Privacy policy
Who we are
TFC CRM is operated by UK Franchise Consultants Ltd, trading as The Franchise Consultant, based in York, United Kingdom. If you have any questions about this policy or about how we handle data, please contact us at steve@thefranchiseconsultant.co.uk.
TFC CRM is an internal tool used by our own staff to manage franchise enquiries and appointments. It is not a public product.
The Google user data we access
When a member of our staff connects their Google account to TFC CRM, we access the following, and nothing more:
- Their Google Calendar events, so we can create, read and update appointments.
- Their free and busy times, so we can show when they are available.
We request a single Google permission, the Google Calendar scope https://www.googleapis.com/auth/calendar. We do not request access to Gmail, Google Contacts, Google Drive or any other Google service.
How we use this data
We use the Google Calendar data described above only to:
- Sync appointments both ways between TFC CRM and the staff member's Google Calendar, so a booking made in one appears in the other and stays up to date.
- Power self-booking links for our staff, by reading free and busy times so a time that is already taken is not offered.
We do not use this data for anything else. We do not use it for advertising, we do not build profiles from it, and we do not use it to train artificial intelligence or machine learning models.
How we store and protect it
The data is held in our application database, hosted on Railway. All data is encrypted in transit using HTTPS. The OAuth tokens that let TFC CRM reach a staff member's Google Calendar are stored securely in that database, and access to the system is limited to authorised staff.
Sharing
We never sell this data. We never use it for advertising. We do not share it with third parties, except with the service providers that are strictly needed to run TFC CRM (for example our hosting provider), and with Google itself in order to provide the calendar sync you have authorised.
Retention and deletion
We keep a staff member's Google Calendar data and tokens only for as long as their Google account is connected to TFC CRM. The data and tokens are deleted when the staff member disconnects their Google account in TFC CRM, or when they ask us to remove it by contacting steve@thefranchiseconsultant.co.uk.
You can also review and revoke TFC CRM's access to your Google account at any time from your Google account at https://myaccount.google.com/permissions.
Google API Services Limited Use
The Franchise Consultant's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Your rights under UK GDPR
Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the right to:
- ask what personal data we hold about you and request a copy of it;
- ask us to correct data that is inaccurate or incomplete;
- ask us to delete your data;
- ask us to restrict or object to how we use your data;
- ask us to transfer your data to you or another provider; and
- withdraw consent at any time, where we rely on your consent.
To exercise any of these rights, contact steve@thefranchiseconsultant.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.