What we collect. What we don't.
This policy is a working draft written to cover the standard expectations under UK GDPR for a B2B marketing agency website. It must be reviewed by qualified legal counsel before site launch.
Who we are
Booked Wild is the trading name of two related legal entities operating under one brand: Nivo Digital Ltd, a company registered in England and Wales (Companies House registration to be confirmed), and Uniikki Ventures Oy, a company registered in Finland (PRH registration to be confirmed). Together we operate as a marketing agency for independent travel and hospitality operators across Europe.
UK clients contract with Nivo Digital Ltd. EU clients contract with Uniikki Ventures Oy. Both entities are joint controllers of personal data we collect through bookedwild.com under UK GDPR and EU GDPR respectively. You can contact either entity at hello@bookedwild.com with any privacy-related question.
What personal data we collect
We collect data in three categories:
Audit submissions
When you submit your business URL through the Foundations Audit on /audit, we capture your name, email address, business name, business URL, and the audit score. This is held in our Supabase database and used to send you the audit report and follow up if useful.
Paid audit purchases
When you buy the £97 Deep Insight Audit on /audit/deep-insight, payment is processed by Stripe via a Stripe-hosted Payment Link. We never see or store your full payment card details — Stripe handles them under their own PCI-compliant infrastructure.
On successful payment, Stripe sends our server a webhook with: your name, email, the amount charged, the currency, Stripe's customer / session / payment-intent identifiers, and the timestamp. We store these in our Supabase database and use them to (a) deliver your audit by the five-working-day deadline, (b) issue receipts and refunds where applicable, and (c) keep accurate accounting records. We also send you a confirmation email via Resend.
Audit purchase records are retained for seven years from the purchase date, in line with UK accounting and tax record-keeping requirements. After that window, records are anonymised or deleted on a regular cadence.
Contact form submissions
When you submit the form on /contact, we capture your name, business name, email, the topic you selected, the message you wrote, and a small amount of technical context (the page you came from and your browser's user-agent string). The submission is stored in our Supabase database and a notification email is sent to hello@bookedwild.com via Resend so we can reply.
To filter automated submissions we use Cloudflare Turnstile, which performs an invisible challenge in your browser. Turnstile may collect a short-lived token and basic device signals (browser characteristics, IP address) to determine whether the request is automated. No personally identifiable browsing history is built. See Cloudflare's privacy policy for full detail.
We retain contact-form submissions for up to 24 months from the date of submission. Submissions that lead to an active engagement are kept for the duration of that engagement plus the seven-year accounting period below. You can request earlier deletion at any time by emailing hello@bookedwild.com.
Other tools and forms
When you use the booking loss calculator, citation checker, or any other form on the site once those launch, we capture the information you provide — typically name, email, business name, and the inputs to the tool itself.
Analytics
We use Plausible Analytics, a privacy-friendly analytics provider that does not use cookies and does not collect personally identifiable information. Plausible records aggregate page views, referrers, and device categories. No individual visitor profile is built.
How we use it
- To deliver the service you've asked for (audit, paid audit, contact response)
- To communicate with you about that service and any agreed follow-up work
- To improve the site based on aggregate analytics
- To comply with legal obligations (e.g. tax records, anti-fraud)
We do not sell, rent, or otherwise transfer personal data to third parties for their own marketing purposes. We do not share data with online travel agencies or any party that competes with our clients' direct booking channels.
Sub-processors we use
We use the following third-party services to deliver this site and our work:
- Vercel — site hosting (United States, with EU regions)
- Supabase — database for leads and audit submissions (EU region)
- Stripe — payment processing for the £97 audit (United States, with EU subsidiary)
- Resend — transactional email delivery (United States)
- Cloudflare Turnstile — bot detection on the contact form (United States, with EU regions)
- Plausible Analytics — anonymous, cookieless analytics (Germany)
- SEOptimer — free audit tool integration (Australia)
- Anthropic — AI model used by the citation checker tool when launched (United States)
- LeadConnector / GoHighLevel — newsletter signup form embed in the footer, plus the Direct Booking OS platform for clients on that product (United States, with EU sub-processing)
Each sub-processor is bound by its own data processing terms. We have selected providers with strong privacy postures and EU-relevant safeguards where applicable.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request correction or deletion of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Restrict or object to certain types of processing
- Receive your data in a portable format
- Lodge a complaint with the Information Commissioner's Office (ICO) if you believe we've handled your data improperly
To exercise any of these rights, email hello@bookedwild.com. We respond within 30 days, usually faster.
How long we keep data
We hold lead and audit data for the duration of any active engagement plus seven years where required for accounting and tax records. We delete or anonymise data outside that window on request, or routinely on a regular cadence.
Cookies
See the separate cookie policy.
Changes to this policy
We update this policy when our practices change. The "last updated" date at the top of this page reflects the most recent change. Material changes are communicated to active clients by email.
Contact
For any privacy-related question, email hello@bookedwild.com.