Privacy Policy

1. Personal Information

When you create an account or use LaceLink, we may collect the following personal information:

• Account Information: Name, email address, password (encrypted), phone number, and account type (Seamstress, Boutique, or Client)
• Profile Information: Business name, address, Google Place listing (if you pin one), contact preferences, logo, Meet photo, skills, portfolio, and other professional details you choose to publish
• Client Data: Names, contact information, measurements, appointment details, and notes that you choose to store in the app

2. Financial Information

• Payment records you keep in the app: Amounts, dates, methods (including bank and cash), invoices, and marks as paid that you enter yourself
• Card payments via Stripe: When a studio connects Stripe and a client pays an invoice by card, Stripe processes the payment. We receive confirmation of payment (for example status, amount, and Stripe identifiers) so we can update the invoice. We do not store full card numbers on LaceLink servers
• Booking fees: If a studio sets an optional SmartBook booking fee, we store the amount and when it is due

3. Photos and Media

• Images: Photos of wedding dresses, alterations, work examples, logos, Meet photos, portfolio, invoices you export, and chat images you send
• Camera: Used when you allow it, to scan connection QR codes and photograph dresses, fittings, and portfolio work
• Digital Signatures: Signatures captured for terms and conditions agreements

4. Location Data

• Geolocation: When you enable location services, we collect your approximate location to help clients find seamstresses nearby
• Address and Google Place: Business addresses you type, and the Google Place you search for and pin (place name, formatted address, map coordinates, Google Maps link, star rating, and review snippets Google returns)
• You can disable location services at any time through your device settings.

5. Device and Usage Information

• Device Information: Device type, operating system version, unique device identifiers
• Usage Data: App features used, actions performed, error logs, and crash reports
• Push notifications: A device token so we can send booking and message alerts through Apple Push Notification service when you allow notifications
• Analytics Events: Anonymous usage analytics including screens viewed, features used, and error events. This data is stored securely on our own servers (not shared with third parties) and automatically deleted after 90 days.
• Region and Locale Preferences: Your selected region (e.g. United Kingdom or United States), which determines your preferred currency (GBP or USD), measurement units (centimetres or inches), and date format. These preferences are stored locally on your device and in your account settings.

6. Communications

• Notifications: Email content for appointment reminders, booking confirmations, cancellations, thank-you messages, and other communications sent through the app. You can turn automated emails off in Client Emails. LaceLink does not send SMS; the app may open your device Messages app if you choose to text a client yourself.
• Support Requests: Any correspondence with our support team

7. Calendar (Optional)

• If you grant permission, we may add fittings and appointments to your device calendar
• This permission is optional and can be revoked in your device settings. LaceLink does not read your device contacts

8. Marketplace and Browsing Data

• Search History: Search queries and filters you use to find seamstresses (stored locally on your device)
• Browsing Activity: Public seamstress profiles you view when browsing as a guest
• Favourites/Bookmarks: Seamstresses you save to your favourites list (requires account)

9. Communications and Messaging

• In-App Messages: Messages exchanged between seamstresses and clients through the app's messaging feature
• Connection Codes: QR codes and connection codes used to link clients with their seamstresses
• In-App Notifications: Notification preferences and notification history for messages and appointment changes

10. Reviews and Ratings

• Client Reviews: Reviews and ratings you submit for seamstresses, including review text and star ratings
• Portfolio/Work Examples: Photos and descriptions of work examples that seamstresses upload to showcase their services

11. Booking and Connections

• SmartBook requests: Wedding date, fitting window, appointment type, chosen slot, name and contact details you provide (including as a guest), and whether the studio approved, declined, or suggested another time
• Share links and QR codes: Your public SmartBook URL and connection codes used to link a bride to a studio
• Connection status: Client–seamstress connections, including dates and status
• Appointment change requests: Requests to modify or reschedule appointments

12. Home Screen widget

• If you add the LaceLink widget, a small amount of today's studio information is stored in an App Group on your iPhone so the widget can update. That copy stays on the device

