Acceptable Use Policy
Last updated 21 July 2026 · Version v1.0
Provider: Clements & Catterall LTD (company number 16966378), trading as Thyme Studio
Applies to: Everyone who uses a Thyme Studio account. Forms part of the Terms of Service.
Breach: Breach of this policy allows us to suspend your account immediately under clause 20 of the Terms of Service.
1. What this policy is for
1.1This policy sets out what you may and may not do with Thyme Studio. It forms part of your Terms of Service.
1.2It exists for a practical reason. Thyme Studio sends SMS and email on behalf of every business that uses it, and SMS is sent from a phone number shared across all our customers. If one business misuses that number, every other business suffers — messages get blocked by mobile networks, the number gets reported, and legitimate booking confirmations stop arriving. Most of this policy follows from that.
1.3You are responsible for everything done through your account, including by your staff.
2. Messaging — the rules that matter most
2.1Only send marketing messages to people who have agreed to receive them. Thyme Studio will only send campaigns to clients recorded as having opted in, but you are responsible for making sure that consent was genuinely obtained and that your records are accurate.
2.2Do not import purchased, scraped, rented or third-party contact lists. Consent cannot be bought or transferred.
2.3Do not send unsolicited messages of any kind — no bulk marketing to people who have not opted in, and no messages to numbers or addresses you have obtained without permission.
2.4Honour opt-outs immediately. We process common opt-out keywords automatically, but if someone asks you to stop by any other route, you must act on it.
2.5Do not disguise who you are. Every SMS carries your business name, and you must not alter or remove it, or set a sender identity that misleads recipients about who is contacting them.
2.6Do not use the Service to send messages that are unlawful, deceptive, or that promote anything other than your own salon business — including messages on behalf of a third party, affiliate offers, and anything unrelated to the services you provide.
2.7Do not use the Service to send messages relating to any of the following, which mobile networks routinely block and which will get our shared number suspended: loans and credit, cryptocurrency or investments, gambling, adult content, tobacco or vaping products, prescription medicines, or debt collection.
2.8Do not attempt to bypass, disable or work around phone-number verification, sending allowances, rate limits, or consent checks.
3. Client data
3.1Only record information about your clients that you have a lawful basis to hold, and tell your clients that you use a third-party platform to manage their records.
3.2If you record medical notes or consent-form responses, make sure you have your client's explicit consent first. This is special category data and the law treats it more strictly.
3.3Do not type client names or personal details into the Sprout AI chat. Describe clients in general terms instead.
3.4Do not use the Service to store information you have no business reason to hold, and do not use another business's client data that you have obtained without permission.
4. Security
4.1Do not share login credentials. Every staff member who needs access should have their own account.
4.2Do not attempt to access any part of the Service you are not authorised to reach, any other customer's data, or any underlying system or infrastructure.
4.3Do not probe, scan or test the security of the Service, or attempt to defeat any authentication or rate-limiting measure, without our prior written permission.
4.4Do not introduce any virus, worm, malicious code or anything else designed to disrupt the Service.
4.5Tell us promptly at support@thymestudio.co.uk if you discover a security vulnerability or become aware of unauthorised access to your account.
5. Using the platform itself
5.1Use Thyme Studio for your own salon or studio business. Do not resell it, sublicense it, or make it available to anyone else as a service.
5.2Do not copy, modify, reverse engineer, decompile or attempt to extract the source code of the Service.
5.3Do not scrape, crawl or use automated means to extract data from the Service, other than through any interface we provide for that purpose.
5.4Do not use the Service to build or assist in building a competing product.
5.5Do not place unreasonable load on the Service, or use it in a way that degrades it for other customers.
5.6Do not create multiple accounts to circumvent plan limits, allowances or the free trial.
6. Content and conduct
6.1Do not upload, store or send anything through the Service that is unlawful, defamatory, obscene, harassing, discriminatory or that infringes anyone's intellectual property rights.
6.2Your public booking page is visible to the world. Keep its content lawful, accurate and appropriate.
6.3Do not impersonate anyone, or misrepresent your affiliation with any person or organisation.
7. What happens if you breach this policy
7.1If we believe you have breached this policy we may, depending on how serious it is:
- (a)contact you and ask you to put it right;
- (b)restrict or disable a specific feature, such as SMS sending;
- (c)suspend your account immediately under clause 20 of the Terms of Service; or
- (d)terminate your account under clause 25 of the Terms of Service.
7.2For anything that puts our shared sending number, our platform or other customers at risk, we will usually act first and discuss afterwards. We will always tell you what we have done and why, unless the law prevents us.
7.3You remain liable for fees during any suspension caused by your breach, and we will not refund them.
7.4If you are unsure whether something is permitted, ask us at support@thymestudio.co.uk before you do it. We would much rather answer a question than suspend an account.
8. Changes to this policy
8.1We may update this policy as the Service develops and as messaging rules change. If a change is material we will give you at least 30 days' notice, unless the change is needed urgently to protect the platform or comply with the law.