Privacy Policy

1. Who we are

OnPrez provides online presence pages, business management tools, and appointment booking services for service professionals. OnPrez is operated from the United Kingdom. You can contact us about privacy at privacy@onprez.com.

OnPrez is responsible for personal information used to operate accounts, secure the platform, deliver platform communications, and improve the service. A professional or business using OnPrez may separately be responsible for how it uses its own customer, inquiry, and appointment records. Customers should also review the relevant professional's privacy information where available.

2. Information we collect

• Account and security information: email address, password hash, verification status, multi-factor authentication records, login history, session and trusted-device details, IP address, browser, and device information.
• Business and profile information: business name, handle, category, biography, contact details, location, opening hours, services, prices, branding, social links, images, page content, FAQs, and team membership.
• Customer and booking information: name, email, phone number, booking time, selected service, notes, preferences, status history, payment status, and booking source. Professionals may add further customer records where needed for their service.
• Inquiries, reviews, and communications: messages, replies, ratings, support requests, and transactional email records.
• Technical and usage information: requested pages, timestamps, referrers, diagnostic events, performance data, and optional analytics where consent is required and has been given.

We usually receive information directly from you, from a professional when they manage their customer records, automatically from your browser or device, and from service providers that support delivery, security, and communications.

3. Why we use information

Where we rely on legitimate interests, those interests include operating a secure and useful platform, preventing fraud, supporting users, and understanding service performance without overriding your rights and freedoms.

4. Who receives information

We may share information only as reasonably necessary with:

• the relevant professional, business owner, and authorised team members when a customer books, sends an inquiry, or otherwise interacts with that business;
• infrastructure and database providers, including Vercel and Neon, where used to host and operate OnPrez;
• communications providers such as Resend, media providers such as Cloudinary, and error monitoring providers such as Sentry, where those services are enabled;
• professional advisers, regulators, courts, and law-enforcement authorities;
• a buyer, investor, or successor if OnPrez is reorganised, financed, sold, or transferred, subject to appropriate confidentiality and data-protection safeguards.

We do not sell personal information to advertisers.

5. International transfers

Some suppliers may process information outside the United Kingdom. Where required, we use recognised safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to approved standard contractual clauses, together with appropriate security assessments.

6. How long we keep information

We keep information only for as long as it is reasonably needed for the purposes described above, including service delivery, security, dispute resolution, and legal obligations. The period depends on the record and its context.

• Account information is normally kept while the account remains active.
• Profile content and media may be retained for up to 90 days after account cancellation to support recovery and orderly deletion.
• Appointment and associated customer records may be retained for up to two years after the relevant interaction, unless the professional needs a different lawful period.
• Routine security and diagnostic logs are generally kept for up to 30 days, but relevant records may be preserved longer for an active investigation or legal claim.
• Optional analytics records are generally kept for no longer than 12 months.
• Backups and provider logs may remain for a limited additional period before being overwritten or securely deleted.

A professional may need to retain customer records for its own legal, regulatory, insurance, or accounting obligations. Requests concerning those business-controlled records may need to be directed to that professional.

7. Security

We use safeguards designed to protect information, including access controls, encrypted connections, password hashing, secure authentication cookies, rate limiting, monitoring, and restricted administrative access. No internet service can guarantee absolute security, so please use a unique password and protect your account credentials.

9. Complaints

Please contact us first so we can try to resolve your concern. You may also complain to the UK Information Commissioner's Office. Information about making a complaint is available at ico.org.uk.

10. Children

OnPrez accounts are intended for people aged 18 or over. A professional must not use the platform to collect children's information unless they have a lawful basis, appropriate notices, and any required parent or guardian involvement.

11. Cookies and similar storage

We use essential cookies and browser storage and, only with permission where required, optional analytics. Read our Cookie Policy or reopen Cookie settings from the footer.

12. Changes to this notice

We may update this notice as OnPrez develops or legal requirements change. We will publish the revised version here, update the date above, and provide a more prominent notice when a change materially affects how information is used.