Privacy Policy · Snippa

This Privacy Policy explains how Snippa ("we", "us", "our") handles personal data. Snippa is a trading name of Techficient Solutions Ltd, a company registered in England and Wales (company number 16289934) with its registered office at 1 West End Manors, The Copse, Guisborough, United Kingdom, TS14 6BF. This page is maintained by Techficient Solutions Ltd and is not an independent certification.

Data controller

Techficient Solutions Ltd is the data controller for personal data about Shop owners and staff accounts, and for our billing and website visitor data. For personal data about a Shop's customers (name, phone, email, appointment history, notes, reviews), the Shop is the data controller and Techficient Solutions Ltd acts as a data processor on the Shop's instructions.

You can contact us at privacy@snippa.co.uk or by post at the registered office above. UK residents also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

What we collect

Account data: name, email, hashed password, role, MFA status.
Shop data: tenant name, working hours, services, staff, branding.
Customer records (entered by the Shop): name, phone, email, appointment history, notes.
Payment metadata: Stripe customer / subscription IDs and payment intent IDs. Card numbers are handled by Stripe and never touch our servers.
Operational logs: audit log entries, error reports (via Sentry), server request logs.

Why we use it

To operate the booking, messaging, reminders, and payments features you rely on.
To bill Shop owners for their per-seat subscription.
To send transactional email/SMS (booking confirmations, reminders, review requests).
To secure the Service — detect abuse, enforce role-based access, and investigate incidents.

Subprocessors

We rely on the following subprocessors:

Supabase — database, authentication, storage.
Stripe — subscription billing and customer deposit payments.
SMS provider (e.g. Twilio) — outbound text messages, when enabled.
Email provider — transactional and auth email delivery.
Sentry — application error monitoring.
Cloud hosting provider — application runtime.

Retention

We retain Shop and customer data for as long as the Shop's subscription is active. After cancellation we retain data for up to 60 days so it can be restored or exported, then delete it. Audit logs and billing records may be kept longer where required by law.

Your rights

Depending on your jurisdiction (e.g. UK/EU GDPR, California CCPA) you have rights to access, correct, export, or delete your personal data, and to object to certain processing. Shop owners can export their tenant's data directly from Settings. For any other request, email privacy@snippa.co.uk. Customers of a Shop should contact the Shop directly first; we will assist the Shop in fulfilling the request.

International transfers

Some subprocessors process data outside your country. We rely on the safeguards those providers publish (Standard Contractual Clauses where applicable).

Security

Data is encrypted in transit (HTTPS) and at rest by our hosting and database providers. Access is scoped by row-level security so one tenant cannot read another's data. Passwords are hashed; two-factor authentication is available for Shop owners. No system is perfectly secure — please report suspected vulnerabilities to security@snippa.co.uk.

Cookies and local storage

Snippa only uses cookies and browser storage that are strictly necessary to run the Service. We do not currently set analytics, advertising, or third-party tracking cookies, and no consent is required for the items listed below (they are exempt under PECR / UK GDPR as strictly necessary). If we introduce optional analytics or marketing cookies in the future, the cookie banner will ask for your consent before they are set and this list will be updated.

Name	Type	Purpose	Duration	Provider
`sb-<project>-auth-token`	localStorage	Keeps you signed in and refreshes your session token.	Until sign-out or token expiry	Snippa (auth provider)
`snippa.cookieConsent.v1`	localStorage	Remembers your choice on the cookie banner so we don't show it again.	Until you clear browser storage	Snippa
`sidebar_state`	Cookie (first-party)	Remembers whether the app sidebar is expanded or collapsed.	7 days	Snippa

Some pages load third-party services that may set their own cookies on their own domains, only when you use those features:

Stripe — set on Stripe-hosted checkout, billing portal, and card entry forms for fraud prevention and payment processing. See Stripe's cookie policy.

You can clear cookies and local storage at any time from your browser settings. Doing so will sign you out and reset the cookie banner and sidebar preference.

Changes

We may update this policy. Material changes will be announced in-app or by email at least 14 days before taking effect.

Contact

Questions? Email privacy@snippa.co.uk.