Privacy & GDPR Notice

This site is a portfolio demonstration of a booking platform. It is not an operating business, no real services are provided and no real payments are taken. This notice explains the limited personal data the demo collects so you can decide what — if anything — you'd like to share while trying it.

What we collect

If you register an account you provide a name, email address and a password (stored hashed — never in clear text). If you make a demo booking, the same details are stored against the booking. The contact form collects a name, email, optional phone number and your message. Payment card details are handled entirely by Stripe in test mode and never reach our servers.

Why we collect it

Only to make the demo work end-to-end — signing you in, showing your appointments, and demonstrating the registration and booking flow. The data is not used for marketing, profiling or anything beyond running the demo.

How long we keep it

Demo data may be cleared at any time without notice as part of routine maintenance. You can also delete your account yourself from the account page — the record is removed immediately and any past bookings are detached and anonymised.

Where it is stored

Account and booking records are stored in a managed Postgres database (Neon). Transactional emails are sent through Resend. Stripe sees only the test-mode payment intent. All hosting is within Vercel's serverless platform.

Your rights

Under the UK GDPR you have the right to access, correct or erase your personal data, to restrict or object to processing, and to data portability. The easiest way to erase your data here is the “Delete account” button on your account page. For anything else, get in touch via the contact form.

Cookies

Only strictly necessary cookies are used: one to keep you signed in to your account, and cookies set by Stripe for the test-mode checkout. There is no advertising or analytics tracking, so no cookie consent banner is required.

Sensible use

Because this is a public demo, please don't enter genuinely sensitive information and please don't reuse a password you use elsewhere — even though passwords are hashed, a unique throwaway password is good practice on any demo site.

Contact

Questions about this notice? Use the contact form on this site.