Privacy Policy

Dyal Solutions Ltd ("we", "us", "our") provides booking management software for businesses, including the dyal.co.uk website and dashboard, public booking pages, the Dyal iOS app, and an optional AI phone assistant. This policy explains what personal data we collect, why, who we share it with, and your rights.

For business account holders and their team members, we are the data controller. For the customers of those businesses (people who make bookings), the business is the controller and we process that data on the business's behalf as a data processor.

Business and team accounts:

• Name, email address, phone number and password (passwords are stored hashed by our authentication provider).
• Business details such as business name, address, opening hours, services, prices, staff and resources.
• Subscription and billing records (handled by Stripe).

Booking customers (on behalf of businesses):

• Name, email address, phone number, booking date, time, party size, notes and booking status.
• Payment status for paid bookings (card details are entered directly with Stripe).

AI phone assistant (only if a business enables it):

• Caller phone number, call audio, transcripts, call summaries and outcomes (date, time, duration).

Dyal iOS app:

• A push notification token, so we can alert you about new and changed bookings. You can turn notifications off in iOS Settings at any time.
• App preferences stored on your device (such as theme and list/calendar view).
• Face ID / Touch ID: if you turn on App Lock, iOS checks your face or fingerprint on your device. We never receive or store biometric data.
• The app does not track you across other companies' apps or websites and contains no advertising.

Website: basic, aggregated usage statistics collected without cookies or personal identifiers.

• To provide the service: accounts, bookings, calendars, reminders, payments and notifications (contract).
• To send booking confirmations, reminders and service emails (contract / legitimate interests).
• To answer calls and take bookings through the AI phone assistant when a business enables it (contract, on the business's instructions).
• To generate booking insights in the dashboard. These are calculated on our own servers from your booking data; no data is sent to a third-party AI for this feature (contract).
• To keep the service secure and prevent fraud and abuse (legitimate interests).
• To meet legal, tax and accounting obligations (legal obligation).
• To send marketing emails only where you have opted in; you can unsubscribe at any time (consent).

We do not sell personal data, and we do not use personal data for advertising or to train AI models.

We share personal data only with the service providers below, who process it on our instructions under written agreements that require them to protect it to at least the standard described in this policy.

Third-party AI: when a business turns on the AI phone assistant, call audio and transcripts are sent to OpenAI and ElevenLabs solely to understand the caller and respond in real time. Businesses choose whether to enable this feature and are responsible for informing their callers.

We may also disclose information where required by law, or to a buyer or successor if our business is sold or reorganised (in which case this policy will continue to apply).

Some providers process data outside the UK and EEA, mainly in the United States. Where they do, we rely on the UK International Data Transfer Addendum / EU Standard Contractual Clauses or the UK Extension to the EU-US Data Privacy Framework to protect your data.

• Account and booking data: for as long as your account is active.
• After you request account deletion: your account is scheduled for deletion and permanently deleted after 30 days. You can cancel during that period by signing in and choosing Reactivate.
• Call recordings and transcripts: up to 12 months, unless the business deletes them sooner.
• Billing and tax records: 6 years, as required by UK law.
• Encrypted backups: overwritten on a rolling basis within 30 days.

You can delete your account at any time:

• In the Dyal iOS app: Settings → Delete Account.
• On the web: Settings → Delete Account.
• By emailing contact@dyal.co.uk from the email address on your account.

If you are a booking customer and want your data removed, contact the business you booked with, or email us and we will pass your request on.

Under UK and EU data protection law you can ask to access, correct, delete, restrict or object to the processing of your personal data, to receive it in a portable format, and to withdraw consent at any time. Email contact@dyal.co.uk and we will respond within one month.

You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

We use strictly necessary browser storage to keep you signed in and remember your preferences. Our website analytics do not use cookies. We do not use advertising or cross-site tracking cookies.

Dyal accounts are for businesses and people aged 18 or over. We do not knowingly collect personal data from children for account purposes.

Data is encrypted in transit (HTTPS/TLS) and at rest by our hosting providers. Access is restricted by role and by database row-level security, and staff access is limited to what is needed to support you.

We will post any changes on this page and update the date above. If changes are significant, we will also notify account holders by email or in the app.

Dyal Solutions Ltd, Northern Ireland, United Kingdom
Email: contact@dyal.co.uk