Privacy Policy
Last updated: July 2026
This policy explains how ChairFill (“we”, “us”) collects and uses personal data when you use chairfill.uk and our booking software. ChairFill is operated by ChairFill Ltd, a company registered in England and Wales (company number 17280709). We are the data controller for the personal data described here.
What we collect
Account details (name, email, password — stored encrypted); business details you add (shop name, services, opening hours, photos); booking and client information you or your customers enter (names, emails, phone numbers, appointment notes); and payment-related identifiers from Stripe (we never see or store full card numbers). We also collect basic technical data such as log and device information to keep the service secure.
How we use it
To provide the booking service, process subscriptions and payments, send transactional emails (confirmations, reminders), keep accounts secure, and improve the product. Our lawful bases are performance of a contract, our legitimate interests in running the service securely, and consent where required (e.g. optional marketing).
Who we share it with
We use trusted processors who handle data on our behalf under data-processing terms: Supabase (database & authentication), Stripe (payments), Resend (email delivery) and Vercel (hosting). We do not sell your data or share it for advertising.
Your rights
Under UK GDPR you can access, correct, export or delete your personal data, and object to or restrict certain processing. You can delete your account and all its data at any time from Settings → Danger zone. To exercise other rights, contact us. You may also complain to the Information Commissioner's Office (ico.org.uk).
Retention & security
We keep personal data for as long as your account is active and as needed for legal and accounting purposes, then delete or anonymise it. Data is encrypted in transit (HTTPS) and at rest, and access is controlled per account.
Contact
Questions or requests: hello@chairfill.uk.