Legal

Privacy Policy

Last updated 17 August 2026

FirstBooking is a trading name of Tuohy Labs Ltd, a company registered in England and Wales under company number 17384531, whose registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom ("FirstBooking", "we", "us" or "our"). We operate FirstBooking and are the data controller for merchant accounts. Contact us about privacy at legal@firstbooking.online.

Who is responsible for what

We are the controller of data about merchants - the people who sign up, build a site and pay for a plan. For personal data about a merchant's own booking customers, the merchant is the controller and we act as their processor, handling that data only to run the service on their behalf. If you booked with a business through a FirstBooking site, contact that business first about your data.

Data we collect

Account data: name, email address, password hash, login method and account settings.
Business content: business name, description, services, prices, availability, images and other material you upload to your site.
Booking data: the name, email, phone number, chosen service, time, notes and any extra information a customer submits through your booking form, plus their marketing consent choice.
Billing data: plan, subscription status, billing period and payment records. Card details are handled by Stripe and never stored by us.
Support data: messages you send us through the contact and help forms.
Usage data: pages viewed, site visits, booking conversions, device and browser information, and error diagnostics.

Why we use it and our lawful basis

To provide the service and your account - performance of our contract with you.
To take payment and manage subscriptions - performance of contract and legal obligation.
To send transactional emails such as booking notifications, confirmations and account emails - performance of contract.
To keep the platform secure, prevent abuse and investigate breaches of our terms - our legitimate interests.
To measure and improve the product using aggregate analytics - our legitimate interests.
To send product or marketing emails where you have opted in - your consent, withdrawable at any time.

Who processes data for us

Lovable Cloud - application hosting, database and file storage.
Stripe - subscription payments and billing records.
Our transactional email provider - delivery of account and booking emails from our sending domain.

These providers act on our instructions under data processing terms. Some may process data outside the United Kingdom; where they do, appropriate safeguards such as standard contractual clauses apply. We do not sell personal data.

How long we keep it

Account and business content: for as long as your account is active, and up to 90 days after deletion in backups.
Booking and customer records: while your account is active, or until you delete them from your dashboard.
Billing records: up to 7 years, where tax and accounting law requires it.
Support messages and analytics: up to 24 months.

Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to processing, or provide it in a portable format, and you can withdraw consent for marketing at any time. Email legal@firstbooking.online and we will respond within one month. You also have the right to complain to your local data protection authority.

Cookies and analytics

We use cookies and similar storage that are necessary to keep you signed in and to keep the service secure, plus privacy-conscious product analytics to understand how FirstBooking is used and how merchant sites perform. We do not run third-party advertising trackers.

Security

Data is encrypted in transit, access to merchant data is restricted by row-level database rules so one merchant cannot see another's data, uploaded media is stored in a private bucket, and staff access is limited to what is needed to support you. No service can promise perfect security; tell us at legal@firstbooking.online if you suspect a problem.

Children

FirstBooking is for business use by adults. We do not knowingly collect data from children.

Changes

We will post updates to this page and notify you of material changes by email or in the app. See also our Terms of Service.

Tuohy Labs Ltd is registered in England and Wales under company number 17384531, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. This policy is business documentation, not legal advice.