Privacy Policy

DynamiPrix ("we", "us", or "our") is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our website at dynamiprix.com and our dynamic pricing software service (together, the "Service").

We operate in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). DynamiPrix is the data controller for personal data processed through our website and platform.

By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Service.

We collect personal data in the following ways:

Information you provide directly: When you register for an account, book a demo, submit an enquiry, or apply for a role, you may provide us with your name, email address, phone number, business name, job title, and any other information you choose to include in your communications with us.

Information collected automatically: When you visit our website, we automatically collect certain technical information including your IP address, browser type and version, operating system, referring URLs, pages viewed, time spent on pages, and the date and time of your visit. This information is collected through cookies and similar tracking technologies (see our Cookie Policy for full details).

Information from booking platform integrations: When you connect DynamiPrix to your booking platform (such as Acuity Scheduling, Mindbody, Fresha, or others), we receive data from that platform necessary to provide our Service. This includes appointment schedules, service types, pricing information, booking history, and availability data. We do not collect or store your clients' personal data unless strictly necessary to deliver the Service, and we process such data only on your behalf as a data processor.

Information from third parties: We may receive information about you from third-party sources, such as analytics providers, advertising partners, or publicly available sources, where permitted by applicable law.

We process your personal data on the following legal bases under UK GDPR:

Contract performance: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract — for example, to provide our Service, manage your account, and process payments.

Legitimate interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. This includes improving our Service, preventing fraud, ensuring network security, and conducting marketing to existing customers.

Consent: Where you have given us clear consent to process your personal data for a specific purpose — for example, sending you marketing communications or placing non-essential cookies on your device. You may withdraw consent at any time.

Legal obligation: Where processing is necessary to comply with a legal obligation to which we are subject, such as tax and accounting requirements or responding to lawful requests from regulatory authorities.

We use the personal data we collect for the following purposes:

To provide, operate, and improve our Service, including setting up and managing your account, processing payments, and delivering dynamic pricing functionality through your connected booking platform.

To communicate with you about your account, respond to your enquiries, send service-related notifications, and provide customer support.

To send you marketing communications about our products, features, and updates where you have consented or where we have a legitimate interest in doing so. You can opt out at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.

To analyse usage patterns and improve the performance, security, and functionality of our website and Service.

To comply with applicable legal and regulatory obligations, including fraud prevention, anti-money laundering checks, and responding to lawful requests from courts or regulatory bodies.

To conduct research and development to improve our pricing algorithms and service offerings.

We do not sell your personal data to third parties. We may share your information in the following limited circumstances:

Service providers: We work with trusted third-party companies that help us operate our business, including cloud hosting providers, payment processors, email delivery services, analytics providers, and customer support tools. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

Booking platform integrations: When you connect DynamiPrix to a third-party booking platform, data is exchanged between our Service and that platform as necessary to provide the integration. Your use of those platforms is governed by their own privacy policies.

Business transfers: If DynamiPrix is involved in a merger, acquisition, or sale of all or a portion of its assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any such change.

Legal requirements: We may disclose your information where required to do so by law, regulation, or court order, or where we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Account data is retained for the duration of your subscription and for a period of up to 7 years after account closure to comply with financial and legal record-keeping obligations.

Marketing data (including email preferences) is retained until you withdraw consent or opt out of communications.

Website analytics data is typically retained for 26 months, after which it is aggregated or deleted.

When we no longer need your personal data, we securely delete or anonymise it in accordance with our data retention schedule.

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how we use it.

Right to rectification: You have the right to ask us to correct inaccurate or incomplete personal data we hold about you.

Right to erasure: You have the right to ask us to delete your personal data in certain circumstances, such as where it is no longer necessary for the purposes for which it was collected.

Right to restrict processing: You have the right to ask us to restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy.

Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.

Right to object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights related to automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include encryption of data in transit and at rest, access controls and authentication requirements, regular security assessments, and staff training on data protection.

While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we will notify you and the relevant authorities of any data breach as required by law.

DynamiPrix is based in the United Kingdom. Some of our service providers may process data outside the UK or European Economic Area. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as the use of UK International Data Transfer Agreements (IDTAs) or equivalent standard contractual clauses approved by the ICO.

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website with a revised "Last Updated" date. Where required by law, we will seek your consent to material changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

**DynamiPrix Limited** Registered in England & Wales Company Number: 17158148 Email: [email protected] Website: dynamiprix.com

You may also contact the Information Commissioner's Office (ICO) if you are not satisfied with our response: Website: ico.org.uk Telephone: 0303 123 1113