Privacy Policy

1. Who we are

BukNearby is operated by ANGELTOUCHBEAUTY GROUP & CO LTD, company number 16206679, Derby, England. We are the data controller for the personal data described here. Our director is Angela Aku Etoh Atuwo.

For any privacy question or data request, contact Buknearby@angeltouchgltd.info. We respond to requests within one month.

2. What we collect

• Identity and contact data: your name, email address, telephone number and, for business accounts, your trading address.
• Account data: sign-in method, password hash (never the password itself), profile picture and app role.
• Business owner ID: the account identifier linking a listing to its owner, used to manage access and payouts.
• Booking data: the business booked, date, time, party size, notes, status and cancellation history.
• Business listing data: name, description, address, city, country, coordinates, contact details, opening hours and images.
• Payment data: transaction amount, currency, payment status, Stripe customer and subscription identifiers. Card numbers never reach our servers — they are entered directly with Stripe.
• Location data: approximate coordinates, only when you tap “Use my location”, used to sort listings by distance and not stored on your record.
• Communications: messages sent through the platform and reviews you publish.
• Technical data: IP address, device and browser type, and cookie values described in our Cookie Policy.

3. Why we collect it, and our lawful basis

• Contract: creating your account, taking bookings, processing payment, and providing business subscriptions.
• Legitimate interests: securing the platform, preventing fraud and abuse, moderating reviews, and improving search relevance.
• Consent: analytics and marketing cookies, and marketing emails. You can withdraw consent at any time in Account settings or the cookie banner.
• Legal obligation: retaining tax, accounting and transaction records.

4. Where your data is stored

Data is held in the encrypted databases and file storage of our application platform, and in Stripe for payment records. Servers and backups are operated in the UK, the EEA and the United States, with access limited to the services and personnel that need it.

5. How we protect it

All traffic is encrypted in transit with TLS. Data is encrypted at rest by our hosting and payment providers. Access to records is restricted by role-based permissions, so customers see only their own bookings and messages, business owners see only their own listings and bookings, and platform administration is limited to authorised administrators. Administrative changes to pricing and business records are logged with the administrator's identity, time and IP address.

6. Payments and Stripe

We use Stripe as our payment processor. Your payment data is processed securely by Stripe and we have a Data Processing Agreement with them.

Payments are processed by Stripe. Stripe acts as our processor under a Data Processing Agreement incorporating the UK International Data Transfer Addendum and Standard Contractual Clauses. Stripe receives the information needed to process a payment — name, email, amount, currency and payment method — and handles card data under PCI DSS. Stripe's own privacy policy explains its processing.

7. Who we share data with

• The business you book with receives your name, contact details and booking details so it can deliver the service.
• Stripe, for payments and subscriptions.
• Our hosting, email and file-storage providers, purely to operate the platform.
• Authorities, where the law requires disclosure.

We never sell your personal data, and we do not use it for automated decisions that have legal effect on you.

8. How long we keep it

Account and listing data is kept while your account is open. Booking and payment records are kept for six years to meet UK tax and accounting rules. Messages and reviews remain until deleted or removed. Search history is kept for 24 months. When data is no longer needed, we delete or anonymise it.

9. Your rights

You have the right to access your data, correct it, erase it, restrict or object to its processing, and receive it in a portable format. You can download a copy or delete your account and data yourself in Account settings → Privacy & My Data, or by emailing Buknearby@angeltouchgltd.info.

If you believe we have handled your data unlawfully you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to resolve it with you first.

10. Children

BukNearby is for adults. We do not knowingly collect data from anyone under 18.

11. Changes to this policy

We may update this policy to reflect changes in the service or the law. Material changes are announced in the app before they take effect, and the date at the top always shows the current version.