Privacy Policy

The data controller is WIN WITH LEE LIMITED (Company No. 17432233), registered office: Basingstoke RG24 9TH. Contact for privacy matters: contactlee@winwithlee.co.uk.

When a business uses book-me.com to answer its customers' calls, that business is the controller of its customers' data and we act as its processor; this policy also covers data we hold as controller (account holders, website visitors).

• Account data: your name, email address, sign-in credentials and business details (business name, industry, phone numbers, service area, opening hours).
• Call and chat data: caller names, phone numbers, postcodes, job descriptions, call recordings/transcripts, chat transcripts, summaries, quotes given and sentiment indicators.
• Booking data: customer name, phone number, address/postcode, job type, appointment date and time, and price estimates.
• Integration data: if you connect Google Calendar, we store the connection tokens and read/create calendar events on your behalf.
• Technical data: IP address, browser type, pages visited and cookie identifiers (see our Cookie Policy).

• Provide the AI answering, quoting and booking service (contract).
• Send booking confirmations, quote follow-ups and notifications by email (contract / legitimate interests).
• Sync appointments to your connected calendar (consent, given when you connect).
• Operate, secure, debug and improve the service (legitimate interests).
• Meet legal and tax obligations (legal obligation).

Call and chat content is processed by AI models to generate responses, quotes and summaries. We do not use your customers' personal data to train general-purpose models beyond providing the service to the relevant business. Callers interact with an automated assistant, and transcripts are produced automatically.

• Twilio — telephony and SMS delivery (phone numbers and call/message content).
• Google — calendar sync, only where you connect your account.
• Stripe — subscription and Job Access Fee payments (card data is handled by Stripe; we receive payment status only).
• Resend and Lovable email — delivery of transactional and account emails from bookings@winwithlee.co.uk.
• AI model providers (via Lovable AI Gateway, e.g. Google Gemini and OpenAI) — processing call and chat content to generate replies, quotes and summaries.
• Google Maps/Places, postcodes.io and Companies House — location lookups and business verification.
• Hosting & database infrastructure (Lovable Cloud) — secure storage of application data.
• Professional advisers, regulators or law enforcement where legally required.

We never sell personal data.

Some providers process data outside the UK. Where they do, transfers are protected by adequacy regulations or standard contractual clauses / the UK international data transfer agreement.

• Account and business configuration data: kept while your account is active.
• Call logs, transcripts and bookings: kept for up to 24 months after the call, unless you delete them sooner or law requires longer.
• Integration tokens: kept until you disconnect the integration.
• Email delivery logs: kept for up to 12 months.

Data is deleted or anonymised when no longer needed.

Under UK GDPR you have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time (where processing is based on consent). You also have the right to complain to the Information Commissioner's Office (ico.org.uk). To exercise any right, email contactlee@winwithlee.co.uk.

We use encryption in transit, access controls, row-level data isolation between business accounts, and least-privilege access to protect personal data. No system is perfectly secure; if a breach affects your rights we will notify you and the ICO as the law requires.

We may update this policy; the "last updated" date will change and material changes will be notified. Contact: contactlee@winwithlee.co.uk, or write to Basingstoke RG24 9TH.

We collect publicly available business contact details (for example from business websites, Google listings and Companies House) under legitimate interests for business-to-business outreach. You can object at any time using the unsubscribe link in any email or by emailing contactlee@winwithlee.co.uk.

When you post a job, we collect your name, phone number, email address and full address, alongside the job details. With the consent you give on the post-a-job form, these contact details are shared with up to 3 registered trades who pay to access your job. Job teasers shown to trades contain the rough area only, not your personal contact details or full address.

We use these details to introduce you to interested trades and administer the job. Job Access Fee payments are processed by Stripe; we do not store your full payment card details. We keep job data for 12 months after the job closes, then delete it, unless a legal obligation requires us to keep particular records longer. Contact contactlee@winwithlee.co.uk to exercise your data rights.