Skip to content
England and WalesCanada · EN-CA

Privacy Policy

This policy explains what personal data VERYBOOKED LTD collects through VeryBookedAI, what we use it for, who receives it, how long we keep it and the rights you have. It is written for the UK GDPR and the EU GDPR.

Last updated:
Registered name:
VERYBOOKED LTD
Company number:
15393026
Registered in:
England and Wales
On this page12

In short

Executive summary
  • When you request quotes, your contact details go to the one business that buys your request, or to a partner company if no business on VeryBookedAI takes it.
  • Businesses see a summary of your job before they buy, never your name or contact details.
  • We do not use advertising or analytics cookies, and we do not sell your data to marketing lists.
  • A business listed in our directory can correct or remove its listing at any time.
  • You can ask to see, correct or delete your data through our contact page.

1Who is responsible for your data

VeryBookedAI is operated by VERYBOOKED LTD, registered in England and Wales. We are the controller of the personal data described in this policy.

Registered name
VERYBOOKED LTD
Company number
15393026
Registered in
England and Wales
Registered office
71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom

We have not appointed a data protection officer, as we are not required to. Questions about this policy or your data go through the contact page: choose the “My data” topic so it reaches the right person.

2Whose data this policy covers

  • Customers who request quotes through VeryBookedAI.
  • Businesses listed in our directory, including the people who run them.
  • Business account holders who claim a profile, buy leads or use our other services.
  • Partners who apply to send us leads or promote VeryBookedAI.
  • Visitors to the website, and anyone who contacts us.

3What we collect

When you request quotes

  • Your name, email address and phone number.
  • The postcode or address of the job, the service you need and your answers to the questions in the form, such as the type of property, the size of the job and when you want it done.
  • A record of your agreement to be contacted: the wording you agreed to, the time, and the IP address and browser details of the device you used.

When a business appears in our directory

  • Business name, trade, address or service area, phone number, website and opening hours, taken from public sources or given to us by the business.
  • When a business claims its profile: the name, email address and phone number of the person claiming it, and the result of the one-time code we send to that phone number by text message or call.

When you have a business account

  • Your email address, used to send you sign-in links, and your passkeys if you add them. A passkey gives us only a public key; your fingerprint, face or device PIN never leaves your device.
  • Your business profile, the trades and areas you receive offers for, your opening hours and your notification settings.
  • The leads you buy, your contact with those customers through VeryBookedAI, your return requests and the evidence you give with them.
  • Your wallet history: top-ups, lead purchases, credits and refunds. Card payments are handled by our payment processor, Stripe; we never see or store your full card number.

When you apply as a partner

  • Your company name, your name, work email, phone number, website and country.
  • How you generate traffic or leads, the volumes you expect and your preferred payout method.

When you contact us or visit the website

  • What you tell us in a message, with your name and email address.
  • Technical data our servers record for every request: IP address, browser type, the page requested and the time. We use it to run and protect the service, not to build a profile of you.
  • The country your connection comes from, which our network provides so we can send you to the right version of the site. We do not store it.

4Why we use it and our lawful basis

Data protection law requires a lawful basis for each use of personal data. Ours are:

Matching your quote request with a business
To take the steps you ask for when you send a request (Article 6(1)(b)).
Checking contact details and preventing fraud, spam and fake requests
Our legitimate interest in a marketplace businesses can trust (Article 6(1)(f)).
Publishing the business directory
Our legitimate interest, and that of customers, in finding local businesses, using business information that is already public, with a simple way to correct or remove a listing (Article 6(1)(f)).
Running business accounts, selling leads, handling returns and the wallet
Performing our contract with the business (Article 6(1)(b)).
Keeping accounting and tax records
Complying with a legal obligation (Article 6(1)(c)).
Assessing partner applications
Taking steps before a possible contract, at your request (Article 6(1)(b)).
Telling listed businesses about their free profile
Our legitimate interest in keeping listings accurate and complete (Article 6(1)(f)). You can object at any time and we will stop.
Securing the website and our systems
Our legitimate interest in protecting the service and its users (Article 6(1)(f)).

