Privacy Policy

Last updated: 15 July 2026

This Privacy Policy explains how MediaField Global Ltd (“we”, “us”, or “our”), trading as TidyLike, collects, uses, and protects your personal data when you use our website at tidylike.co.uk and the TidyLike mobile applications (together, the “Service”).

1. Who we are

MediaField Global Ltd (company number 15836513) is the data controller for personal data processed through the TidyLike Service.

Registered office: Unit A, 82 James Carter Road, Mildenhall, England, IP28 7DE.

Contact: proper@tidylike.co.uk · Support

2. Who this policy covers

• Shop owners — businesses that subscribe to TidyLike.
• Team members — staff invited by a shop to manage a diary.
• Customers with a TidyLike account — people who sign in to book or manage bookings across shops.
• Guest bookers — people who book via a shop’s public page without creating a TidyLike account.

3. What we collect

Depending on how you use TidyLike, we may collect:

• Account information — name, email address, phone number, and authentication details (for example one-time codes and magic-link sign-in) when you register or sign in as a shop owner, team member, or customer.
• Business profile — shop name, booking link (slug), category, address, contact details, opening hours, services, pricing, photos, and branding.
• Team data — team member names, work emails (for login invites), phone numbers where provided, working hours, services they offer, and invite status.
• Booking data — customer name, email, phone, appointment time, service, assigned team member, notes, and booking status. Guest bookers provide these details without an account.
• Device and technical data — device type, operating system, app version, IP address / security logs as needed to run the Service, and (in the app) push notification tokens.
• Payment metadata — subscription status and billing identifiers for shop owners. Card details are processed by Stripe and are not stored by us. Where a shop takes deposits, payment is processed to the shop’s connected Stripe account.
• Usage data — how you interact with the app and website (for example pages or screens used) to operate and improve the Service.
• Support correspondence — emails and messages you send to us.

4. How we use your data

We use personal data to:

• Provide and operate the TidyLike booking platform.
• Create and manage shop, staff, and customer accounts.
• Process bookings and send confirmations, reminders, and related notifications (email and, where enabled, push).
• Send team login invites and help shops manage diaries.
• Manage business subscriptions and billing.
• Provide customer support.
• Improve, secure, and maintain our services.
• Comply with legal obligations.

5. Lawful bases

Under UK GDPR, we rely on the following lawful bases:

• Contract — to provide the Service you have signed up for or booked through.
• Legitimate interests — to improve our Service, prevent fraud and abuse, and keep the platform secure.
• Consent — where required (for example certain push notifications on your device).
• Legal obligation — where we must retain or disclose data to comply with law.

Shops using TidyLike are typically independent controllers of their own customer booking data for the appointments they deliver. We process that data on their behalf as a processor to provide the platform, and as a controller for our own account, billing, and security purposes as described above.

6. Who we share data with

We use trusted third-party providers to run TidyLike. These may include:

• Supabase — database, authentication, file storage, edge functions, and related infrastructure.
• Stripe — payment processing for business subscriptions and, where a shop enables it, customer deposits paid to the shop’s connected Stripe account. See Stripe’s Privacy Policy.
• Resend (and related email infrastructure) — transactional email such as sign-in links, team invites, and booking-related messages.
• Expo / Apple / Google push services — to deliver notifications in the mobile apps when you have granted permission.
• Hosting and security providers — for example to serve the website securely.

We do not sell your personal data. We only share data where necessary to operate the Service or where required by law.

Shop owners and (where permitted) team members can see booking and customer contact details for their shop so they can deliver appointments.

7. International transfers

Some of our service providers may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections recognised under UK data protection law.

8. How long we keep data

We retain personal data for as long as your account is active and as needed to provide the Service. Booking records may be retained for a shop’s operational history while their account remains open. When you delete your account, or when a shop asks us to remove data we hold for them, we will delete or anonymise personal data within a reasonable period, except where we must retain it for legal, tax, or regulatory purposes.

9. Security

We take appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and secure hosting. No method of transmission over the internet is completely secure, but we work to protect your information.

10. Your rights

Under UK data protection law, you have the right to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for certain processing.

To exercise any of these rights, contact us at proper@tidylike.co.uk. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

If your request relates only to a booking with a particular shop, we may direct you to that shop where they are the appropriate controller for that appointment data.

11. Cookies and local storage

Our website uses minimal cookies and local storage necessary for basic functionality and to keep you signed in. We do not use third-party advertising cookies on tidylike.co.uk.

12. Children

TidyLike is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised “last updated” date.

14. Contact

Questions about this Privacy Policy or how we handle your data: proper@tidylike.co.uk or see tidylike.co.uk/support.