Privacy Notice

Allan Liani, trading as Holostasis, is responsible for the personal information described here. Contact hello@holostasis.co.uk with privacy questions or requests.

Information we use and why

• Enquiries and bookings. We use your name, email, optional phone number, appointment details, service address or meeting point, and the notes you choose to share to respond to enquiries, arrange services, confirm changes and keep a record of the work. We use this information to take steps at your request before a contract and to perform an agreed service. An email address and a meeting point are needed when arranging a booking. If you provide a phone number, we use it to contact you about that appointment. Please leave sensitive information out of appointment notes.
• Optional customer accounts. We use your name, email and linked appointments to provide the account you request. We retain these details so you can return to My Bookings, see your history and arrange future services.
• Sign-in and security. You can create an account and log in with your email and password. We do not send an email to finish signup. If you want us to link an existing guest booking to your account, we first verify you control the email address. Supabase Auth stores a password hash. Holostasis stores a hash of each setup-link and session token. A password setup or reset link expires after seven days and works once. A session lasts up to 30 days. The account cookie keeps you signed in. The booking calendar uses temporary browser storage to restore an unfinished hold on refresh and a pseudonymous network identifier to limit misuse. Our legitimate interests are keeping accounts private and the site and calendar working securely.
• Reviews. We use your display name, rating, review text and any photos you attach to moderate and publish feedback with your permission. Published reviews and photos are visible to visitors. You can withdraw permission by contacting us.
• Business records. We keep records needed to meet legal obligations, including applicable tax and accounting requirements. We may retain records where necessary for our legitimate interest in resolving disputes.

Who can access the information

Holostasis uses Vercel to host the public site, OpenAI Sites and its Cloudflare-backed infrastructure to operate the private service, Supabase in its London region to store and process accounts, credentials and bookings, and email providers to handle correspondence. We send the service postcode to Postcodes.io to estimate travel between appointments. These providers process information needed to run those services. We may disclose information if required by law. If a provider processes data outside the UK, the applicable transfer safeguards depend on the provider and processing location. Contact us for details.

How long we keep it

We keep your account information while the account is open so you can use it again. You can ask us to close the account. We retain booking and enquiry records for as long as needed to arrange or deliver a service, handle a dispute, or meet applicable record-keeping duties. Expired sign-in credentials stop working. We keep published reviews until you withdraw permission or we remove them.

Your choices and rights

You can ask to access or correct your information, close your account, or request deletion, restriction or portability where applicable. You can object to processing based on legitimate interests and withdraw consent for a published review. We may need to verify your identity. Email hello@holostasis.co.uk to make a request. You can also complain to the Information Commissioner’s Office.