Privacy Policy

Who we are

Tikland is a booking and business-management platform for local services in the United Kingdom. When you use Tikland, we are the data controller for the information described below, meaning we decide what is collected and why.

You can reach us about anything in this policy at support@tikland.co.uk.

What we collect

We collect different things depending on how you use Tikland. We do not buy personal data from anyone, and we do not build advertising profiles.

• Your account: your email address, the name you choose to display, the language you want to be emailed in, and a record of which version of our terms you accepted and when.
• Bookings you make: your name, phone number, and email address if you give one, along with the service, the time, any notes you add, and (for a service that comes to you) the address you ask us to send them to.
• Businesses you list: the business name, description, address and location, contact details, opening hours, services and prices, staff names, photos you upload, and the languages your staff speak.
• Your customers, if you run a business here: the name and contact details from their bookings, and a summary of their visits, spend and no-shows.
• Reviews and enquiries: your name, your message or rating, and whether the review is attached to a booking we can see.
• Support requests: your name, email address and whatever you tell us.
• Phone verification, where it is switched on: your phone number, and a one-time code that we store only as an unreadable hash.
• Photos you attach to an enquiry: the picture itself, and nothing else. We remove the hidden information a camera writes into a photo, including where it was taken, before we store it.
• Technical information: your IP address and basic request details, which our servers and hosting providers log so we can keep the service working and stop abuse.

Location

Searching near you is optional. If you allow it, your browser gives us your approximate location so we can order results by distance. If you would rather not, type a place name instead. Everything works the same way.

The location you pick is kept in your own browser so you do not have to choose it again. It is not attached to your account, and clearing your browser data removes it.

Why we use it, and our legal basis

Under UK data protection law we need a lawful basis for each thing we do with your information. Ours are:

• To provide what you asked for: creating your account, taking your booking, publishing your listing, passing your enquiry to a business. This is necessary to perform our contract with you.
• To tell you what is happening: booking confirmations, changes, reminders, and an invitation to review a visit. Also part of that contract; these are service messages, not marketing.
• To keep Tikland safe and honest: rate limiting, bot checks, moderating listings and reviews, and an audit log of administrator actions. This is our legitimate interest in running a service people can trust.
• To improve the product: understanding which pages and features get used, from our own records rather than from third-party tracking. Also a legitimate interest, and you can object.
• To send you marketing, if you asked for it. That is consent, it is recorded separately from accepting our terms, and you can withdraw it at any time.
• To meet legal obligations, where the law requires us to keep or produce records.

Who we share it with

When you book, the business you booked gets the details they need to serve you: your name, your contact details, your booking and any notes. That is the point of the booking. They are a separate controller for what they then do with it.

We also use a small number of service providers who process data on our behalf, under contract, and only on our instructions:

• Supabase: our database, sign-in and image storage. Our project is hosted in London (AWS eu-west-2).
• Vercel: hosting and delivery of the website.
• Railway: hosting of our application server.
• Resend: sending our emails.
• Twilio: sending verification texts, where phone verification is switched on.
• Mapbox: turning a street address into map coordinates so a business can be found by distance.
• Cloudflare: the Turnstile check that tells a person apart from a bot when you sign in or sign up.
• Google: only if you choose to sign in with Google, in which case Google tells us your email address and name.
• Sentry: error monitoring. When something breaks, it receives the technical details of the failure: what code failed, on which page, and an anonymous account reference. It is configured not to receive your request, your details or your IP address.

Where your information is held

Our database, sign-in system and uploaded images are held in the United Kingdom. Some of the providers listed above operate outside the UK. Where information leaves the UK, it is protected by the safeguards UK law requires: an adequacy decision, or standard contractual clauses with the UK addendum.

How long we keep it

We keep your account and its bookings for as long as your account is open, because the record of what was booked is the thing both you and the business may need to refer back to.

If you ask us to delete your account, we will delete it and the personal information attached to it, including any photos you sent with an enquiry. Some things survive, and we would rather say so: a business's published listing and the reviews left on it belong to that public record, and we keep anonymised or legally required records where we have to.

You do not have to ask us. Open your account page and use Delete my account: it happens immediately, and the page tells you exactly what will be removed and what will be kept before you confirm.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that is wrong;
• delete it;
• stop or limit what we do with it;
• hand it over in a portable format, or send it to someone else;
• stop sending you marketing, at any time, with no reason needed.

How to exercise them, and how to complain

Two of them you can do yourself, right now, from your account page: Download my data gives you a copy of everything in this policy as a file, and Delete my account closes it for good. For anything else, email support@tikland.co.uk. We will respond within one month, and we will not charge you for it.

If you are not happy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.

Cookies and similar technology

We do not use advertising cookies and we do not use third-party analytics. What we do store is essential to signing you in, remembering your language and keeping bots out. The detail is in our Cookie Policy.

Children

Tikland is not intended for children. You must be 18 or over to create an account, make a booking or list a business. If you believe a child has given us their information, tell us and we will delete it.

Changes to this policy

If we change this policy in a way that matters, we will say so on this page and, where the change is significant, tell you directly. The date at the top is always the date of the current version.