Privacy Policy

My Appointment Booker("we", "us", "our") provides online booking software at https://www.appointmentbooker.co.uk. For the purposes of UK data protection law, we are the data controller for personal data relating to business accounts on our platform (owners and staff).

When a business uses our service to take bookings, that business is the data controller for its customers' booking data. We process that data on the business's instructions as a data processor.

Contact: info@appointmentbooker.co.uk

Business account holders — name, email address, password (stored securely hashed), business details, subscription and billing identifiers handled by our payment provider.

Staff users — name, email address, profile information added by the business, and login credentials.

End-customers booking with a business — name, phone number, email address, booking notes, optional reference images, and appointment details. This data is collected on behalf of the business operating the booking page.

Technical data — IP address, browser type, device information, and logs needed to operate, secure, and troubleshoot the service.

• Creating and managing business accounts and staff logins
• Providing booking pages, calendars, and admin tools
• Sending transactional emails such as booking confirmations, reminders, and staff invites
• Processing subscription payments and managing billing
• Storing uploaded images linked to bookings
• Monitoring performance, preventing abuse, and keeping the service secure
• Complying with legal obligations

We do not sell personal data. We do not use end-customer booking data for our own marketing.

We rely on contract to provide the service to business customers, legitimate interests to secure and improve the platform, and legal obligation where required. Businesses using our platform are responsible for identifying the correct lawful basis for processing their customers' booking data.

We use trusted third parties who process data only as needed to run the service, including:

• Stripe — subscription billing and payment processing
• Resend — transactional email delivery
• Railway — application hosting and managed database
• Railway Storage — secure file storage for uploaded images

These providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as standard contractual clauses or equivalent protections offered by the provider.

• Business account data is kept while the account is active and for a reasonable period afterwards for billing, support, and legal purposes
• Booking data is retained according to the business's use of the service and applicable deletion settings
• Reference images uploaded with bookings are automatically deleted after a defined retention period
• Server logs are retained for a limited period for security and troubleshooting

We use technical and organisational measures appropriate to the service, including encrypted connections (HTTPS), access controls, hashed passwords, and private object storage for uploaded files. No online service can be guaranteed completely secure.

Under UK GDPR, individuals may have rights to access, rectify, erase, restrict, object to, or port personal data, and to withdraw consent where processing is based on consent.

Business account holders — contact us at info@appointmentbooker.co.uk.

End-customers of a business — contact the business you booked with in the first instance. We will assist the business where we act as their processor.

You may also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We use essential cookies and similar technologies required for authentication, session management, and security. We do not use advertising cookies on the platform.

The service is intended for businesses and is not directed at children under 18. We do not knowingly collect personal data from children.

We may update this policy from time to time. We will post the current version on this page and update the "Last updated" date above.