Privacy Notice

ETSHERE is the data controller for the personal data described in this notice. If you have questions about your data, contact us through the app's support channels or at the email address on your account.

Who controls what

ETSHERE is the controller for account, subscription and service-operation data. When a business owner or staff member enters information about their own customers (names, bookings, notes), that business remains the controller of its customers' data and ETSHERE processes it on the business's instructions to provide the service.

Personal data we collect

• Account data: name, email address, sign-in credentials, business name and role (owner or staff).
• Booking data: service, staff member, appointment times and any details a business or its customer enters about a booking, including contact details a customer leaves when booking.
• Business content: service names, descriptions, prices, weekly booking hours, cancellation messages and share codes.
• Usage and device data: app interactions, error reports, device and browser identifiers, IP address.
• Customer input to AI suggestions: the free-text description a customer types when asking for a service suggestion (processed as described in the Terms and not stored as training data).

Why we use it (purposes and legal bases)

• Providing the service: creating and running accounts, showing calendars, handling bookings and availability. Legal basis: performance of our contract with the account holder; for booking customers, our legitimate interest in delivering the booking the business offered.
• Subscriptions and billing: managing the subscription through our payment provider. Legal basis: contract.
• Security and fraud prevention: protecting accounts and the service from abuse. Legal basis: legitimate interests.
• Product improvement and support: fixing errors, understanding how features are used, answering support messages. Legal basis: legitimate interests.
• AI service suggestions: generating a suggestion from a customer's description. Legal basis: legitimate interests; the customer can simply skip the feature.

Who we share data with

• Service providers (subprocessors): hosting, database, email and analytics providers that help us run the service.
• Paddle.com: our Merchant of Record, which processes orders, subscriptions, payments, tax compliance and invoicing for the business subscription.
• AI provider: the model provider behind the service-suggestion feature, which receives the customer's description and the business's own service descriptions to generate a suggestion.
• Professional advisers: legal and accounting advisers where needed.
• Authorities: where we are required by law.

International transfers

Data may be processed outside the UK/EEA. When it is, we rely on European Commission approved safeguards, such as the EU Standard Contractual Clauses, or on adequacy decisions for the country concerned.

How long we keep data

We keep account and booking data for as long as the related subscription is active or the data is needed to provide the service, plus the period needed for legal obligations such as accounting. When data is no longer needed, we delete it or anonymise it.

Your rights

Under the GDPR and similar laws you have the right to access, rectify and erase your personal data, restrict or object to its processing, withdraw consent, and receive a portable copy of it. You also have the right to complain to your national supervisory authority (in Sweden: Integritetsskyddsmyndigheten). We answer rights requests within one month.

Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and least-privilege access to production data.

Cookies

ETSHERE uses only essential storage: we keep your chosen interface language and your saved booking connection in your browser's local storage so the app works the way you left it. We do not use advertising or third-party analytics cookies. You can clear this data at any time in your browser settings.