Service Delivery

• Provide and maintain the LaceLink application
• Enable account creation and authentication
• Store and sync your data across devices
• Process and display your business information
• Enable marketplace browsing for finding seamstresses
• Facilitate client-seamstress connections via QR codes and connection codes
• Enable in-app messaging between seamstresses and clients
• Display public seamstress profiles, portfolios, and reviews
• Process booking requests and appointment management
• Run SmartBook: shareable booking pages, QR codes, live slots, and guest requests
• Show a Google Map and Google reviews on a public profile when a studio has pinned a Google Place
• Update invoices when Stripe confirms a card payment, refund, or dispute

Communications

• Send appointment reminders and booking emails at your request. Automated emails can be turned off in Client Emails.
• Deliver invoices and communications to your clients
• Send you technical notices, updates, and security alerts
• Respond to your support requests and inquiries
• Enable real-time in-app messaging between seamstresses and clients
• Send in-app notifications for new messages and appointment changes

Improvements and Analytics

• Analyse app usage to improve features and user experience
• Monitor and resolve technical issues
• Develop new features and functionality

Security and Legal

• Protect against unauthorised access and security threats
• Maintain activity logs for security purposes
• Comply with legal obligations and enforce our terms

Cloud Storage

Your data is securely stored using Supabase, a leading cloud database platform. All data is:

• Encrypted in transit using SSL/TLS protocols
• Encrypted at rest using industry-standard encryption
• Backed up regularly to prevent data loss
• Stored in secure data centres with physical and digital safeguards

Security Measures

• Authentication: Secure password-based authentication with encrypted password storage
• Access Controls: Row-level security ensures you can only access your own data
• Monitoring: Continuous monitoring for security threats and unauthorised access
• Updates: Regular security updates and patches

Limited Sharing

We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who help us operate the Platform, including Supabase (hosting and authentication), Resend (email), Stripe (card payments when enabled), and Google (Places, Maps, and review snippets). These providers process data only as needed to provide their service and have their own privacy policies.
• Communication Services: With our email provider (Resend) when you send or we send notifications to clients. Replies go to the professional's address where one is set.
• Business Transfers: If LaceLink is involved in a merger, acquisition, or sale of assets, your information may be transferred (you will be notified)
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• With Your Consent: Any other sharing will only occur with your explicit consent

Marketplace and Public Profiles

Public seamstress and boutique profiles, including business information, portfolios, work examples, reviews, a Google Map, and Google review snippets (when a Google Place is pinned), are visible to all users (including guest browsers) in the marketplace and on SmartBook pages. Seamstresses and boutiques can control much of their profile visibility through settings.

Data Access and Control

• Access: You can view and access all your data within the app at any time
• Correction: You can edit and update your information directly in the app
• Deletion: You can delete individual records (clients, appointments, etc.) within the app
• Account Deletion: You can delete your account directly within the app. Navigate to Profile tab → Account Settings → scroll to "DANGER ZONE" → tap "Delete My Account". You can also contact us at support@lacelink.co.uk for assistance with account deletion.
• Guest Browsing: You can browse the marketplace without creating an account. No personal data is collected when browsing as a guest beyond basic usage statistics.

Data Portability

Seamstresses can export client, business, and accounting data from Dashboard → Export Data in the app. You can also contact us at support@lacelink.co.uk to request a copy of your data in a commonly used format.

GDPR (European Users)

If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, contact us at support@lacelink.co.uk.

CCPA (California Users)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale of your information. We do not sell personal information. To exercise these rights, contact us at support@lacelink.co.uk.

Supabase (Cloud Database and Authentication)

• Used for data storage, authentication, and cloud sync
• Privacy Policy: supabase.com/privacy

Resend (Email Delivery)

• Used to send appointment reminders, booking emails, and other transactional messages
• Privacy Policy: resend.com/legal/privacy-policy

Stripe (Card Payments)

• Used when a studio connects Stripe and a client pays an invoice by card. Stripe is the payment processor. LaceLink does not store full card numbers
• Privacy Policy: stripe.com/privacy

Google (Places, Maps, and Reviews)

• Used when a studio searches Google Places to pin their listing, when we show an embedded map, when someone taps through for directions in Google Maps, and when we display Google review snippets on a public profile
• Privacy Policy: policies.google.com/privacy

Apple (Push Notifications and App Store)

• Used to deliver push notifications on iPhone and iPad, and to distribute the app through the App Store
• Privacy Policy: apple.com/legal/privacy