Website Privacy Notice

01Overview

Vitara Commerce Ltd (“we”, “us”, “our”) is committed to protecting the privacy and security of your personal data. This Website Privacy Notice describes how we collect, use, store, and share personal data when you visit our website at bookar.uk, submit an enquiry or demo request, or subscribe to our newsletter.

It does not cover personal data handled inside the Bookar platform itself — that is dealt with in our Platform Privacy Notice. This notice is issued in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

02Who We Are

The data controller for personal data collected through this website is:

03Data We Collect

When you use our website, we collect and process the following categories of personal data:

We do not collect any special categories of personal data (such as health or biometric data) through this website, and the website is not intended to collect data from children.

04How We Collect It

We collect personal data through the following means:

• Directly from you — when you complete a contact or demo form, email us, or subscribe to our newsletter.
• Automatically — through cookies and similar technologies as you browse the site (see Section 7).
• From third parties — such as advertising and analytics platforms that help us measure and target our marketing.

05How We Use It

We use the personal data collected via this website to:

• Respond to your enquiries, demo requests, and sales questions.
• Send you newsletters and marketing communications you have consented to receive.
• Understand how visitors use the site so we can measure and improve it.
• Measure and deliver our advertising, including on third-party platforms.
• Keep the website secure and prevent misuse.
• Comply with our legal and regulatory obligations.

06Lawful Basis for Processing

We rely on the following lawful bases under UK GDPR to process personal data collected through this website:

• Legitimate interests — responding to your business enquiries, keeping the site secure, and understanding site usage, where not overridden by your rights.
• Consent — for sending marketing emails, and for setting non-essential (analytics and advertising) cookies. You can withdraw consent at any time.
• Legal obligation — where processing is necessary to comply with the law.

07Cookies

We use cookies and similar technologies on this website. When you first visit, our cookie banner lets you accept or reject non-essential cookies; you can change your choice at any time by clearing cookies in your browser and reloading the site. We use three categories:

Essential cookies

Required for the website to function and to remember your cookie choices. These cannot be switched off.

Analytics cookies

We use Google Analytics to understand how visitors find and use the site so we can improve it. These are set only where you consent, and the data is aggregated.

Advertising cookies

We use Google Ads to measure the effectiveness of our advertising and to show relevant ads to people who have visited our site (remarketing). These are set only where you consent.

Rejecting non-essential cookies will not affect your ability to browse the site. For more detail on the specific cookies in each category, contact us at privacy@bookar.uk.

08Sharing Your Data

We do not sell your personal data. We may share it with the following categories of third parties, strictly as necessary:

• Analytics providers — Google Analytics, to measure site usage.
• Advertising partners — Google Ads, to measure and deliver our advertising.
• Email marketing and CRM providers — to manage newsletters and enquiries.
• Website hosting and infrastructure providers — to run and secure the site.
• Professional advisers — solicitors, accountants, and auditors under duties of confidentiality.
• Law enforcement or regulators — where we are required to do so by law or court order.

All third-party processors are subject to data processing agreements and are required to handle personal data in accordance with UK GDPR.

09Retention

We retain personal data only for as long as necessary for the purposes set out in this notice, or as required by law. Our general retention periods are:

• Enquiry and contact data — retained for up to 24 months after our last contact with you, unless it becomes a customer record.
• Newsletter and marketing data — retained until you unsubscribe, after which your details are added to a suppression list so we do not contact you again.
• Analytics data — retained in line with our analytics provider's settings (typically up to 14 months).
• Advertising and cookie data — retained for the lifetime of the relevant cookie.

Where data is no longer required, it is securely deleted or anonymised.

10Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

To exercise any of these rights, contact us at privacy@bookar.uk. We will respond within one calendar month and may need to verify your identity before processing your request. You can unsubscribe from marketing at any time using the link in any of our emails.

11International Transfers

Some of our providers — such as Google — are based outside the UK, so your data may be transferred internationally. Where it is, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations (including the UK extension to the EU–US Data Privacy Framework) confirming the destination provides equivalent protection.
• The UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, as issued by the ICO.

You may request details of the specific safeguards for any transfer by contacting us at privacy@bookar.uk.

12Children

This website is intended for businesses and their adult representatives. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided personal data through this website, please contact us and we will delete it promptly.

13Changes to This Notice

We may update this notice from time to time to reflect changes in our practices, technology, or legal requirements. The “Effective” date at the top of this page will always reflect the most recent version, and material changes will be highlighted on this page.

14Contact & Complaints

If you have any questions about this notice or how we handle your personal data, please contact us:

Making a data protection complaint

If you have a concern about how we handle your personal data, you can make a complaint to us directly using the contact details above — please tell us you are making a data protection complaint so we can handle it appropriately. We will acknowledge your complaint within 30 days of receiving it, investigate it, and keep you informed of the outcome.

If you are not satisfied with our response, or believe we are processing your personal data unlawfully, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):