Last updated · 26 June 2026

Privacy Policy

This policy explains what personal data BOOKD collects, why we collect it, how we use it, and the rights you have over it. It is written to satisfy the Data Protection (Bailiwick of Guernsey) Law 2017 and the UK GDPR.

1. Who is the controller

BOOKD is the data controller for client accounts on the BOOKD platform. When you book with a specific salon, that salon is the controller for the booking record, treatment notes and consultation forms; BOOKD acts as data processor for the salon. Contact us at privacy@bookd-it.com.

2. What we collect

Account: name, email, phone, password hash.
Booking: appointments, services, deposits, payment references.
Treatment data (salon): consultation answers, treatment photos (only with your consent), notes.
Device: IP address, browser, push notification token.
Marketing preferences: the notification channels you've opted into.

3. Why we use it

To take and manage your bookings (contract).
To send appointment reminders and confirmations (legitimate interest / contract).
To process deposits via SumUp or Stripe (contract).
To run loyalty, vouchers and referrals you've opted into (consent / contract).
To keep the service secure and prevent abuse (legitimate interest).
To comply with legal obligations (e.g. tax records for salons).

4. Who we share data with

The salon you booked with.
Payment processors (SumUp, Stripe).
Email and messaging providers (Resend, WhatsApp).
Hosting and database infrastructure (Supabase / Lovable Cloud).
Authorities where legally required.

We never sell your data.

5. International transfers

Some of our processors are located outside Guernsey and the UK. Transfers are made under appropriate safeguards (adequacy decisions or standard contractual clauses).

6. How long we keep data

Account and booking records are kept while your account is active and for up to 6 years after closure (to meet tax and dispute-resolution requirements). Treatment photos are deleted when the salon or client deletes them, or when an account is closed.

7. Your rights

You have the right to access, correct, delete, restrict and port your data, and to object to processing. You may withdraw consent at any time without affecting the lawfulness of prior processing. Email privacy@bookd-it.com to exercise these rights. You may also complain to the Office of the Data Protection Authority in Guernsey, or to your local supervisory authority.

8. Cookies

We use first-party cookies and local storage strictly to keep you signed in, remember your salon and store your preferences. We do not use third-party advertising cookies.

9. Security

Data is encrypted in transit and at rest. Access is restricted by role. Payment card data is never stored on our servers.

10. Changes

If we make material changes to this policy we will notify you in the app at least 14 days before they take effect.