Privacy Policy
Last updated 11 July 2026
GroomOS is booking and client-management software for dog groomers. This policy explains, in plain English, what personal data we hold, why, where it lives, and the rights you and your clients have under UK GDPR.
Who we are
GroomOS (“we”, “us”) provides the software a grooming business uses to take bookings and manage its clients. For your own business account you are our customer; for the dog owners in your account, you are the data controller and GroomOS acts as your data processor. Questions or requests: nailalfie4@gmail.com.
What data we hold
- Groomer accounts: your name, email, business name and settings, and a securely hashed password (handled by our authentication provider).
- Client & pet records: the dog owner’s name, email and phone, plus pet details (name, breed, size, coat and grooming notes) — entered by you or submitted through your public booking page.
- Bookings: appointment dates/times, services, prices and deposit amounts.
- Payments: we do not store card numbers. Card details are entered directly with Stripe, our payment processor.
How we use it
Only to provide the service: showing your calendar, taking online bookings, sending appointment reminders and booking confirmations by email, processing subscription payments, and keeping your account secure. We do not sell your data or your clients’ data, and we do not use it for advertising.
Where your data lives & who processes it
Your data is hosted in the EU/UK region. We share data only with the providers that run the service:
- Supabase — database and authentication hosting (EU region).
- Stripe — subscription and deposit payments (PCI-compliant; processes card data on our behalf).
- Resend — sending reminder and confirmation emails.
- Vercel — application hosting.
Each is a reputable processor bound to protect the data and use it only to provide their service to us.
Legal basis (UK GDPR)
We process account data to perform our contract with you. Client and pet records are processed on your instructions as your processor — the lawful basis for holding your clients’ data (usually legitimate interest or consent) sits with you as the controller.
How long we keep it
We keep your data for as long as your account is active. If you close your account or ask us to delete data, we remove it within 30 days, except where we must keep limited records for legal or accounting reasons.
Your rights
Under UK GDPR you (and your clients, via you) can ask to:
- Access the personal data we hold
- Correct anything inaccurate
- Delete data (“right to be forgotten”)
- Export a copy of the data
- Object to or restrict certain processing
To exercise any of these, email nailalfie4@gmail.com and we’ll respond within one month. You can also complain to the UK Information Commissioner’s Office (ICO) if you’re unhappy with how we’ve handled your data.
Cookies
We use only essential cookies needed to keep you logged in. We do not use advertising or third-party tracking cookies.
Contact
Questions about this policy or your data: nailalfie4@gmail.com.
This is a plain-English draft (v1) prepared for your review. It is not legal advice — please have a solicitor check it against your final data practices before you rely on it.
