Privacy Policy

This Privacy Policy applies to the LiveSession Pro mobile app, web interfaces, public pages, support channels, and related services operated by NimbleNest Technologies.

• NimbleNest as controller: We generally determine the purposes and means of processing for platform account administration, security, fraud prevention, billing between NimbleNest and businesses, product support, service improvement, and our own business-to-business sales activity.
• Participating businesses as controllers: A salon, spa, home-service company, consultancy, or other business using LiveSession Pro generally determines why and how it uses customer and staff information for its services, bookings, workforce management, and communications.
• NimbleNest as processor: Where we process personal information on behalf of a participating business and according to its instructions, our processing may be governed by the applicable service agreement and data processing terms.

The information processed depends on how you interact with LiveSession Pro and which functions a participating business enables.

Users and participating businesses should avoid entering special category or highly sensitive personal information unless it is genuinely necessary, lawful, and appropriate for the relevant service.

Where data protection law requires a lawful basis, the basis depends on the processing purpose and circumstances. We may process information:

• To perform a contract or take requested steps: creating accounts, enabling bookings, delivering subscribed platform functions, processing business subscriptions, providing support, and administering requested services.
• For legitimate interests: maintaining platform security, preventing abuse, improving reliability and usability, responding to business enquiries, maintaining appropriate operational records, and conducting proportionate business-to-business marketing where permitted. We consider the interests and rights of affected individuals before relying on this basis.
• To comply with legal obligations: accounting, tax, fraud-prevention, regulatory, law-enforcement, or other requirements that apply to us.
• With consent where required: for activities for which applicable law requires consent. Where processing relies on consent, it may be withdrawn without affecting prior lawful processing.

A participating business is responsible for identifying and documenting its own lawful bases for the customer and staff information it processes through LiveSession Pro.

NimbleNest may use professional or publicly available business contact information, information supplied by business data providers, referrals, or information provided directly to us to introduce LiveSession Pro to organisations that may reasonably have an interest in the service.

• We aim to identify NimbleNest/LiveSession Pro and the purpose of the communication clearly.
• We maintain contact and outcome records where reasonably necessary to manage follow-ups and respect objections.
• We will honour valid opt-out, objection, or do-not-contact requests and apply additional consent or communications rules where applicable.
• Use of contact details for marketing remains subject to applicable electronic-marketing, telephone-marketing, and data-protection laws in the recipient's jurisdiction.

We do not sell personal information. We share or make information available only where reasonably necessary for the service, a participating business's operations, legal compliance, or another disclosed purpose.

• With the participating business you interact with, including authorised administrators, managers, and staff as required to manage services and bookings.
• With service providers supporting hosting and infrastructure, email delivery, push notifications, maps/geocoding, security, technical operations, and other platform functions.
• With payment providers such as Stripe and PayPal when their services are selected or configured.
• With professional advisers, authorities, courts, regulators, or other parties where required or permitted by law.
• In connection with a genuine corporate restructuring, acquisition, financing, or transfer of all or part of the business, subject to appropriate confidentiality and legal safeguards.

Payments may be processed by third-party providers such as Stripe and PayPal. LiveSession Pro does not store full payment-card numbers. Where saved payment methods are supported, LiveSession Pro stores provider tokens or references needed to request provider-side payment functions.

LiveSession Pro may involve service providers, infrastructure, support activities, or participating businesses located in different countries. This can result in personal information being processed outside the country in which it was originally collected.

Where applicable law treats a transfer as restricted, we will use an available lawful transfer mechanism or safeguard where required, such as an applicable adequacy arrangement or approved contractual safeguards, and will carry out any required transfer assessment. The exact mechanism can depend on the countries, providers, and processing involved.

We use technical and organisational measures intended to protect information against unauthorised access, loss, misuse, alteration, or disclosure. Measures include role-based access controls, authentication, secure communications where deployed, operational logging, and restrictions on access to systems and data. No transmission or storage method is completely secure, and absolute security cannot be guaranteed.

We retain information for as long as reasonably necessary for the purpose for which it was collected, to provide and secure LiveSession Pro, to maintain appropriate business and transaction records, to resolve disputes, to prevent abuse, and to meet applicable legal, accounting, tax, audit, or regulatory obligations.

When a customer account is deleted, LiveSession Pro may anonymise or remove profile and contact information, disable access, remove saved payment-method links, and disable push-notification tokens. Booking, payment, refund, audit, and other historical records may be retained where there is a legitimate operational or legal need. Where appropriate, retained records may be anonymised, minimised, or access-restricted rather than deleted immediately.

Retention periods therefore vary by record type, legal requirement, business relationship, dispute status, and the instructions or legal obligations of a participating business.

Depending on your location and the circumstances, you may have rights to request access, correction, erasure, restriction, objection, or portability of personal information, and to withdraw consent where consent is the basis for processing.

• You can update certain account and profile information using available app or web controls.
• You can ask us to review a privacy request relating to processing for which NimbleNest is responsible.
• If your request primarily concerns information controlled by a participating business, we may direct you to that business or assist it in responding where appropriate.
• Rights are not absolute and may be limited by applicable law, legal claims, recordkeeping obligations, the rights of others, or other lawful grounds.

We do not use LiveSession Pro to make solely automated decisions that produce legal or similarly significant effects on individuals unless this is separately disclosed and lawfully implemented.

A participating business is responsible for its own customer and workforce privacy notices, lawful bases, instructions, retention requirements, user permissions, and regulatory obligations. Where NimbleNest acts as its processor, the business and NimbleNest may enter into applicable data processing terms governing that processing.

Businesses should configure LiveSession Pro and their operating procedures so that they collect only information that is necessary for the services they provide and ensure their staff access is appropriately restricted.

LiveSession Pro is not designed as a children's service. Participating businesses are responsible for determining whether they may lawfully provide a service to a child and what consent, authorisation, or safeguards are required. If NimbleNest learns that personal information was collected unlawfully from a child, we will take appropriate steps in accordance with applicable law and the relevant business relationship.

We may update this Privacy Policy to reflect changes in LiveSession Pro, our processing practices, providers, or legal requirements. Material changes may be communicated through the service or another appropriate channel. The current version will display its latest update date.

For privacy questions or requests concerning processing for which NimbleNest Technologies is responsible, contact us using the details below.

If UK data protection law applies to our processing, individuals may also have the right to complain to the UK Information Commissioner's Office (ICO). Information about making a complaint is available at ico.org.uk.

Where applicable law requires NimbleNest Technologies to appoint a local data protection representative, the representative's contact details will be published in this policy or another appropriate privacy notice once appointed.