Privacy & the details we look after
This development preview
Groomstride is in private alpha. The public sample workspace and sample request form use demonstration records held in your browser. Please use made-up information. Live customer intake is disabled until the pilot operator, contact details, privacy notices and account setup have been confirmed.
Who is responsible
For a live grooming business, the groomer normally decides why customer and pet records are used and acts as the controller of those records. The software operator processes those records on the groomer’s documented instructions. The operator is separately responsible for its own business account, support and billing records. The final operator identity, service address and privacy contact will be published before live onboarding.
The information the workspace uses
The pilot is designed to hold owner and nominated alternative contact details, service addresses, relevant parking and utility information, dog details, warnings, triggers, grooming preferences, private reference photos, appointment history, accepted service permissions, custom form responses, signer-provided names and signatures, completed PDFs, signing times, limited network evidence, groom records and payment references. Alternative contacts are not automatically enrolled for messages or given account access. Groomstride does not collect card numbers or security codes in its manual payment workflow. Optional marketing permissions must remain separate from service terms.
How records are used and protected
Records support appointment planning, safe grooming administration, service communication, payment reconciliation and the groomer’s record keeping. Staff sign-in, business-scoped database access and private file storage protect access. The sample workspace is separate from the authenticated database. An online request does not automatically create an owner account or a confirmed appointment.
Providers and international processing
The development database is hosted by Supabase in London. Vercel is the selected application host; application delivery, support or subprocessors may involve processing outside the UK. The final subprocessor list, processing locations, provider contracts and transfer safeguards must be confirmed before live personal information is imported. Email, SMS, private public signing and live driving estimates are not enabled in this preview.
Postcodes and driving estimates
Staff postcode suggestions and the postcode planner check postcodes through Postcodes.io. Once a licensed Ideal Postcodes account is connected, a full postcode is sent to it to retrieve house-level addresses; customer names, phone numbers and dog details are not included. When the Google Maps connection is enabled, service addresses and planned departure times are sent to Google Maps to estimate road journeys. Customer names, contact details and dog care notes are not sent in those routing requests. Sample mode uses fixed example journeys and does not call either provider. Route responses are used for the current check, rather than saved as a location history. The staff-accepted scheduling allowance is part of the appointment record. Driving estimates require a connection and may change with traffic, road conditions and address accuracy.
Retention and your choices
For demonstration data, use Reset sample or clear browser storage. An intentionally saved offline day expires after 24 hours and can be cleared in Settings. Groom-note drafts are held in the current browser session. For live records, the groomer’s documented retention schedule and legal obligations determine what is kept. Contact the groomer for access, correction, deletion, restriction or other data rights; the software operator assists under its processing agreement. You may complain to the Information Commissioner’s Office at ico.org.uk.
Before a live pilot
The final live notice must state the actual operator and controller contacts, purposes, lawful bases, recipients, transfer safeguards, retention periods and rights. This preview notice is not a completed live privacy notice and does not authorise a customer data migration.