Privacy Policy

Data controller

The data controller responsible for your personal data is:

Personal data we collect

We collect the following categories of personal data depending on how you interact with Jollee:

Data you provide

• Account information — Name, email address, phone number, password
• Profile information — Profile photo, biography, qualifications, treatment specialisms (practitioners)
• Contact information — Postal address, business address
• Payment information — Billing address; card details are processed by Stripe and never stored on our servers
• Communications — Messages sent through the platform, support enquiries, reviews
• Verification documents — Professional qualifications, insurance certificates, identity documents (practitioners)

Data collected automatically

• Usage data — Pages visited, search queries, features used, timestamps
• Device data — Browser type, operating system, screen resolution, IP address
• Location data — Approximate location based on IP address or postcode (used for search results)
• Cookies — See our Cookie Policy for details

How and why we use your data

Under the UK GDPR, we must have a lawful basis for processing your personal data. The table below sets out our purposes and the legal basis we rely on for each.

Third-party processors

We share personal data with the following third parties who process data on our behalf:

Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) or adequacy decisions.

Data retention

We retain your personal data only for as long as necessary:

• Account data — Retained while your account is active. Deleted within 30 days of account closure, unless required for legal purposes.
• Booking records — Retained for 6 years after the booking date for tax and legal compliance.
• Payment records — Retained for 6 years per HMRC requirements.
• Verification documents — Retained while the practitioner account is active, deleted within 30 days of account closure.
• Analytics data — Anonymised and aggregated; individual session data retained for up to 12 months.
• Marketing preferences — Retained until you unsubscribe or close your account.

Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access — Request a copy of the personal data we hold about you
• Right to rectification — Ask us to correct inaccurate or incomplete data
• Right to erasure — Ask us to delete your personal data ("right to be forgotten")
• Right to restrict processing — Ask us to limit how we use your data
• Right to data portability — Request your data in a structured, machine-readable format
• Right to object — Object to processing based on legitimate interests or direct marketing
• Right to withdraw consent — Where we rely on consent, you can withdraw it at any time

To exercise any of these rights, email us at [email protected] with the subject line “Data Rights Request”. We will respond within 30 days.

Children's privacy

Jollee is not intended for children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have collected data from a child, please contact us and we will delete it promptly.

Changes to this policy

We may update this privacy policy from time to time. Material changes will be communicated via email or a notice on the platform. We encourage you to review this page periodically.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Contact us

For any questions about this privacy policy or how we handle your data, contact us at [email protected].