Gallus privacy notice

• Customers booking a business. The business you book with decides how your information is used, and we process it for them. Each business has its own privacy notice, linked from its booking page. Please contact the business first about your information.
• Businesses using Gallus. For your account, sign-in and billing, we're responsible for your information. The rest of this notice covers that.

• Your name, email address and business details, to set up and run your account.
• Sign-in records and a session cookie, to keep your account secure.
• Billing details: Stripe handles your card; we keep your plan, payment status and invoices.
• Emails and calls with us, to help you.

We use this to provide the service you pay for, and to meet legal duties such as tax records. We never sell it or use it for advertising.

• Cloudflare (hosting, file storage, spam protection)
• Neon (database, in London)
• Stripe (payments and billing)
• Resend (emails)

Some may handle data outside the UK, under safeguards approved by UK data protection law.

While your account is open, and afterwards for as long as the law requires for business records (usually 6 years). Your bookings and customers are yours: you can export them at any time, and we delete them when you ask us to after you leave.

You can ask for a copy of your information, or ask us to correct or delete it. If you're unhappy, you can complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113.

Businesses: see our terms, which include how we process your customers' data for you.