Privacy policy

Privacy policy

Last updated 28 October 2026

This policy explains how Wular Ltd ("Confirva", "we", "us"), a company registered in the United Kingdom, handles personal information when you use Confirva, including our website, dashboard, the booking sites we host for businesses, and our emails. Questions: admin@confirva.com.

Our role

For business accounts and visitors to our website, we decide how personal information is used. When you book with a business that uses Confirva, that business is responsible for your information and we process it on its behalf. For questions about your bookings, please contact the business first.

What we collect

• Business accounts: contact and sign-in details, business and team details, billing and payment records, and messages you send us.
• People who book: contact details, booking details, answers to the business's questions, and payment records. Card details are handled by payment providers; we never store full card numbers.
• Website visitors: the details you send us through our contact form.

Some businesses may ask for sensitive information, such as health details or details about a child. The business is responsible for having a lawful reason to collect it.

How we use it

We use personal information to provide and support Confirva, to keep it secure, to send service messages, and to meet legal duties. We process information about people who book only on the business's instructions. We do not sell personal information or use it for advertising.

Who we share it with

• The business you book with, and its team.
• Service providers who help us run Confirva, such as hosting, email, payment and AI providers. They may use the information only on our instructions.
• Payment providers chosen by a business, to process payments.
• Authorities, when the law requires it.
• A buyer or successor if our business is sold or merged, under the same protections.

We use AI services only to help business owners set up their business. Their terms don't allow our data to be used to train their models, and we don't use personal information to train AI models.

International transfers

Some providers may process information outside the UK. When they do, we use appropriate safeguards as required by UK data protection law.

How long we keep it

We keep information only as long as needed to provide Confirva and meet legal duties, such as keeping billing records. Businesses can delete their clients' information. To close your account and delete your data, email us.

How we protect it

We use encryption in transit, encrypt sensitive data such as access tokens, and limit access to personal information to people who need it.

Cookies

We don't use advertising or analytics cookies. We use browser storage only for things the service needs, such as keeping you signed in. Payment providers may set their own cookies at checkout.

Your rights

You can ask to access, correct or delete your information, object to or restrict its use, or receive a copy. Email admin@confirva.com. You can also complain to the Information Commissioner's Office.

Children

Business accounts are for adults only. Bookings for children should be made by a parent or guardian.

Contact form

When you contact us, we use your name, email address, business details and message to reply. We don't add you to marketing emails. Please don't include passwords, payment details or sensitive client information.

Google user data

A business can choose to connect its Google account so that each online class session gets its own Google Meet link.

What we access

With your permission, Confirva creates, updates and deletes calendar events, each with a Google Meet link, for your class sessions. We ask only for the calendar.events permission and read your account's email address to show which account is connected. We do not read your other events, contacts or email.

What we store

Encrypted access tokens, and for each session the Meet link and calendar event ID. The Meet link is shared only with people who book that session and with your team. It is never shown publicly.

How we use it

We use this data only to make, change and remove Meet links for your class sessions. We do not sell it, use it for advertising, or use it to train AI or machine learning models.

Who we share it with

Meet links are shared with the people who book the session and your team. Session details are sent to Google to create the event. Our hosting and email providers process the data only to provide their service to us. We disclose it to authorities only when the law requires. We never share your Google tokens, and we never sell or transfer Google user data to anyone else, including advertisers and data brokers.

Google user data is never sent to any AI or machine learning service, and is never used to create, train or improve AI or machine learning models.

How we protect it

All data is sent over HTTPS. Google tokens are encrypted when stored, used only by our servers, and never shown to anyone. Only people allowed to manage your business settings can connect or disconnect Google. Disconnecting revokes our access and deletes the tokens straight away.

How to disconnect

In the dashboard, open Settings › Online classes and choose Disconnect Google, or remove Confirva's access from your Google Account at myaccount.google.com/connections. To ask us to delete the Meet links we hold, email admin@confirva.com.

Confirva's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Changes

We may update this policy. The date at the top shows the latest version, and we will tell account owners about significant changes.