Legal Document

Privacy Policy

Last updated: May 2026 · Operated by Z.I Operations UK

Summary — what you need to know

🔒

We never sell your data to third parties

💬

SMS sent on behalf of businesses — you can opt out anytime

👤

Your client data belongs to you — not us

🇬🇧

UK GDPR compliant — Z.I Operations UK

🍪

Essential cookies only — no advertising trackers

✉️

Data requests: management@foreiagroup.com

Seatd is a product of FOREiA, operated by Z.I Operations UK, registered in England and Wales ("Seatd", "we", "us", "our"). This Privacy Policy explains how we collect, use, store and protect your personal information when you use our platform at seatd.co.uk. By using Seatd, you agree to the collection and use of information in accordance with this policy.

1

Information We Collect

Business owners and professionals

When you create a Seatd account, we collect your full name, email address, business name, business sector, city, postcode, phone number, Instagram handle, website URL, biography, logo, brand colours, cover photo and portfolio images. We also collect subscription and billing information processed through Stripe.

Clients making bookings

When a client makes a booking through a Seatd booking page, we collect their full name, phone number, email address (optional), the service booked, the date and time of the booking, and any notes they provide.

Usage data

We collect information about how you interact with our platform, including pages visited, features used, actions taken, device type, browser type and approximate location derived from IP address.

2

How We Use Your Information

To provide our services

We use your information to operate the Seatd platform — processing bookings, managing your account, providing your branded booking page, listing your business on the marketplace and enabling the booking wizard for clients.

To send automated SMS messages

We use phone numbers to send automated SMS messages on behalf of businesses listed on our platform. These include booking confirmations, 24-hour appointment reminders, 2-week re-engagement messages and review requests.

To process payments

We use Stripe to process subscription payments. Stripe handles all card data directly and we never store your payment card details on our systems.

To improve the platform

We use aggregated, anonymised usage data to understand how our platform is used and to improve features, performance and user experience.

3

SMS Communications

Automated SMS on behalf of businesses

Seatd sends automated SMS messages using Twilio on behalf of businesses listed on our platform. These messages are sent from a Seatd number and identify the business by name. The SMS types we send are: booking confirmations (immediately on booking), 24-hour appointment reminders, 14-day re-engagement messages and post-appointment review requests.

Opting out of SMS

Clients can opt out of SMS communications at any time by replying STOP to any message received. Once opted out, no further SMS will be sent to that number from our platform. Business owners can manage their SMS automation settings from their Seatd dashboard.

4

Data Storage and Security

Where data is stored

Your data is stored securely on Supabase infrastructure, which uses enterprise-grade encryption at rest and in transit. Our platform is hosted on Vercel. All data storage and processing is subject to appropriate data protection agreements.

Security measures

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. This includes encryption, access controls, row-level security on our database, and secure authentication.

Data retention

We retain your account data for as long as your account remains active. If you cancel your subscription, your data is retained for 30 days before deletion. Client booking data is retained for the duration of the business account.

5

Third-Party Services

Services we use

We use the following trusted third-party services to operate our platform: Supabase (database and authentication), Twilio (SMS communications), Stripe (payment processing), Vercel (hosting and deployment), and Resend (transactional email). Each provider has their own privacy policy and appropriate data protection practices.

What we do not do

We do not sell your personal information to third parties. We do not share your client data with advertisers. We do not use your client relationships for our own marketing. We do not use tracking or advertising cookies.

6

Your Rights Under UK GDPR

Your data rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights: the right to access your personal data; the right to rectify inaccurate data; the right to erasure ("right to be forgotten"); the right to restrict processing; the right to data portability; the right to object to processing; and rights in relation to automated decision making.

How to exercise your rights

To exercise any of your data rights, please contact us at management@foreiagroup.com with the subject line "Data Rights Request". We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7

Cookies

Cookies we use

Seatd uses only essential cookies required for the platform to function correctly. These include authentication session cookies to keep you logged in to your dashboard, and security cookies to protect against cross-site request forgery.

What we do not use

We do not use advertising cookies, tracking pixels, analytics cookies from third parties, or any cookies that track your behaviour across other websites. You can control cookie settings through your browser settings, however disabling essential cookies may affect platform functionality.

8

Children's Privacy

Age restrictions

Seatd is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a minor, we will delete it promptly. If you believe we have inadvertently collected data from a minor, please contact us immediately.

9

Changes to This Policy

How we notify you

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on this page with an updated date. For material changes, we may also notify you by email. Continued use of Seatd after changes constitutes acceptance of the updated policy.

10

Contact and Data Controller

Data controller

The data controller responsible for your personal information is Z.I Operations UK, operating the Seatd platform as a product of FOREiA. Z.I Operations UK is registered in England and Wales.

Contact us

For any questions about this Privacy Policy, how we handle your data, or to exercise your data rights, please contact us. We respond to all data enquiries within 30 days.

Contact us about your data

📧
📧

Secondary contact

adam@foreia.ai
🏢

Legal entity

Z.I Operations UK — England and Wales