Privacy & data protection

What is Service Schedule?

Service Schedule is a customer management tool for independent tradespeople — gate engineers, piano tuners, boiler technicians and similar service professionals. It helps you keep track of your clients, schedule services, and create invoices.

Who controls the data?

You do. Under UK GDPR, you (the tradesperson) are the data controller for your clients' personal information. You decide what data to store and why. Service Schedule acts as a data processor — we store and process data on your behalf, following your instructions.

What data is stored?

The data you choose to enter about your clients, which typically includes:

• Name, phone number, and email address
• Property address (for service visits and route planning)
• Service history and dates
• Invoices and payment records
• Notes and photos related to the work

We also store your account details (name, email, password hash) to provide the service.

Why is this data processed?

Your client data is processed under legitimate interest (UK GDPR Article 6(1)(f)). You have an existing business relationship with your clients, and storing their contact details to manage appointments, send invoices, and track service history is necessary to deliver the service they have engaged you for.

Where is data stored?

All data is stored on Cloudflare's global network using their D1 database and R2 storage services. Cloudflare is certified under ISO 27001 and SOC 2 Type II. Data is encrypted at rest and in transit. Cloudflare operates data centres in the UK and EU.

Who can see my clients' data?

Only you. Every database query is scoped to your account. Other users of Service Schedule cannot see, search, or access your client data. There is no shared database — your data is isolated at the application level.

Can my clients request their data be deleted?

Yes. Under the right to erasure (UK GDPR Article 17), your clients can ask you to delete their personal data. You can do this directly in the app by deleting the customer record — this permanently removes all their data, including service history, invoices, photos, and notes.

Account deletion

If you want to close your account, contact us and we will permanently delete your account and all associated data. This is irreversible.

Cookies and tracking

We use a single session cookie to keep you logged in. We do not use analytics cookies, advertising trackers, or any third-party tracking scripts. We do not sell or share your data with anyone.

Contact

If you have questions about how your data is handled, email lukanikcevic@gmail.com.