Privacy Policy
Last updated: 15 July 2026
This policy explains what personal data The Slot Plug collects, why, and the rights you have over it. We collect as little as we can to run the service. Read it alongside our Terms of Service.
1. Who we are
The Slot Plug is the data controller for the personal data described here. For any privacy question or to exercise your rights, contact us at privacy@theslotplug.com.
2. What we collect
- Account data: your email address, and an optional display name. We use passwordless sign-in, so we do not store a password.
- Watches and preferences: the stylists you choose to watch and your alert filters, so we know when to notify you.
- Notification records: which alerts we sent you and when, for delivery, support, and to avoid sending duplicates.
- Billing data: if you subscribe to Premium, our payment processor (Stripe) handles your card details; we keep only a customer/subscription reference and status — never your full card number.
- Product analytics: privacy-preserving usage events (for example, that a search happened or a watch was started). These record counts and identifiers, not the free text you type.
3. What we deliberately do not collect
- your customers’ or your booking and payment details from stylist booking pages — we read only public availability;
- data from any private or logged-in area of a booking provider — we never access account-only areas;
- special-category data, and no more personal data than we need to send you alerts.
4. Why we use it, and our lawful bases
Under the UK GDPR and EU GDPR we rely on:
- Contract — to create your account, run your watches, and send the availability alerts you asked for.
- Legitimate interests — to keep the service secure, prevent abuse, and understand aggregate usage so we can improve it; balanced against your rights.
- Legal obligation — to keep limited billing records and respond to lawful requests.
- Consent — only if we ever send optional marketing email; you can withdraw it at any time.
5. Email and your alert preferences
Availability alerts and account emails are service messages you have asked us to send. Every alert email includes an unsubscribe link, and you can pause or stop alerts at any time from your alert settings. In line with PECR and equivalent rules, we do not send marketing email without your consent, and honour unsubscribe requests promptly.
6. Who we share it with
We do not sell your personal data. We share it only with service providers who process it on our behalf under contract — for example hosting and database (Supabase), payments (Stripe), and our email delivery provider. They may only use it to provide their service to us.
7. International transfers
Some providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as UK/EU adequacy decisions or Standard Contractual Clauses so your data keeps an equivalent level of protection.
8. How long we keep it
We keep account data while your account is open, and delete or anonymise it after closure except where we must keep limited records (for example billing) for legal reasons. Operational and analytics records are pruned or aggregated once they are no longer needed.
9. Your rights
Subject to the applicable data-protection law, you can ask us to:
- access a copy of your personal data;
- correct data that is wrong or incomplete;
- delete your data (“right to be forgotten”) where it is no longer needed;
- restrict or object to certain processing, including profiling;
- receive your data in a portable format;
- withdraw consent where we relied on it.
To exercise any of these, email privacy@theslotplug.com. We respond within one month. You can also delete your account, which removes your watches and alert preferences.
10. Cookies
We use only strictly necessary cookies — for example to keep you signed in. We do not use advertising or non-essential tracking cookies, so we do not show a cookie-consent banner. If we ever add non-essential tracking, we will ask for your consent first and update this policy.
11. Children
The Slot Plug is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
12. Changes and complaints
We may update this policy; we will change the “last updated” date above and, for material changes, tell you. If you are unhappy with how we handle your data you can complain to your local supervisory authority — in the UK, the Information Commissioner’s Office (ICO) at ico.org.uk — though we’d appreciate the chance to help first at privacy@theslotplug.com.