Privacy Policy
Last updated: 13 August 2026
Avvy is a booking calendar for freelancers. This policy explains what personal data we collect, why we collect it, and what rights you have. We've tried to write it in plain English rather than legalese.
Who we are
Avvy is operated as a sole trader business based in North Devon, United Kingdom. For the purposes of UK data protection law, we are the data controller for the personal data described in this policy.
You can contact us about anything in this policy at hello@getavvy.co.uk.
The data we collect
If you create an Avvy account (freelancers)
- Your name, email address and password (stored encrypted — we never see it)
- Optional profile details you choose to add: job title, short bio, portfolio link, profile photo
- Your calendar settings and availability, including days you mark as unavailable
- Booking records: dates, statuses, and any job notes attached to them
If a freelancer adds you as a client
Freelancers using Avvy add the clients they work with so they can share a booking link. That means we may hold your name, your organisation's name and your email address even though you never created an account, along with any bookings you make through the link.
Are you a client who'd rather not be on Avvy? Ask the freelancer who sent you the link to remove you, or email us directly at hello@getavvy.co.uk and we'll remove your details. You don't need an account to make that request.
If you sign up for updates
Your email address, and the fact that you consented to receive updates. Nothing else.
Automatically
Basic technical data needed to run and secure the service: IP address, browser type, and aggregated page analytics. Our analytics are cookieless and do not track you across other websites.
Why we use it, and our lawful basis
| What for | Lawful basis |
|---|---|
| Running your account and calendar | Performance of a contract |
| Sending booking notifications — pencil approvals, challenges, confirmations | Performance of a contract |
| Holding client contact details so freelancers can share links | Legitimate interests — enabling a freelancer to manage their own client relationships |
| Keeping the service secure and preventing abuse | Legitimate interests |
| Product update emails | Consent — withdraw any time |
What we never do
- We don't sell your data, ever.
- We don't show your bookings to anyone you haven't shared them with. Clients only see their own holds; everyone else's appear anonymously as unavailable time.
- We don't share your rates, contracts or payment information, because Avvy doesn't handle them.
- We don't use your data to train advertising profiles or sell access to freelancers.
Who we share it with
We use a small number of trusted service providers to run Avvy. They process data on our instructions only:
| Provider | What they do |
|---|---|
| Supabase | Database and account authentication |
| Vercel | Application hosting |
| Netlify | Website hosting |
| Resend | Sending transactional and update emails |
| Formspark | Handling the newsletter signup form |
Some of these providers operate outside the UK. Where data is transferred internationally, it is protected by appropriate safeguards such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses.
We may also disclose data where we're legally required to.
How long we keep it
- Account data — while your account is active, and for up to 30 days after you delete it, after which it is permanently removed from our systems.
- Booking records — kept while relevant to your calendar, and deleted with your account.
- Client contact details — until the freelancer removes that client, or the client asks us to remove them.
- Update subscriptions — until you unsubscribe.
- Backups — deleted data may persist in encrypted backups for a short period before being overwritten.
Your rights
Under UK GDPR you have the right to access your data, correct it, have it deleted, restrict or object to how we use it, receive a portable copy, and withdraw consent at any time. To exercise any of these, email hello@getavvy.co.uk — we'll respond within one month.
If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
Avvy uses only strictly necessary cookies — the ones that keep you signed in and keep the service secure. We don't use advertising or cross-site tracking cookies, which is why you won't see a cookie banner.
Security
Data is encrypted in transit and at rest. Access is restricted, passwords are hashed, and client booking links use unguessable tokens. No system is perfectly secure, but we take reasonable steps to protect your information and will notify you and the ICO where legally required if something goes wrong.
Children
Avvy isn't intended for anyone under 16, and we don't knowingly collect their data.
Changes to this policy
We'll update this page when things change, and update the date at the top. If a change materially affects you, we'll email you about it.