Servdo
Privacy policy
Last updated 14 October 2026
This policy explains what personal data Servdo collects, why, who we share it with, how long we keep it, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who we are
Servdo ("we", "us") provides booking software for businesses that go to their clients. For anything about your data, email support@servdo.com or use our contact page.
Two roles, depending on who you are
If you run a business on Servdo, or visit this website, we are the controller of your data. This policy covers you in full.
If you book with a business that uses Servdo, that business is the controller of your booking details and decides how they are used. We process them on its behalf, only to provide the service, under our terms with the business. Ask the business first about your data. We will help it answer you, and if you contact us we will pass your request on.
What we collect
Your account: your name, email address and password (stored only as a secure hash), passkeys and 2-step sign-in settings, and whether you signed in with Google.
Your business: business name, phone, base address and its location on the map, the area you travel to, services and prices, opening hours and time off, website content and photos, social links, and the terms you agreed to.
Billing: your subscription, invoices and payment history. Card details are entered on Stripe and never reach our servers.
Maternity benefit, if you apply: Stripe checks your photo ID and tells us the result. We ask Stripe to remove the ID images once the check is done. Your child's birth certificate is kept in private storage only until it is checked, then deleted. We keep the outcome and the dates the benefit depends on.
Support and messages: what you write to us and any files you attach.
Security and technical data: sign-in records with IP address and browser details, and error reports. Error reports carry record IDs, not the content of your pages or bookings.
Website analytics: page views on this website, measured without cookies. Business booking pages and business websites are not tracked.
Booking details we process for businesses: a client's name, email, phone, address and its location, the booking, notes the business adds, payment status and refunds, messages, and reminder emails.
Why we use it, and our lawful basis
| Purpose | Data | Lawful basis |
|---|---|---|
| Running your Servdo account, booking page, website and payments | Account, business and booking details | Contract |
| Taking your subscription payment and keeping tax and accounting records | Billing details and payment history | Contract and legal obligation |
| Keeping accounts secure, stopping spam and fraud, and fixing errors | Sign-in records, IP address, browser details, error reports | Legitimate interests |
| Checking eligibility for the maternity benefit | Photo ID check result, birth certificate | Contract, and your explicit consent for the ID check |
| Answering support cases and messages | What you send us, including attachments | Contract or legitimate interests |
| Understanding how this website is used | Cookieless page views | Legitimate interests |
| Emails that help you set up and get more from Servdo | Name, email, setup progress | Legitimate interests. You can opt out at any time |
| Remembering a referral and running reCAPTCHA | Optional cookies | Consent |
Who we share it with
We use these service providers to run Servdo. They only process data on our instructions. We do not sell personal data, and we do not use it for advertising.
| Provider | What for | Where |
|---|---|---|
| Vercel | Hosts the app and websites | US, with a worldwide network |
| Supabase | Database and file storage | EU |
| Stripe | Card payments, subscriptions, payouts and the maternity ID check | UK, EU and US |
| Our email provider | Sends account, booking and reminder emails | UK, EU or US |
| PostHog | Cookieless website analytics and error reports | EU |
| Sign in with Google, and reCAPTCHA on forms once you allow it | US | |
| OpenStreetMap, OSRM and postcodes.io | Maps, drive times and finding a postcode's location | UK and EU |
We may also share data when the law requires it, to protect people from harm or fraud, or with a buyer if Servdo is ever sold, who would have to keep to this policy.
International transfers
Some providers process data outside the UK. When they do, we rely on UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU–US Data Privacy Framework.
How long we keep it
While your subscription runs, we keep your data so the service works. When it ends, your business data, website, clients and bookings stay available for 6 months in case you come back. After that they are deleted. We keep your business name and contact details until you ask us to delete them.
We keep subscription invoices and payment records for six years, as UK tax law requires. Sign-in codes and links expire within minutes or hours and are then removed. Stripe keeps its own payment records under its own privacy policy.
Your rights
You can ask to see your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable format. Where we rely on consent, you can withdraw it at any time. Business owners can download their clients, bookings and payments from Business → Exports.
To use a right, email support@servdo.com. We will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we would like the chance to put it right first.
Cookies
Essential cookies keep you signed in and protect forms. Optional cookies only run if you allow them. Our cookie policy lists each one.
Security
Data is encrypted in transit and at rest. Each business's data is kept separate from every other business. Passwords are hashed, staff access is protected with passkeys, and you can turn on 2-step sign-in for your account.
Children
Servdo is for businesses and is not meant for anyone under 18.
Changes to this policy
If we change how we use your data, we will update this page and its date. For a significant change, we will email business owners first.