How Sphere UK collects, uses, shares and protects your personal data.
Who we are
Sphere UK ("Sphere", "we") is the controller of personal data processed through bookwithsphere.co.uk. Sphere UK is a trading name of SPHEREUK Ltd.
SPHEREUK Ltd, registered in England and Wales under company number 16635054. Registered office: 86-90 Paul Street, London, England, EC2A 4NE.
Contact our team on contactus@bookwithsphere.co.uk.
What we collect
- Account details: name, email, phone, password (stored hashed by our authentication provider).
- Location details: postcode, town or city and, where you choose mobile services, the address of your appointment.
- Booking, order, course and class records, including prices, tips and cancellation history.
- Messages you send through Sphere, reviews you publish, and support or dispute correspondence.
- Payment metadata from Stripe. We never store your full card number.
- Technical data: device, browser, and cookie preferences.
Why we process it
- To provide bookings, marketplace orders, courses, classes, memberships and rewards (contract).
- To take payment, pay providers and prevent fraud (contract and legitimate interests).
- To keep Sphere safe: moderation, disputes, abuse prevention (legitimate interests).
- To send service messages such as booking confirmations and reminders (contract).
- To send marketing where you have opted in (consent, withdrawable at any time).
Sharing
We share the minimum necessary with the provider or seller you book from, Stripe for payments, our hosting and database provider, and our email delivery provider. We do not sell personal data.
International transfers
Some of the processors we use, including Stripe and our hosting and email providers, may process personal data outside the UK, including in the United States. Where this happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses, before data is transferred.
Children's data
Our services are intended for use by adults. Where a parent or guardian books a treatment on behalf of a minor, we process limited data about that minor (such as age-relevant treatment details) as necessary to deliver the booking. We do not knowingly collect data directly from children without the involvement of a parent or guardian.
Retention
Account data is kept while your account is open. Financial records are kept for six years to meet UK tax and accounting law. Support and dispute records are kept for two years after closure.
- Marketing data is kept until you withdraw your consent or opt out, whichever happens first.
Your rights
You can access, correct, export, restrict or erase your data, object to processing and withdraw consent. Use Settings > Your data to download an export or request account closure, or contact support.
You can complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We'd appreciate the chance to resolve any concern directly first — please contact us before raising a complaint with the ICO.
Data breaches
If a personal data breach occurs that is likely to affect your rights or freedoms, we will notify you and the ICO without undue delay, in line with our obligations under UK GDPR.
