Stripe Connect) | EU / US |
| Anthropic | AI text generation via the standard commercial API (prompt + your own profile snapshot; processed under Anthropic's commercial API terms) | US |
| Apple | Push notifications (APNs), Sign in with Apple | US / global |
| Resend | Transactional and opt-in marketing email | US |
| Twilio | Optional SMS appointment reminders | US |
Where data is transferred outside the UK/EEA, we rely on adequacy decisions or Standard Contractual Clauses.
We keep personal data for as long as your account is active and as needed to provide the service. Financial and transaction records are kept for up to 7 years to meet UK tax and accounting obligations. When you delete your account we remove or anonymise personal data that we are not legally required to keep.
You have the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. You can delete your account in-app (Settings → Delete account) or email us. You may also complain to the UK Information Commissioner's Office (ico.org.uk). Our ICO registration number is [ICO Registration No.].
The BooqIt Pro subscription (£5/month) may be cancelled at any time. New subscribers have a 14-day cancellation (cooling-off) period under the UK Consumer Contracts Regulations 2013; if you cancel within 14 days of first subscribing you are entitled to a refund, subject to the terms set out in our Terms of Service. Manage or cancel your subscription in-app under Settings.
BooqIt is not directed at children under 13, and professional accounts are for adults. We do not knowingly collect data from children under 13.
We will post any changes to this policy on this page and update the date above. Material changes will be notified in-app.
Data protection enquiries: privacy@booqit.mwbm.io
[Company Legal Name], [Registered Address].