Privacy

BYBhub Ltd is the data controller for the personal information described here. We are registered in England and Wales (company number 17429997), registered office Flat 4, Netherby House, Union Road, London SW8 2SA, United Kingdom.

For anything in this notice, including a request to see or delete your data, write to info.bookyourbooth@gmail.com.

• Account — your name, email address and, if you give one, a phone number. If you sign in with Google or Apple we receive your name, email address and profile picture from them, and nothing else. We never see your password for those accounts.
• Profile — whatever you choose to put on it: a headline, a biography, the roles and genres you work in, a general location such as a town or a part of a city, links to your social accounts, a photograph, credits and audio or video of your work. We ask for a general area, never a street address.
• Bookings — what you booked, when, for how long, what you paid and any note you sent with it.
• Messages — conversations with hosts and other members, and any files you attach to them.
• Payments — the amount, currency, status and Stripe reference for each transaction. We never receive or store your card number. It goes to Stripe directly from your browser.
• Country and currency — we make a guess at these on your first visit, so prices show in a currency that means something to you. You can correct it, and the correction is what we keep.
• Technical records — our hosting and database providers keep ordinary server logs, which include IP addresses, for security and troubleshooting.

We do not run advertising trackers, we do not sell personal data, and we do not build advertising profiles.

Hosts give additional information so they can be paid: identity and bank details for Stripe’s verification checks, and the address of the space being listed.

Identity and bank details go to Stripe and are held by Stripe. We receive only whether the check passed and an account reference.

A space’s full address is kept private and released to a guest only once their booking is confirmed. The map shows an approximate position worked out from the area and city, not the door.

Under UK GDPR we rely on four lawful bases:

• Contract — to create your account, take bookings, move money, pass messages between you and a host, and provide support. Without this information we cannot run a booking.
• Legitimate interests — to keep the marketplace safe and working: preventing fraud and abuse, investigating reports and disputes, fixing faults, and understanding in aggregate how the site is used. We balance this against your interests, and you can object (clause 8).
• Consent — for marketing email, if we ever send any, and for anything optional we ask you to opt into. You can withdraw consent at any time.
• Legal obligation — to keep records of transactions for tax and accounting.

Your profile in the creatives directory is public by design. Your name, photograph, headline, biography, roles, genres, general area, social links, credits and uploaded work can be seen by anyone, signed in or not. That is the point of the directory.

Your email address and phone number are not public and are not shown on your profile.

When you book, the host sees your name and the details of the booking. Messages are visible to the people in the conversation. Reviews are published with your name.

We use a small number of suppliers, each of which handles data only on our instructions:

• Supabase — the database, sign-in and file storage behind the site. Our project is hosted in the London region.
• Stripe — payments, payouts and the identity checks hosts complete. Stripe is a controller in its own right for some of this; see Stripe’s own privacy policy.
• Hostinger — hosting for the site itself, from a data centre in the United Kingdom.
• Resend — transactional email, such as booking confirmations, requests and cancellations, sent through Resend’s European (Ireland) region.
• Anthropic — when you message one of the studios BYBhub books for, the conversation, your name and your bookings with that studio are sent to Anthropic’s Claude to draft our reply. A person at BYBhub reads every draft before anything is sent to you. Anthropic does not use it to train its models.
• Google and Apple — only if you choose to sign in with them.
• OpenFreeMap — map tiles. Loading a map sends your IP address to them, as loading any image from another site does. No account data is sent.

We will also disclose information where the law requires it, or to establish or defend a legal claim.

Some of these suppliers are outside the UK. Where data is transferred, it is protected by the UK’s adequacy regulations or by the International Data Transfer Addendum to the EU standard contractual clauses.

• Bookings and payment records — six years after the end of the tax year they fall in, which is what UK tax law requires.
• Account and profile — until you delete your account, then removed within 30 days apart from anything held under the line above.
• Messages and attachments — while either person’s account is open, since a conversation belongs to both of you.
• Technical logs — only as long as our hosting and database suppliers keep them for security and troubleshooting. We do not use them for anything else.

You have the right to:

• Be told what we hold about you, and get a copy of it.
• Have anything inaccurate corrected.
• Have your data deleted, where we have no obligation to keep it.
• Restrict how we use it while a question about it is settled.
• Receive what you gave us in a portable format, or have it sent elsewhere.
• Object to processing we do on the basis of legitimate interests.
• Withdraw consent at any time, where consent is what we relied on.
• Not be subject to a decision made purely by automated means. We do not make any.

Email info.bookyourbooth@gmail.com and we will answer within one month. There is no charge.

If you are not satisfied with how we have handled it, you can complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113. We would rather you came to us first.

BYBhub sets cookies to keep you signed in and to keep sign-in secure. That is all they are for. They are strictly necessary for a site with accounts, so we do not ask for consent to them and we do not show a cookie banner.

We run no advertising or analytics cookies. Stripe sets its own cookies on its checkout, which Stripe uses to detect fraud.

BYBhub is for people aged 18 and over. We do not knowingly collect information about children. If you believe a child has created an account, tell us and we will remove it.

Data is encrypted in transit. Access to the database is restricted by row-level rules so that an account can only read what it is entitled to, and contact details and payment identifiers are withheld from the public interface at the database level rather than merely hidden by the page.

No system is perfect. If a breach affects your rights we will tell you and the ICO as the law requires.

We will update this notice as BYBhub changes. The date at the top shows when it last changed, and we will tell account holders about anything significant.

See also our terms.