Privacy Policy

The data controller is WIN WITH LEE LIMITED (Company No. 17432233), registered office: 15 Mailing Way, RG24 9TH. Contact for privacy matters: contactlee@winwithlee.co.uk.

When a business uses book-me.com to answer its customers' calls, that business is the controller of its customers' data and we act as its processor; this policy also covers data we hold as controller (account holders, website visitors).

• Account data: your name, email address, sign-in credentials and business details (business name, industry, phone numbers, service area, opening hours).
• Call and chat data: caller names, phone numbers, postcodes, job descriptions, call recordings/transcripts, chat transcripts, summaries, quotes given and sentiment indicators.
• Booking data: customer name, phone number, address/postcode, job type, appointment date and time, and price estimates.
• Integration data: if you connect Google Calendar, we store the connection tokens and read/create calendar events on your behalf.
• Technical data: IP address, browser type, pages visited and cookie identifiers (see our Cookie Policy).

• Provide the AI answering, quoting and booking service (contract).
• Send booking confirmations, quote follow-ups and notifications by email (contract / legitimate interests).
• Sync appointments to your connected calendar (consent, given when you connect).
• Operate, secure, debug and improve the service (legitimate interests).
• Meet legal and tax obligations (legal obligation).

Call and chat content is processed by AI models to generate responses, quotes and summaries. We do not use your customers' personal data to train general-purpose models beyond providing the service to the relevant business. Callers interact with an automated assistant, and transcripts are produced automatically.

• Twilio — telephony and SMS delivery (phone numbers and call/message content).
• Google — calendar sync, only where you connect your account.
• Email provider (Mailgun via Lovable) — delivery of transactional emails from bookings@winwithlee.co.uk.
• Hosting & database infrastructure (Lovable Cloud) — secure storage of application data.
• Professional advisers, regulators or law enforcement where legally required.

We never sell personal data.

Some providers process data outside the UK. Where they do, transfers are protected by adequacy regulations or standard contractual clauses / the UK international data transfer agreement.

• Account and business configuration data: kept while your account is active.
• Call logs, transcripts and bookings: kept for up to [retention period, e.g. 24 months] after the call, unless you delete them sooner or law requires longer.
• Integration tokens: kept until you disconnect the integration.
• Email delivery logs: kept for up to 12 months.

Data is deleted or anonymised when no longer needed.

Under UK GDPR you have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time (where processing is based on consent). You also have the right to complain to the Information Commissioner's Office (ico.org.uk). To exercise any right, email contactlee@winwithlee.co.uk.

We use encryption in transit, access controls, row-level data isolation between business accounts, and least-privilege access to protect personal data. No system is perfectly secure; if a breach affects your rights we will notify you and the ICO as the law requires.

We may update this policy; the "last updated" date will change and material changes will be notified. Contact: contactlee@winwithlee.co.uk, or write to 15 Mailing Way, RG24 9TH.