Privacy & Cookies

1. Who we are

This privacy notice is issued by Buzzkill Ltd (“Buzzkill”, “we”, “us”), a company registered in England & Wales under company number 16935858. Our registered address is:

We are the data controller for the personal data we collect through this website and our booking system. Buzzkill Ltd is registered with the UK Information Commissioner's Office (ICO).

For any privacy queries, including to exercise your rights, please contact us at info@buzzkilluk.com.

2. What personal data we collect

When you book or contact us, we may collect:

• Contact details — your name, email address and phone number.
• Service address — the address of the property where treatment is to take place, including any access notes you provide.
• Booking details — your chosen appointment slot, declared nest count, property type, parking, and any free-text description or photos you supply about the nest.
• Payment information — payments are taken via Stripe. We do not store your card details on our systems; we only see the transaction status, last four digits, and the issuing country (as provided to us by Stripe).
• Communications — emails you send to us and our replies.
• Technical data — limited information from your browser when you use this site (e.g. IP address, user-agent), used for security, debugging and to operate the booking flow.

3. Why we collect it, and our lawful basis

We process your personal data for the following purposes, relying on the lawful bases set out under Article 6 of the UK GDPR:

• To provide our service — managing bookings, dispatching technicians, sending appointment confirmations and reminders, taking and refunding payment, and providing aftercare. Lawful basis: contract (Art. 6(1)(b)).
• To comply with legal obligations — such as keeping accounting and tax records. Lawful basis: legal obligation (Art. 6(1)(c)).
• To run and secure the website — preventing fraud and abuse, fixing bugs, and maintaining service performance. Lawful basis: legitimate interests (Art. 6(1)(f)) — our interest in operating a secure, reliable service.
• For optional marketing — only with your consent, where applicable. Lawful basis: consent (Art. 6(1)(a)). You can withdraw consent at any time.

4. How long we keep your data

We keep personal data only for as long as we need it. In practice:

• Booking and transactional records are retained for 6 years after the end of the financial year in which the booking occurred, in line with HMRC's record-keeping requirements for limited companies.
• Email correspondence is kept for the same period if it relates to a booking; otherwise we delete it within 2 years.
• Photos uploaded with bookings are retained alongside the booking record and deleted on the same schedule.
• Marketing data, if you ever opt in, is kept until you withdraw consent or after 2 years of inactivity, whichever comes first.

When the retention period ends, we either delete the data or anonymise it so it can no longer be linked to you.

5. Who we share your data with

We do not sell your personal data. We share it only with the following categories of recipients, all of which act as our processors under written contracts:

• Technicians who carry out the treatment — they receive only the information needed to attend the appointment (address, time slot, nest details, your phone number).
• Hosting and database — Supabase Inc. and Vercel Inc., who host the application and store booking data.
• Email delivery — Resend, Inc., for sending booking confirmations and operational emails.
• Payments — Stripe Payments UK, Ltd. and Stripe, Inc.
• Cookie consent management — CookieYes, when enabled.
• Professional advisers — accountants and legal advisers, where necessary.
• Authorities — where we are legally required to disclose data (e.g. to HMRC, the police, or a court order).

6. International transfers

Some of our processors (e.g. Stripe, Resend, Supabase, Vercel) are based in the United States or have infrastructure outside the UK. Where personal data is transferred outside the UK, we rely on appropriate safeguards under UK GDPR Article 46 — typically the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK extension to the EU-US Data Privacy Framework. We can provide further details on request.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (the “right to be forgotten”), subject to our legal retention obligations.
• Restrict processing in certain circumstances.
• Object to processing based on legitimate interests.
• Data portability — receive a copy of your data in a portable format.
• Withdraw consent at any time where we rely on consent.
• Complain to the ICO if you believe we have not handled your data lawfully. The ICO can be contacted at ico.org.uk/make-a-complaint.

To exercise any of these rights, email us at info@buzzkilluk.com. We'll respond within one month.

8. Cookies

Cookies are small text files stored on your device by your browser when you visit a website. Some are needed for the site to function; others help us understand how visitors use the site or support marketing. We use cookies and similar storage technologies as set out below.

Strictly necessary cookies

These are required for core site functionality. Under the UK Privacy and Electronic Communications Regulations (PECR), they are exempt from the consent requirement. Disabling them will break parts of the site.

Other cookies

When we add analytics, marketing or other non-essential cookies, we will request your consent first. The full and up-to-date list of cookies in use on this site is shown below, managed by our consent platform CookieYes:

Managing cookies

You can clear or block cookies via your browser settings — instructions are available at aboutcookies.org. Once our cookie banner is enabled, you will also be able to change your preferences at any time via a button on every page.

9. Children

Our service is intended for adults arranging treatment at a property they own or occupy. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Security

We use appropriate technical and organisational measures to protect your data, including transport encryption (HTTPS), encrypted databases, role-based access controls, and authentication gates on customer-facing booking pages. No system is perfectly secure, and we continue to review and improve our practices.

11. Changes to this notice

We may update this notice from time to time. The effective date at the top of the page will change when we do. For material changes, we'll take reasonable steps to notify you.

12. Contact us

For any privacy-related queries, please email info@buzzkilluk.com or write to us at the registered address above.

Have a non-privacy question? General contact page.