Back to Home

Privacy Policy

Last updated: August 10, 2026

Effective Date: August 10, 2026

Company:Booked & Paid Ltd
Company Number: 16714808
Registered Office: 17 Stembrook Court, Dover, CT16 1PE.
Contact Email: info@bookednpaid.com
Business Phone: +44 7842 413304

1. Who We Are

Booked & Paid Ltd ("Booked & Paid", "we", "our", or "us") is a company registered in England and Wales. We provide marketing and appointment generation services to contractors and home improvement businesses, primarily in the United States.

This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and what rights you have.

We act in two different capacities, and which one applies changes your rights and who you contact:

  • As a data controller. When you visit our website, submit an application, or communicate with us about our services, we decide how your information is used. This policy governs that relationship.
  • As a data processor.When we operate advertising and follow-up systems on behalf of a client business, that client is the data controller of their customers' information and we act on their instructions. If you are a homeowner who enquired with a contractor, that contractor's privacy policy governs your data, not this one. We will pass on any request we receive to them.

2. Information We Collect

Information you give us. When you submit an application, book a call, or contact us:

  • Name and business name
  • Email address and phone number
  • Service area and location
  • Business information you choose to provide, including approximate revenue, advertising budget, and business goals
  • Any other information you include in messages to us

Information collected automatically. IP address, browser type, device type and operating system, pages viewed, time on site, referring source, and advertising or click identifiers where you arrive from a paid advertisement.

We use cookies and similar technologies for this, including the Meta pixel. We also use server-side event tracking (Meta Conversions API), which sends event data directly from our systems rather than from your browser. Where required, this data is hashed before transmission. You can control cookies through your browser settings, and through our cookie banner where one is presented.

Information from clients. Where a client business provides us with contact information for their own customers or leads, we handle it as a processor under Section 1 and under the terms of our services agreement with them.

3. Why We Use Your Information and Our Legal Basis

Under UK GDPR we must have a lawful basis for processing. Ours are:

  • Responding to enquiries and providing information about our services. Legitimate interests, or steps prior to entering a contract.
  • Sending marketing emails and SMS. Consent, and for existing clients, legitimate interests under the soft opt-in.
  • Delivering services under a signed agreement. Performance of a contract.
  • Measuring advertising performance. Consent, where cookies or tracking are involved.
  • Preventing fraud and securing our systems. Legitimate interests.
  • Meeting accounting, tax, and regulatory obligations. Legal obligation.

Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing that already took place.

4. SMS and Text Messaging

If you opt in to receive text messages from us, we may send you information relating to your enquiry, scheduled calls, and our services.

  • Message frequency varies
  • Message and data rates may apply
  • Reply STOP to unsubscribe at any time
  • Reply HELP for help, or contact us at info@bookednpaid.com

Consent to receive messages is never a condition of purchase. All opt-ins are captured through a clear, affirmative action such as ticking a consent box or submitting a form that displays the consent language.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All of the categories in Section 5 exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We retain records of your opt-in, including the timestamp, the source, and the consent language shown to you, in order to demonstrate compliance.

5. Who We Share Information With

We do not sell your personal information. We do not share mobile opt-in or consent data with anyone, as stated in Section 4.

We do share information with the following categories of recipient, and only as needed.

Service providers who process data on our behalf. These currently include:

  • HighLevel Inc. (customer relationship management, marketing automation, and hosting), United States
  • TextGrid (SMS delivery), United States
  • Meta Platforms, Inc. (advertising delivery and measurement), United States
  • Stripe, Inc. (payment processing), United States
  • Google LLC (analytics and business tools), United States
  • Wise Payments Ltd (payments), United Kingdom

Each is bound by a data processing agreement restricting them to our instructions.

  • Client businesses. Where you have submitted an enquiry through advertising we operate for a contractor, your details are provided to that contractor so they can contact you about your project. This is the purpose for which the information was collected and is made clear at the point of collection.
  • Professional advisers, insurers, and auditors, where necessary.
  • Authorities and regulators, where we are required to disclose by law, or to establish, exercise, or defend legal claims.
  • A buyer or successor, in the event of a sale, merger, or restructuring of our business.

6. International Transfers

We are based in the United Kingdom and most of our service providers are based in the United States. This means your information is transferred outside the UK.

Where we transfer personal data outside the UK, we rely on one of the following safeguards:

  • The UK extension to the EU-US Data Privacy Framework, where the recipient is certified
  • The UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses
  • Your explicit consent, where no other mechanism applies

You can request details of the safeguard applied to a specific transfer by contacting us.

7. How Long We Keep Information

  • Enquiry and prospect records: 24 months from your last engagement with us
  • SMS and email consent records: 5 years from the date consent was withdrawn or last relied upon
  • Client records and signed agreements: 7 years after the end of the engagement
  • Accounting and tax records: 6 years from the end of the relevant financial year
  • Website analytics data: as set out in our cookie information

We delete or anonymise information once the applicable period ends, unless we are required to retain it longer for legal reasons.

8. Data Security

We use administrative, technical, and organisational measures appropriate to the risk, including access controls, encryption in transit, and restricted administrative permissions on our systems.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we will notify you and the relevant regulator where we are legally required to do so following a personal data breach.

9. Your Rights

If you are in the UK or EU. Under UK GDPR you have the right to:

  • Be informed about how your data is used
  • Access a copy of the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data erased in certain circumstances
  • Restrict how we process your data
  • Object to processing based on legitimate interests, and to direct marketing at any time
  • Receive your data in a portable format
  • Withdraw consent at any time

To exercise any of these, email info@bookednpaid.com. We will respond within one month. We may ask you to verify your identity first.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113. We would appreciate the chance to address your concerns first.

If you are in the United States. Depending on your state, you may have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information for targeted advertising.

We do not sell personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under California law.

To make a request, email info@bookednpaid.com. We will not discriminate against you for exercising these rights.

10. Marketing Preferences

You can opt out of marketing at any time:

  • Email: click unsubscribe in any marketing email, or email us
  • SMS: reply STOP to any message
  • Phone: tell us during any call, or email us

We will still send you service messages relating to a booking, an active engagement, or a legal notice. Those are not marketing and cannot be opted out of while the relationship is live.

11. Children

Our services are directed at businesses and are not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Third Party Links

Our website and communications may link to sites we do not control, including client websites and social media platforms. We are not responsible for their privacy practices, and we encourage you to read their policies.

13. Changes to This Policy

We may update this policy from time to time. The current version is always posted on this page with the effective date at the top. Where changes are significant, we will take reasonable steps to notify you.

14. Contact Us

Booked & Paid Ltd
Company number: 16714808
Registered office: 17 Stembrook Court, Dover, Kent, CT16 1PE.
Email: info@bookednpaid.com
Phone: +44 7842 413304

Text HELP for help. Reply STOP to unsubscribe.

For more information or to exercise your rights, please contact us at info@bookednpaid.com