Privacy Policy

Settl is operated by Settl Ltd (“Settl”, “we”, “us”), a company registered in England and Wales. For the purposes of UK data protection law we are the data controller for the personal data described here.

For any privacy question, or to exercise your rights, contact us at privacy@trysettl.com or via our contact page.

• Account data - your name, email address and a securely hashed password.
• Booking & check-in data - the venues you book, dates, times and check-ins.
• Location - approximate location to show venues near you, used only when you grant location permission in your browser or device. You can turn this off at any time.
• Communications - messages you send us and our email correspondence with you.
• Usage & device data - basic technical information (such as IP address and browser type) and privacy-friendly analytics about how the service is used.
• Venue partner data - if you manage a venue, the business and contact details you add to your listing.

We use your data to:

• provide the service - create your account, take bookings and connect you with venues;
• keep the service secure and prevent fraud and abuse;
• communicate with you about your account, bookings and important service updates;
• support you when you contact us; and
• understand and improve how Settl works.

Our legal bases under UK GDPR are: performance of a contract (to provide the service you sign up for), legitimate interests (to run, secure and improve Settl), consent (for location and any optional marketing) and legal obligation (where the law requires it).

We do not sell your personal data. We share it only with:

• Venues you book - the venue receives the booking details it needs to expect you.
• Service providers - trusted suppliers who host our infrastructure and send our email on our behalf, under contract and only as needed to run the service.
• Authorities - where we are required to by law, or to protect our rights, users or the public.

We keep your personal data for as long as your account is active and as needed to provide the service, then for a reasonable period afterwards to meet legal, accounting and dispute-resolution requirements. When it is no longer needed we delete or anonymise it.

Under UK GDPR you have the right to:

• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to certain processing;
• data portability; and
• withdraw consent at any time, where we rely on it.

To exercise any of these, email privacy@trysettl.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Where your data is processed outside the UK, we ensure appropriate safeguards are in place (such as UK-approved standard contractual clauses or an adequacy decision) to protect it.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords and access controls. No system is completely secure, but we work to keep your data safe and to respond quickly to any incident.

Settl is intended for working adults and is not directed at children under 16.

We may update this policy from time to time. We will post the updated version here and change the “last updated” date above; significant changes will be notified to you.