Privacy policy
Last updated 4 November 2026
Business Desk is run by DruOps Garage Consulting Ltd ("we", "us"). This policy explains what personal information we hold, why, and your rights. We are registered with the Information Commissioner's Office (ICO).
Two kinds of information
Your account. When you sign up we hold your email address, your sign-in details and the details of your business. For this information we are the data controller.
The records you keep in Business Desk. Your customers' names and contact details, jobs, payments and so on belong to your business. Your business is the data controller for them and we process them only on your behalf, to run the service for you, under our data processing agreement. We don't use them for anything else, and we never sell them or use them for marketing.
If you book with a business online
Some businesses that use Business Desk have an online booking page. When you book there, you give your name, email address, phone number and any note you add. That information goes to the business you're booking with: they are the data controller and we process it for them, to put the booking in their diary, send you a confirmation and, if they've switched them on, reminders about the booking or anything left to pay. If you've booked with them before, your booking is matched to your existing record using your email address or phone number.
We don't use your details for anything else, and we never sell them or use them for our own marketing. Pay links in those emails go to the business's own payment provider; we never see or handle the payment. To change or cancel a booking, or to stop reminders, contact the business. For anything about how your information is handled, ask the business first; you can also contact us at businessdesksupport@druops.net.
To stop abuse of booking pages we briefly keep a count of requests from each internet address, which is deleted within two days.
What we use your information for
- To provide the service: sign-in, storing your records, sharing them with the team members you invite.
- To take payment for your subscription. Card payments are handled by Stripe; we never see or store your card number.
- To contact you about your account, such as a team invite, your trial ending, a failed payment, a warning before deletion or important changes to the service.
- To keep the service secure and working, and to meet our legal obligations such as keeping accounting records.
Our legal basis is the contract between us (providing the service you signed up for), our legitimate interest in running a secure service, and legal obligation where it applies.
Who processes it for us
- Supabase (database and sign-in), hosted in London.
- Vercel (hosting the website), running in London.
- Stripe (subscription payments).
- An email provider (Resend), to send sign-in links, account emails, and the confirmations, reminders, invoices and quotes that businesses send to their customers.
- If a business switches on text messages, an SMS provider to send them.
Where any of these transfer data outside the UK, they do so under UK-approved safeguards such as the International Data Transfer Addendum.
Cookies
We only use the cookies needed to keep you signed in and remember which business you're looking at. We don't use advertising or tracking cookies.
How long we keep it
We keep your records while your account is open. If your free trial ends without a subscription, or you cancel, your business and its records are deleted 30 days later, after warning emails. You can delete your login or your business yourself at any time (see deleting your account); backup copies are removed within 30 days. You can download a full backup at any time from Settings. Billing records are kept for as long as the law requires (normally six years).
Your rights
You can ask to see the personal information we hold about you, have it corrected or deleted, restrict or object to how we use it, and receive it in a portable format (the backup download does this for your records). If one of your customers asks about their information, we'll help you respond.
To use any of these rights, or with any question, contact us at businessdesksupport@druops.net. If you're unhappy with how we've handled your information, you can complain to the ICO at ico.org.uk.
Changes
If we change this policy in a way that matters, we'll tell you by email or in the app before the change takes effect.