Matching a request to a business is automatic, based on the trade and the area of the job. It decides which businesses are offered your request, and has no legal or similarly significant effect on you.

5Who receives your data

The business that buys your request

Before anyone buys your request, matching businesses see only a summary: the trade, the town or postal district, a description of the job and when it was posted. When one business buys it, that business receives your name and contact details so it can contact you, and no other business on VeryBookedAI receives them. That business then uses your details as a separate controller, responsible for them under data protection law.

That business pays us for your request; this is how the service stays free for you. If no business on VeryBookedAI takes your request in time, we may pass it to a partner company that introduces customers to local businesses, which then uses your details under its own privacy notice. We never pass your details to advertising networks or data brokers.

Service providers

Companies that process data on our behalf, under contract and only on our instructions:

  • hosting and databases, in data centres in the European Union;
  • email delivery, for sign-in links, offers, receipts and replies to your messages;
  • text message and phone services, for verification codes and notifications;
  • phone number checks, to confirm a number is valid and reachable before a request is offered;
  • payments, processed by Stripe.

Others

  • Anyone visiting the directory sees the public information of a listed business.
  • The website’s typefaces are self-hosted on our own servers; your browser does not connect to external font providers, and your IP address is not shared with any third-party font service.
  • Courts, regulators, the police or tax authorities, when the law requires it.
  • A buyer of our business, or of part of it, who would continue to use your data as this policy describes.

6International transfers

We host our data in the European Union. Data moves between the United Kingdom and the European Union under the adequacy decisions each has made for the other. Where a service provider processes data in another country, such as our payment processor, we rely on an adequacy decision or on the standard contractual clauses approved by the European Commission and the UK authorities.

7How long we keep it

Quote requests
Until the request has been handled and the 14-day return period and any dispute are closed. After that we keep only what we need for accounting and to show that you agreed to be contacted.
Business accounts
For as long as the account is open, then as long as company and tax law requires.
Accounting and tax records
For as long as the law requires; in the United Kingdom, generally six years.
Notification delivery logs
90 days, then deleted automatically.
Directory listings
Until the business asks us to remove the listing or we learn that the business has closed.
Partner applications and messages
For as long as we need to answer and follow up, then deleted.

8Your rights

You have the right to:

  • get a copy of your personal data;
  • have inaccurate data corrected;
  • have your data deleted where we no longer need it or have no lawful basis to keep it;
  • restrict how we use your data while a question about it is resolved;
  • object to a use based on our legitimate interests, including any contact about your listing;
  • receive data you gave us in a portable format;
  • withdraw your agreement at any time, where we rely on it, without affecting what happened before.

To use any of these rights, contact us through the contact page. We may ask you to confirm your identity. We reply within one month, and tell you if a complex request needs up to two more months.

To correct or remove a directory listing, use the same page. We act on a verified request within 5 business days.

9How we protect your data

  • Contact details in quote requests are stored encrypted, and are decrypted only when needed to check them and to deliver the request to the business that bought it.
  • Business accounts have no passwords to steal: you sign in with a link that expires after 10 minutes, or with a passkey.
  • Sign-in cookies cannot be read by scripts on the page and are sent only over encrypted connections.
  • Access to personal data inside our company is limited to the people who need it.

10Children

VeryBookedAI is intended for adults. We do not knowingly collect data from anyone under 18; if you believe a child has sent us their details, contact us and we will delete them.

11Complaints

If you are unhappy with how we handle your data, please tell us first through the contact page so we can put it right.

You also have the right to complain to our supervisory authority in the United Kingdom, the Information Commissioner’s Office (ico.org.uk).

Where you live, you can also contact this authority: Office of the Privacy Commissioner of Canada (priv.gc.ca).

12Changes to this policy

We update this policy when what we do with data changes. This version was published on September 15, 2026. If a change matters to your account, we tell you by email. How we use cookies is explained in the Cookie Policy. This policy is written in English; where we provide a translation, the English version prevails if the two differ.