Privacy Policy

Last updated: 6 November 2026

This Privacy Policy explains how Pimplum collects, uses, shares and protects personal data when you use the Pimplum mobile app, the website at www.pimplum.com, and related services, emails and notifications (together, the "Platform").

1. Who we are

Pimplum is run by Pimplum Ltd, a company registered in England and Wales, whose registered office is at 124 City Road, London, EC1V 2NX, United Kingdom ("Pimplum", "we", "us").

For personal data processed under this policy, Pimplum is the data controller. You can contact us about privacy at privacy@pimplum.com or by post at the address above.

Because we offer the Platform to people in the European Union, we have appointed a representative in the EU under Article 27 of the GDPR: [EU REPRESENTATIVE: name and address]. You can contact them instead of us about anything in this policy.

When a business, not Pimplum, decides how your data is used

Businesses on Pimplum (for example a salon, groomer or cleaner) receive your details when you book or message them. They use those details to provide their service and to run their business, and for that use they are an independent controller. Their own privacy notice applies.

When a business uses Pimplum's tools to keep its own customer records, such as bookings it enters manually or notes about a visit, we process that data on the business's behalf as its processor.

2. Data we collect

Data you give us

• Account details: name, email address, phone number, profile photo and preferred language. If you sign in with Apple or Google, we receive the name and email that provider shares. With Apple's "Hide My Email", we receive a private relay address instead of your real email.
• Address details: addresses you save for home-visit services.
• Bookings: the business, service, team member, date and time, duration, price shown, notes you add and the booking status (for example confirmed, cancelled, completed or no-show).
• Guest bookings: if you book without an account, the name, email and phone number you enter. If you later create an account with the same verified email, those bookings are linked to it.
• Messages: what you send to businesses or to Pimplum support through in-app chat.
• Reviews and ratings: your rating, review text and selected badges. Reviews are public and shown with your name and profile photo.
• Searches and assistant questions: what you type or ask in search or the AI assistant, and your search history.
• Voice search: if you use voice search, a short audio recording of your request. It is transcribed into text and is not stored after transcription (see section 4).
• Likes and recently viewed: businesses you like or have opened.
• Support requests and reports: what you send to us, including reports about listings, reviews or other users.

Additional data for businesses

• Business name, description, category, address, opening hours, services and prices, photos, website and social links, and contact details.
• Team members' names, email addresses, photos and working schedules. A business adding team members must have the right to share their data with us.
• Customer records the business enters or manages on the Platform (see section 1).
• Billing: the business's plan, number of team members, invoices, purchases (such as promotion or offers) and company details for invoices. Payments are taken by Paddle (see section 5). We never see full card numbers.

Data collected automatically

• Location: with your permission, your device location, used to show nearby businesses and distances. You can turn this off in your device settings. Without it, we use the location you search for, or none.
• Device and usage data: device type, operating system, app version, language, IP address, crash and error logs, and how you use the Platform (for example screens opened and features used).
• Push notification tokens: used to send notifications to your device.
• Cookies and similar technologies on the website (see section 9).

Data from other sources

• Public business information: some listings are created from publicly available sources, including Google Places. These can include the business name, address, contact details, opening hours, photos, ratings and reviews written by members of the public on those services. Businesses can claim, correct or ask to remove their listing.
• Sign-in providers: Apple and Google, as described above.
• Businesses: when a business enters a booking for you, it gives us the details it holds about you (for example your name, email or phone).

3. How we use data and our legal bases

Where we rely on legitimate interests, we have weighed them against your rights. You can object at any time (see section 8).

We do not make decisions about you that are based only on automated processing and that have legal or similarly significant effects.

4. AI features

Pimplum uses AI services, currently from OpenAI, to:

• turn voice searches into text;
• understand search requests and suggest matching businesses and services;
• answer questions about a business in the assistant;
• write short summaries of businesses from their public information and reviews.

