Privacy Policy
Last updated: June 2026
Who we are
Scheddual Ltd ("Scheddual", "we", "us", "our") is a private limited company registered in England and Wales (Company No. 17251898). Our registered address is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
We operate the Scheddual platform at scheddual.app — a booking and business management tool for service businesses. You can contact us at hello@scheddual.app.
What this policy covers
This privacy policy explains how Scheddual collects, uses, stores, and protects personal data when you use our platform — whether you are a business owner using our dashboard (a "tenant") or a client booking an appointment through a tenant's booking page.
Scheddual is the data controller for data collected directly through our platform. Tenants are independent data controllers for their own clients' data — they are responsible for their own privacy notices to their clients.
Data we collect
If you are a business owner (tenant)
- Account information: your name, email address, and password when you register
- Business information: business name, phone number, address, and other details you add to your account
- Payment information: billing details for your Scheddual subscription, processed securely by Stripe. We do not store your card details directly.
- Usage data: how you use the platform, including bookings created, settings changed, and features used
- Communications: any emails or messages you send to us
If you are a client booking an appointment
- Booking information: your name, email address, phone number, and any other details required to complete a booking
- Payment information: payment details processed securely by Stripe when you pay for a booking. We do not store your card details directly.
- Account information: if you create a client account, your email address and password
How we use your data
- To provide and operate the Scheddual platform
- To process bookings and payments
- To send transactional emails (booking confirmations, reminders, receipts)
- To manage your account and subscription
- To respond to support requests
- To improve the platform and fix issues
- To comply with our legal obligations
We do not sell your personal data to third parties. We do not use your data for advertising.
Legal basis for processing
We process your personal data under the following lawful bases under UK GDPR:
- Contract: processing necessary to provide the service you have signed up for
- Legitimate interests: to operate, maintain, and improve the platform
- Legal obligation: to comply with applicable laws
- Consent: where you have given explicit consent, such as for optional communications
Third parties we share data with
We use the following third-party services to operate Scheddual. Each is bound by their own privacy policy and data processing agreements:
- Stripe — payment processing for client bookings and platform subscriptions. Stripe is PCI DSS Level 1 certified. Stripe Privacy Policy
- Supabase — secure database and file storage hosted in the EU. Supabase Privacy Policy
- Resend — transactional email delivery (booking confirmations, reminders, receipts). Resend Privacy Policy
- Google — optional Google sign-in (OAuth). Only used if you choose to sign in with Google. Google Privacy Policy
- Vercel — platform hosting and infrastructure. Vercel Privacy Policy
Data retention
We retain your personal data for as long as your account is active. If you cancel your account or your subscription lapses, we retain your data for 30 days to allow for account recovery, after which it is permanently deleted.
Anonymised and aggregated data (such as booking counts and revenue totals) may be retained indefinitely as it cannot be used to identify you.
Your rights under UK GDPR
You have the following rights regarding your personal data:
- Right of access: request a copy of the data we hold about you
- Right to rectification: request correction of inaccurate data
- Right to erasure: request deletion of your personal data. You can delete your account directly from within the platform, which permanently removes your personal data.
- Right to portability: request your data in a portable format
- Right to object: object to processing based on legitimate interests
- Right to restrict processing: request that we limit how we use your data
To exercise any of these rights, contact us at hello@scheddual.app. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
We use strictly necessary cookies only. For full details see our Cookie Policy.
Security
We take the security of your data seriously. Scheddual uses industry-standard security measures including encrypted connections (HTTPS), secure password hashing, rate limiting on authentication endpoints, and regular security reviews. Payment data is handled entirely by Stripe and is never stored on our servers.
Changes to this policy
We may update this privacy policy from time to time. We will notify tenants of material changes by email. Continued use of the platform after changes constitutes acceptance of the updated policy.
Contact
Scheddual Ltd
71-75 Shelton Street
Covent Garden
London, WC2H 9JQ
hello@scheddual.app