Privacy Policy

ValetHQ is operated by Harrison Froggatt (“we”, “us”, “our”). We provide software-as-a-service for UK mobile valeting businesses. Our registered contact email is thetotalsafetygroup@gmail.com.

This policy explains how we collect, use and protect personal data when you use ValetHQ — whether as a business subscriber or as a customer making a booking through a ValetHQ-powered booking page.

Business subscribers

• Email address (used for account creation and sign-in)
• Business name, phone number, and service details you enter
• Billing information processed by Stripe — we do not store card details
• Usage data (pages visited, features used) for product improvement

End customers (booking via a ValetHQ booking page)

• Name, phone number, and email address (where provided)
• Vehicle details entered during the booking process
• Appointment date and service selected
• Payment confirmation data via Stripe

We use personal data only for the purposes it was collected:

• To provide and operate the ValetHQ service
• To send booking confirmations and appointment reminders
• To process subscription payments via Stripe
• To notify business owners of new bookings
• To respond to support queries

We do not sell, rent or share your personal data with third parties for marketing purposes.

We process personal data under the following legal bases (UK GDPR Article 6):

• Contract — processing necessary to provide the service you have subscribed to or booked
• Legitimate interests — sending booking reminders and operational notifications
• Legal obligation — retaining certain records as required by UK law

We use the following sub-processors to operate our service:

• Stripe (stripe.com) — payment processing. Subject to Stripe's own privacy policy.
• Resend (resend.com) — transactional email delivery
• Turso (turso.tech) — database hosting
• Vercel (vercel.com) — application hosting

All processors are contractually bound to process data only on our instructions and in accordance with applicable data protection law.

We retain personal data for as long as your account is active. If you cancel your subscription:

• Your business and booking data is retained for 30 days, after which it is deleted
• End customer booking records are retained for the same period then deleted
• Billing records may be retained for up to 7 years to comply with UK financial regulations

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict certain processing
• Data portability — receive your data in a structured, machine-readable format
• Lodge a complaint with the ICO (ico.org.uk) if you believe we have mishandled your data

To exercise any of these rights, email us at thetotalsafetygroup@gmail.com. We will respond within 30 days.

ValetHQ uses session cookies strictly necessary for authentication. We do not use tracking, advertising or analytics cookies. No cookie consent banner is required as we only use essential cookies.

We implement industry-standard security measures including TLS encryption in transit, encrypted database storage, and strict access controls. Payment data is handled entirely by Stripe and never stored on our servers.

We may update this policy from time to time. Where changes are material, we will notify subscribers by email at least 14 days before the change takes effect. Continued use of the service constitutes acceptance of the updated policy.

For any privacy-related queries, contact us at thetotalsafetygroup@gmail.com.