Privacy Policy

GoSavis Limited ("GoSavis", "we", "our", or "us") provides a platform that connects people who need local services with the businesses and individuals that supply them. This Privacy Policy explains what personal information we collect when you use our customer site or the GoSavis Business operator surface, why we collect it, who we share it with, and the rights you have over it.

We have written this policy to be plain rather than legalistic. Where a section needs to be precise for legal reasons, we have tried to follow each precise statement with a sentence in ordinary language. If anything here is unclear, please get in touch using the contact details at the bottom of this page and we will do our best to explain.

By creating a GoSavis account, listing a business, booking a service, or otherwise using our platform, you confirm that you have read this policy and understand how your information will be handled. We may update the policy from time to time as the product evolves; the date at the top of this page reflects the most recent revision, and we will notify you about material changes through the channels you have chosen for service updates.

The data controller for personal information processed through GoSavis is GoSavis Limited, a company incorporated in the United Kingdom. If you have any questions about how your information is handled, you can reach our Data Protection contact at privacy@gosavis.com. For statutory enquiries you may also contact the Information Commissioner's Office (ICO), which is the UK supervisory authority for data protection.

Information you give us directly

Most of the personal information we hold is information you have actively chosen to share with us, either by typing it into a form or by completing a step in a flow that requires it. This typically includes the following:

• Account details: Your name, the email address you sign in with, a phone number if you have provided one, and any password you set. Passwords are never stored in readable form

• Profile details: Optional information you add to your public or operator profile, such as a display photo, a short description, your trading name, and your service area

• Booking and service data: The services you book or list, the dates and times of bookings, any notes attached to a booking, and the resulting transaction history

• Payment details: Bookings are currently paid on arrival, directly to the business, so GoSavis takes no payment details from you. If and when you choose an online card payment where one is offered, our payment partners process the card details on our behalf; we would hold a tokenised reference but never the raw card number

• Communications: The messages you send to other users, to our support team, or via any in-product feedback channel

Information we collect automatically

When you use our platform we collect a small amount of technical information that is necessary to keep the service secure, fast, and working correctly. This includes the type of device and browser you are using, your IP address, the pages you visit, the times of your visits, and the actions you take while signed in. We use this information to detect abuse, debug problems, and understand how the product is being used in aggregate.

Information from operators about their team

If a business adds team members to its workspace, the business is the controller for the basic information it shares about each team member (name, role, email address, working hours). GoSavis acts as a processor for that information on the business's behalf, and any team member who wants their information removed should ask the business they work for in the first instance.

If you use the preview

The preview signs you into a sample account without creating one of your own, so we collect no name, email, or profile information from you. It uses a session cookie to keep you in the sample world while you look around, together with the same technical information described above; the session ends when you leave the preview or close your browser, and anything you did inside it stays in the sample world.

Under UK and EU data protection law we must rely on a specific lawful basis to process personal information. We rely on the following bases, depending on what we are doing with your data:

• Performance of a contract: We need to process your account, profile, and booking information in order to provide the service you have signed up for

• Legitimate interests: We process limited technical and behavioural information to keep the service safe, prevent fraud, and improve the product. Where we rely on this basis we have weighed our interests against your rights

• Consent: Where we ask you to opt in to optional things such as marketing emails or non-essential cookies, your consent is the basis. You can withdraw consent at any time

• Legal obligation: Where the law requires us to keep certain records (for example, transaction records for tax purposes) we process the information needed to meet that obligation

We use the information described above only for the purposes for which it was collected. In practice that means we use your information to operate and improve the platform, to keep both customers and businesses safe, and to communicate with you about things that genuinely concern your account. The most common uses are described below.

We use your account and profile information to authenticate you, present your profile to other users where appropriate, and personalise the parts of the product that depend on who you are. We use your booking and service data to operate the booking flow itself, to surface your activity history to you, and to power the operator analytics each business sees about its own activity.

We use your communications to deliver messages between users, to investigate complaints, and to train our support team. We use technical and behavioural information to keep the platform secure, to debug failures, and to understand which features are being used and which are not. We do not sell personal information to anyone, and we do not allow third parties to use your information for their own marketing.

We share your personal information only when there is a clear reason to do so. The main categories are described below; outside these we do not share your data with third parties.

With other users to fulfil a booking

When a customer books a service, the relevant booking information (the customer's display name, the service requested, the time, and any notes the customer has chosen to share) is sent to the business that will fulfil it. Conversely, when a business confirms or updates a booking, the relevant information is shared back with the customer.

With our service providers

We use a small number of carefully chosen suppliers to operate the platform. These include cloud hosting and storage providers, payment processors, transactional email and notification providers, and customer support tooling. Each supplier is bound by a data processing agreement that limits their use of your information to the specific service they provide for us.

We use Sentry as an error-monitoring service to identify and diagnose technical failures in the customer, business, and administration applications. We configure it not to receive account identity, form content, booking notes, payment details, or request bodies. Limited technical information, such as a stack trace, application route, browser or server version, and an IP address while the event is being transmitted, may be processed for reliability and security. Our Sentry account settings govern storage region, retention, and transport safeguards.

For legal and safety reasons

We may disclose information when we are required to by law, when we receive a valid legal request from a court or regulator, or when disclosure is reasonably necessary to protect the safety of our users, our staff, or the public. Where we can lawfully tell you about such a disclosure, we will.

Some of the suppliers we rely on are based outside the United Kingdom. Where personal information is transferred internationally, we use the safeguards set out in UK and EU data protection law (such as the International Data Transfer Agreement or the Standard Contractual Clauses, together with appropriate technical measures) to ensure your information continues to be protected to a standard equivalent to that in the UK.

We do not keep personal information any longer than we need to. Account information is retained for as long as your account is active, plus a short tail to allow for support enquiries and fraud investigation. Transaction records are kept for the period required by tax and consumer protection law. Communications are retained for as long as they are useful for support, then deleted on a rolling basis. If you close your account, we anonymise or delete your personal information except where law requires us to retain it.

Under UK and EU data protection law you have a number of rights over the personal information we hold about you. These include the right to be informed about how your data is used (which is what this policy is for), the right to access a copy of the data we hold, the right to have inaccurate data corrected, the right to have your data deleted in certain circumstances, the right to restrict or object to certain types of processing, and the right to data portability.

You can exercise most of these rights from inside your account settings. For anything you cannot do directly in the product, please email privacy@gosavis.com. We aim to respond to all rights requests within one calendar month, and we will not charge you for exercising your rights except where the law allows us to.

We treat the security of your information as a foundational responsibility. Our infrastructure is hosted with reputable cloud providers who maintain industry-standard certifications, all data in transit is encrypted using modern TLS, and sensitive data at rest is encrypted using widely audited algorithms. Access to production systems is limited to a small number of authorised staff, audited, and protected by hardware-backed authentication.

Despite our best efforts no online service can guarantee absolute security. If we ever become aware of a breach that affects your personal information, we will tell you and the appropriate regulator without undue delay, and we will explain what happened, what we are doing about it, and what (if anything) you should do.

GoSavis is not designed for use by anyone under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact the privacy address below and we will delete it.

We may revise this policy from time to time as the product, our suppliers, or the law change. The date at the top of this page reflects the most recent revision, and we will notify you about material changes through the channels you have chosen for service updates so that you have a meaningful opportunity to read them before they take effect.

If you have any questions about this policy, want to exercise one of the rights described above, or would like to raise a concern about how your information is being handled, please get in touch using the addresses below.

• Privacy enquiries: privacy@gosavis.com

• General support: support@gosavis.com

• Response time: Within 5 business days, and within 30 days for formal rights requests