Privacy policy

Who we are

Bookable is a booking app for one-person businesses, run from the UK. Contact for anything in this policy: websitebuilds01@gmail.com.

Who is responsible for what

• Business owners (barbers, nail technicians, dog walkers and similar): for your own account details, Bookable is the “controller”, meaning we decide how they are used.
• Clients who book: the business you book with is the “controller” of your booking details and decides how to use them. Bookable only stores them on that business’s behalf (we are the “processor”) and does not use them for anything else.

What we collect

• Owner account: email address, a scrambled (hashed) password, business name, town, phone number, services, prices, opening hours and the other settings you choose.
• Bookings and clients: a client’s name and mobile number, the service, date and time, price, any note or answer they give (for example a dog’s name), and the status of the booking. Please do not put health or other sensitive information in notes.
• Calendar link (optional): an owner can switch on a private calendar link so their bookings, including client names, numbers and notes, appear in the calendar app they choose (for example Google or Apple). Anyone who has the link can see those bookings, so owners should keep it private and can replace it at any time.
• Owner alerts: when someone creates an account, signs in or pays, Bookable's owner gets a private message on Telegram with a masked email (like j***@gmail.com) and, for payments, the business name and amount. No client names, phone numbers or booking details are ever sent. Telegram is a separate service.
• Payment records: if you pay Bookable, we record the amount, date and method (for example bank transfer) against your account. We do not store card or bank details. These records are kept for up to 6 years for accounting and tax, even after an account is deleted.
• Public listing (only if the owner switches it on): the business name, town, type and booking page appear in Bookable search. Nothing else is shown, and it is off by default.
• Sign-in cookie: one essential cookie that keeps you signed in. It is not used for tracking or advertising, so no cookie banner is needed.
• Technical data: your IP address and, for bookings, the phone number used, kept for up to 24 hours purely to stop spam and abuse (for example, limiting how many bookings or sign-up attempts can be made).

We do not collect payment or card details. We do not use analytics or advertising trackers.

Why we use it, and our legal reason

• To run the service you signed up for: show free times, take bookings and let owners manage them. (Legal basis: contract.)
• To keep Bookable secure and stop abuse and double bookings. (Legal basis: legitimate interests.)

We do not sell data, do not share it for advertising, and do not use it to make automated decisions about you.

WhatsApp reminders

Bookable does not send messages itself. It opens WhatsApp on the owner’s phone with a message ready, and the owner chooses whether to send it from their own number. Owners should only message clients about their booking.

Who can see it

A business owner sees only their own bookings and clients. Nobody else can. Bookable is hosted by Cloudflare, which stores the data for us and may process it outside the UK under standard safeguards. The person running Bookable can technically access the database to keep the service working, and will not look at it except to fix problems or when the law requires.

How long we keep it

• Owner and booking data: until the owner deletes a booking or their account. Deleting an account removes the business, its bookings and its clients.
• Payment records (amount, date, method): up to 6 years, as required for accounts and tax.
• Sign-in sessions: until they expire or you sign out.
• Anti-abuse records (IP addresses, phone numbers used for bookings): deleted automatically within about 24 hours.

Your rights

Under UK GDPR you can ask to see your data, correct it, delete it, restrict or object to its use, or have it moved. Business owners can delete their account in the app. Clients should ask the business they booked with, or email us and we will pass it on or help. We will reply within one month. If you are unhappy, you can complain to the Information Commissioner’s Office at ico.org.uk.

Age and changes

Bookable is for people aged 13 and over. If we change this policy in a meaningful way we will update the date at the top.