Privacy notice

Who we are

Cobbtree is operated by COZQ Limited (United Kingdom). For data protection enquiries contact [email protected]. General support: [email protected].

What we process

We process account identity (name, email), authentication data, business and location configuration, booking and appointment metadata, marketplace listing content, Sites page content, billing and subscription records, payment metadata (not raw card numbers), support correspondence, and technical logs needed to run and secure the service.

Card details for salon charges and Cobbtree subscriptions are handled by Stripe. Cobbtree does not store full card numbers or CVCs.

Roles and purposes

Business customers (salons and similar) are controllers for their client records. Cobbtree acts as a processor for salon-held customer data under the business agreement, and as a controller for platform accounts, SaaS billing, security, and product improvement.

Legal bases include contract performance, legitimate interests in running a secure multi-tenant platform, and legal obligations where applicable.

Cookies

We use essential cookies and similar storage for session security, authentication, and remembering cookie-notice acknowledgement. We do not use third-party advertising cookies on the marketing site. See also the on-site cookie notice.

Retention and sharing

Data is retained while accounts remain active and for a reasonable period afterwards for security, dispute, and legal record-keeping. Processors include hosting (ASGARD / Cloudflare), email (Postal), and payments (Stripe). We do not sell personal data.

Your rights

Depending on applicable UK GDPR / Data Protection Act 2018 rights, you may request access, rectification, erasure, restriction, or portability. Consumer accounts may use in-product export and erase where available. Email [email protected] for other requests. You may complain to the ICO (ico.org.uk).

Related terms

Platform use is also governed by the Terms of use.