Cookie Policy

1.1This policy explains the cookies and similar technologies we use on our website, in the Thyme Studio application, and on the public booking pages we host for our customers.

1.2A cookie is a small file stored on your device when you visit a website. Similar technologies include local storage and pixels. In this policy we call all of them "cookies".

1.3Our Privacy Policy explains more broadly how we handle personal data.

2.1We use very few cookies. We use one that is strictly necessary to keep you signed in, and — once we introduce it — a small set that tells us anonymously how the product is used so we can improve it.

2.2We do not use advertising cookies. We do not track you across other websites. We do not sell or share your data with advertisers.

3.1These cookies are essential. Without them the Service cannot work — you would not be able to sign in or stay signed in.

Session and authentication — Set by our authentication provider when you sign in, so that we know it is you on each page you visit and can keep your session secure. Without it you would be signed out on every click.

Security — Used to protect against cross-site request forgery and similar attacks, and to detect automated abuse of the signup form.

3.2We do not need your consent for these cookies, because the law does not require consent for cookies that are strictly necessary to provide a service you have asked for. You cannot turn them off, but you can block all cookies in your browser — the Service will not work if you do.

4.1We use a product analytics tool to understand how Thyme Studio is used — which features people use, where they get stuck, and what we should improve. This information is used only in aggregate and only to improve the product.

4.2We do not use analytics to build a profile of you, to target advertising, to track you across other websites, or to share information with any third party for their own purposes.

4.3Under UK law as amended by the Data (Use and Access) Act 2025, cookies used solely to collect statistics about how a service is used, with a view to improving it, do not require your consent. We rely on that exception. In return, the law requires us to tell you clearly what we are doing — which is what this section does — and to give you a simple, free way to object.

4.4You can object at any time. Use the "Cookie settings" link in the footer of any page to turn analytics off. Your choice is remembered for 12 months, and you can change it whenever you like. Turning analytics off does not affect anything else about how the Service works.

5.1When one of our customers publishes a public booking page, that page is hosted by us and uses the same strictly necessary cookies described in section 3 in order to process a booking.

5.2The salon whose booking page you are visiting is the data controller for the booking information you provide. This policy covers only the cookies we set to make the page work.

6.1Some of the providers we use may set their own cookies when their functionality is used, in particular:

Stripe — Sets cookies on its own hosted checkout and billing pages, for payment processing and fraud prevention. These are governed by Stripe's own cookie and privacy policies.

Cloudflare — Sets a cookie as part of the challenge that protects our signup form from automated abuse. This is a strictly necessary security measure.

6.2Our sub-processors page lists every third-party provider we use and what each one does.

7.1You can control cookies through your browser settings — blocking them, deleting them, or asking to be warned before one is set. Every major browser explains how in its help pages.

7.2Blocking all cookies will stop you being able to sign in to Thyme Studio, because the sign-in cookie described in section 3 is essential.

8.1We will update this policy whenever we change the cookies we use. The version and date are shown at the top of this page.

8.2If you have any questions, email us at privacy@thymestudio.co.uk.