When you use these features, we send the text or audio needed for the request to our AI provider. Under our agreement with them, they process it for us and may not use it to train their models. We do not keep your voice recording once it has been transcribed.

AI-generated content can be wrong or incomplete. Always check important details, such as prices, availability or suitability for allergies or health conditions, with the business directly.

5. Who we share data with

• Businesses you book or message: your name, contact details, booking details, messages and notes, so they can provide the service. A business's team members who handle your booking can see the same information.
• Other users: your reviews, with your name and profile photo, are public. Business listings, including team member names and photos the business adds, are public.
• Service providers (processors) that run the Platform for us: - Clerk: accounts and sign-in. - OpenAI: AI features and voice transcription. - Google: maps, places data and Google sign-in. - Apple: Apple sign-in and push notifications. - Expo: delivery of push notifications. - Amazon Web Services: photo and file storage. - Brevo: email delivery. - Our hosting provider: servers and databases.

They may use data only to provide their service to us and must keep it secure.

• Paddle (Paddle.com Market Ltd): when a business buys a plan, promotion or offer, Paddle sells it to them as our reseller and merchant of record. Paddle takes the payment, charges VAT and issues the invoice, and is responsible for the payment details it collects under its own privacy notice.
• Authorities and others where the law requires it, or to protect the rights, safety or property of our users, businesses or Pimplum.
• A buyer or successor if Pimplum is reorganised, merged or sold, subject to this policy.

We do not sell your personal data.

6. International transfers

Pimplum is based in the United Kingdom. If you are in the EU or EEA, your data comes to us under the European Commission's adequacy decision for the United Kingdom.

Some providers (for example Clerk, OpenAI, Google, Apple and Expo) are based in, or process data in, other countries, including the United States. In those cases we rely on one of the following safeguards:

• an adequacy decision or regulations, such as the EU–US Data Privacy Framework and its UK Extension, for certified companies;
• the European Commission's Standard Contractual Clauses or the UK International Data Transfer Agreement or Addendum, with additional measures where needed.

You can ask us for a copy of the relevant safeguards.

7. How long we keep data

8. Your rights

Under the UK GDPR, and the GDPR if you are in the EU or EEA, you have the right to:

• Access your data and get a copy.
• Rectify inaccurate data. Most details can be edited in the app under Profile → Personal details.
• Erase your data. You can delete your account in the app under Profile → Login & security → Delete account.
• Restrict our use of your data.
• Port your data to another service in a common, machine-readable format.
• Object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent where we rely on it, without affecting earlier processing.

To use your rights, email privacy@pimplum.com. We will reply within one month, and may need to verify your identity first.

You also have the right to complain to a supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ICO, www.ico.org.uk). If you are in the EU or EEA, you can complain to the authority where you live or work. In Lithuania this is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, www.vdai.lrv.lt).

9. Device permissions, cookies and similar technologies

The app asks for these permissions only when a feature needs them. You can change them at any time in your device settings:

• Location: nearby results and distances.
• Notifications: booking updates, reminders and messages.
• Microphone: voice search.
• Camera and photos: uploading profile, business or review photos.

On the website we use:

• Strictly necessary cookies and local storage: to keep you signed in, remember your language and location settings, and keep the site secure.
• Analytics and marketing cookies: only with your consent, which you can withdraw at any time through the cookie settings.

10. Security

We use appropriate technical and organisational measures to protect personal data, including:

• encryption in transit;
• access controls;
• authentication through a dedicated identity provider;
• limiting staff access to what they need.

No system is completely secure. If a personal data breach is likely to put you at high risk, we will tell you without undue delay.

11. Children

The Platform is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact privacy@pimplum.com and we will delete it.

12. Changes to this policy

We may update this policy. For important changes, we will tell you in the app or by email before they take effect, and we will always show the date of the latest version at the top.

13. Contact

Pimplum Ltd, 124 City Road, London, EC1V 2NX, United Kingdom
Email: privacy@pimplum.com