Privacy Policy
This Privacy Policy describes how Full Chair Ltd (company no. 17249022), trading as Full Chair ("Full Chair", "we", "us", "our"), collects, uses, and shares information about you when you use our services at https://www.fullchair.co.uk (the "Service").
Data Controller:
Full Chair Ltd · Flat 2, 32 London Lane, Hackney, London, E8 3FU
hello@fullchair.co.uk
1. Who this policy applies to
This policy applies to studio owners, artists, and clients whose data is entered into Full Chair, and visitors to https://www.fullchair.co.uk.
Full Chair is a B2B SaaS platform. If you are a client of a studio that uses Full Chair, your data is managed by that studio. Full Chair acts as a data processor for client data; the studio is the data controller.
2. Information we collect
Account data: name, email address, hashed password.
Studio and artist profile data: studio name, URL slug, profile information, settings, role.
Client data (entered by studio users): client names, email addresses, phone numbers, notes, enquiry history, consultation information.
Appointment and booking data: dates, times, session type, duration, deposit status.
Payment data: deposit amounts and payment status. Card details are held exclusively by Stripe — Full Chair does not store raw card data.
Usage and technical data: IP address, browser type, login activity, error logs (collected via Vercel and Sentry).
Google Calendar data (optional): If you choose to connect your Google account to enable Google Calendar sync, we access your Google Calendar to create, update, and delete appointment events on your behalf. We do not access any other Google data. Google Calendar data is used solely to keep your Full Chair appointments in sync with your Google Calendar and for no other purpose.
3. How we use your information
- Provide, operate, and improve the Service
- Create and manage user accounts
- Send transactional emails (booking confirmations, notifications)
- Process payments and manage subscriptions
- Monitor for errors and performance issues
- Comply with legal obligations
- Detect and prevent fraud or misuse
- Sync your appointments to Google Calendar (only when you have connected your Google account, and only for that purpose)
4. Legal bases for processing (UK GDPR)
| Purpose | Legal basis |
|---|---|
| Providing the Service, managing accounts, processing payments | Contract performance (Art. 6(1)(b)) |
| Error monitoring, security, fraud prevention, product improvement | Legitimate interests (Art. 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Marketing communications (opt-in only) | Consent (Art. 6(1)(a)) |
5. Sharing your information
We do not sell your personal data. We share data with the following sub-processors:
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase, Inc. | Database hosting and authentication | Ireland (EU) |
| Vercel, Inc. | Application hosting | United States |
| Resend, Inc. | Transactional email delivery | United States |
| Stripe, Inc. | Payment processing | United States |
| Anthropic, PBC | AI-assisted features | United States |
| Sentry (Functional Software) | Error monitoring | United States |
| Google LLC | Google Calendar sync (only when connected by the user) | United States |
6. Google user data
Full Chair's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect your Google account:
- We request access to your Google Calendar solely to create, update, and delete appointment events that originate in Full Chair.
- We do not read, store, or use any Google Calendar data beyond what is necessary to perform the sync.
- We do not use your Google Calendar data to serve you advertisements.
- We do not share your Google Calendar data with third parties except as necessary to perform the sync, and only with your authorisation.
- We do not use your Google user data for any purpose other than the calendar sync feature you explicitly enabled.
You can disconnect your Google account at any time in Full Chair settings. On disconnection, we remove your Google OAuth tokens. Any events previously written to your Google Calendar remain there — you can delete them manually in Google Calendar.
Retention: Google OAuth tokens are held only for as long as your account is active and Google Calendar sync is enabled. They are deleted immediately on disconnection or account termination.
7. International transfers
Our primary database is hosted in Ireland (EU). For transfers to the United States, we rely on UK International Data Transfer Agreements (IDTAs) and/or Standard Contractual Clauses. Copies are available on request at hello@fullchair.co.uk.
8. Cookies
Full Chair uses cookies and similar technologies. We will not set non-essential cookies without your consent. You can update your preferences via the consent banner on our website.
9. Data retention
| Data type | Retention period |
|---|---|
| Account data | Duration of active subscription + 12 months after termination |
| Client and appointment data | Duration of active subscription + 30 days after termination |
| Payment records | 6 years (legal and tax obligation) |
| Error and system logs | 90 days |
10. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. To exercise any right, contact hello@fullchair.co.uk. We will respond within one month.
You may also lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk · 0303 123 1113.
11. Security
We use encrypted data storage and transmission (TLS/HTTPS), authentication controls, row-level security policies, and error monitoring. If you believe your data has been compromised, contact hello@fullchair.co.uk immediately.
12. Changes to this policy
We may update this policy from time to time. We will update the "Last updated" date and notify you of material changes by email where required.
13. Contact us
Full Chair Ltd
hello@fullchair.co.uk
Flat 2, 32 London Lane, Hackney, London, E8 3FU
Company No. 17249022