Last updated: 16 July 2026
Katch is operated by Green:House Partners Ltd (“Katch”, “we”), a company registered in England. This policy explains what we collect to run the booking service, why, and what we will never do with it. We’ve written it in plain English on purpose.
Katch is a booking tool that sits on a home-improvement business’s website and turns enquiries into confirmed survey appointments. We hold the details needed to take and confirm those bookings — nothing more. We never sell your data. We never use it to train AI models. You can close your account at any time and we delete what we hold.
Businesses use Katch to take bookings. Their customers book a survey through the widget. This policy covers both: how we handle a business’s account data, and how we handle the booking details a customer submits. For a customer’s booking, the business is the data controller and Katch is its processor.
Business account. Your business name, the email address you sign in with (this is also where bookings are emailed), your mobile number for booking alerts, your service area, working hours and branding. Sign-in is by one-time email link or Google/Microsoft — we never store a password.
Customer bookings. When someone books through the widget we collect their name, mobile number, postcode and address, the job they’re enquiring about, and their answers to a few short qualifying questions. We text a one-time code to confirm the number is theirs.
Calendar connection (optional). If you connect Google Calendar or Microsoft 365, we receive secure tokens from that provider. They are encrypted (AES-256-GCM) before storage and used only to check availability and write your Katch bookings into your diary. We never read the contents of your other events.
Usage data. Standard technical logs (errors, request metadata) so we can keep the service running, and booking-funnel analytics so a business can see how its widget performs.
To run Katch: showing available times, confirming bookings by SMS, alerting the business owner, sending reminders that reduce no-shows, and writing appointments to a connected calendar. To bill for the service. To support you when something needs fixing. That’s it — we do not sell or rent your data, and we do not use booking content to advertise to anyone.
A business can choose to connect its own Meta (Facebook) pixel so booking milestones count towards its ad campaigns. When enabled, the widget relays anonymous funnel events (such as “booking started”) to that business’s pixel. Katch does not run its own advertising trackers on the booking widget.
Only the processors needed to run the service: our database and hosting providers (Neon, Vercel), our SMS provider (Twilio) for verification codes and confirmations, our email provider (Resend) for confirmations and sign-in links, our payments provider (Stripe) for billing, and — only if you connect it — your calendar provider (Google or Microsoft). Each is bound by contract to protect the data. We never sell it.
We keep booking and account data while an account is open. Close your account (or email us) and we delete your data within 30 days, save what UK law requires us to keep (e.g. billing records). A customer can ask the business they booked with, or us, to remove their booking details.
Under UK GDPR you can ask for a copy of your data, correct it, delete it, restrict or object to processing, and take it elsewhere. Email us and we’ll act on it: hello@heykatch.com. You can also complain to the ICO (ico.org.uk) — though we’d rather you told us first so we can put it right.
Encryption in transit and at rest, encrypted calendar tokens, one-time-code sign-in (no stored passwords), least-privilege access, and UK GDPR taken seriously. No system is perfect; if a breach ever affects you, we will tell you promptly and plainly.
Katch uses essential cookies only — the ones that keep a signed-in business owner logged in. The booking widget sets no advertising cookies of its own.
If this policy changes materially we’ll tell you by email. Questions: hello@heykatch.com.