Privacy Policy
This policy explains what personal data VERYBOOKED LTD collects through VeryBookedAI, what we use it for, who receives it, how long we keep it and the rights you have. It is written for the UK GDPR and the EU GDPR.
- Last updated:
- Registered name:
- VERYBOOKED LTD
- Company number:
- 15393026
- Registered in:
- England and Wales
On this page12
In short
Executive summary- When you request quotes, your contact details go to the one business that buys your request, or to a partner company if no business on VeryBookedAI takes it.
- Businesses see a summary of your job before they buy, never your name or contact details.
- We do not use advertising or analytics cookies, and we do not sell your data to marketing lists.
- A business listed in our directory can correct or remove its listing at any time.
- You can ask to see, correct or delete your data through our contact page.
1Who is responsible for your data
VeryBookedAI is operated by VERYBOOKED LTD, registered in England and Wales. We are the controller of the personal data described in this policy.
- Registered name
- VERYBOOKED LTD
- Company number
- 15393026
- Registered in
- England and Wales
- Registered office
- 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
We have not appointed a data protection officer, as we are not required to. Questions about this policy or your data go through the contact page: choose the “My data” topic so it reaches the right person.
2Whose data this policy covers
- Customers who request quotes through VeryBookedAI.
- Businesses listed in our directory, including the people who run them.
- Business account holders who claim a profile, buy leads or use our other services.
- Partners who apply to send us leads or promote VeryBookedAI.
- Visitors to the website, and anyone who contacts us.
3What we collect
When you request quotes
- Your name, email address and phone number.
- The postcode or address of the job, the service you need and your answers to the questions in the form, such as the type of property, the size of the job and when you want it done.
- A record of your agreement to be contacted: the wording you agreed to, the time, and the IP address and browser details of the device you used.
When a business appears in our directory
- Business name, trade, address or service area, phone number, website and opening hours, taken from public sources or given to us by the business.
- When a business claims its profile: the name, email address and phone number of the person claiming it, and the result of the one-time code we send to that phone number by text message or call.
When you have a business account
- Your email address, used to send you sign-in links, and your passkeys if you add them. A passkey gives us only a public key; your fingerprint, face or device PIN never leaves your device.
- Your business profile, the trades and areas you receive offers for, your opening hours and your notification settings.
- The leads you buy, your contact with those customers through VeryBookedAI, your return requests and the evidence you give with them.
- Your wallet history: top-ups, lead purchases, credits and refunds. Card payments are handled by our payment processor, Stripe; we never see or store your full card number.
When you apply as a partner
- Your company name, your name, work email, phone number, website and country.
- How you generate traffic or leads, the volumes you expect and your preferred payout method.
When you contact us or visit the website
- What you tell us in a message, with your name and email address.
- Technical data our servers record for every request: IP address, browser type, the page requested and the time. We use it to run and protect the service, not to build a profile of you.
- The country your connection comes from, which our network provides so we can send you to the right version of the site. We do not store it.
4Why we use it and our lawful basis
Data protection law requires a lawful basis for each use of personal data. Ours are:
- Matching your quote request with a business
- To take the steps you ask for when you send a request (Article 6(1)(b)).
- Checking contact details and preventing fraud, spam and fake requests
- Our legitimate interest in a marketplace businesses can trust (Article 6(1)(f)).
- Publishing the business directory
- Our legitimate interest, and that of customers, in finding local businesses, using business information that is already public, with a simple way to correct or remove a listing (Article 6(1)(f)).
- Running business accounts, selling leads, handling returns and the wallet
- Performing our contract with the business (Article 6(1)(b)).
- Keeping accounting and tax records
- Complying with a legal obligation (Article 6(1)(c)).
- Assessing partner applications
- Taking steps before a possible contract, at your request (Article 6(1)(b)).
- Telling listed businesses about their free profile
- Our legitimate interest in keeping listings accurate and complete (Article 6(1)(f)). You can object at any time and we will stop.
- Securing the website and our systems
- Our legitimate interest in protecting the service and its users (Article 6(1)(f)).
Matching a request to a business is automatic, based on the trade and the area of the job. It decides which businesses are offered your request, and has no legal or similarly significant effect on you.
6International transfers
We host our data in the European Union. Data moves between the United Kingdom and the European Union under the adequacy decisions each has made for the other. Where a service provider processes data in another country, such as our payment processor, we rely on an adequacy decision or on the standard contractual clauses approved by the European Commission and the UK authorities.
7How long we keep it
- Quote requests
- Until the request has been handled and the 14-day return period and any dispute are closed. After that we keep only what we need for accounting and to show that you agreed to be contacted.
- Business accounts
- For as long as the account is open, then as long as company and tax law requires.
- Accounting and tax records
- For as long as the law requires; in the United Kingdom, generally six years.
- Notification delivery logs
- 90 days, then deleted automatically.
- Directory listings
- Until the business asks us to remove the listing or we learn that the business has closed.
- Partner applications and messages
- For as long as we need to answer and follow up, then deleted.
8Your rights
You have the right to:
- get a copy of your personal data;
- have inaccurate data corrected;
- have your data deleted where we no longer need it or have no lawful basis to keep it;
- restrict how we use your data while a question about it is resolved;
- object to a use based on our legitimate interests, including any contact about your listing;
- receive data you gave us in a portable format;
- withdraw your agreement at any time, where we rely on it, without affecting what happened before.
To use any of these rights, contact us through the contact page. We may ask you to confirm your identity. We reply within one month, and tell you if a complex request needs up to two more months.
To correct or remove a directory listing, use the same page. We act on a verified request within 5 business days.
9How we protect your data
- Contact details in quote requests are stored encrypted, and are decrypted only when needed to check them and to deliver the request to the business that bought it.
- Business accounts have no passwords to steal: you sign in with a link that expires after 10 minutes, or with a passkey.
- Sign-in cookies cannot be read by scripts on the page and are sent only over encrypted connections.
- Access to personal data inside our company is limited to the people who need it.
10Children
VeryBookedAI is intended for adults. We do not knowingly collect data from anyone under 18; if you believe a child has sent us their details, contact us and we will delete them.
11Complaints
If you are unhappy with how we handle your data, please tell us first through the contact page so we can put it right.
You also have the right to complain to our supervisory authority in the United Kingdom, the Information Commissioner’s Office (ico.org.uk).
12Changes to this policy
We update this policy when what we do with data changes. This version was published on September 15, 2026. If a change matters to your account, we tell you by email. How we use cookies is explained in the Cookie Policy. This policy is written in English; where we provide a translation, the English version prevails if the two differ.