Booksy logo

Privacy Policy - Booksy

This Privacy Policy provides detailed information regarding the processing of personal data by Booksy UK LTD, a limited liability company with registered address at Ealing Cross, 1st floor, 85 Uxbridge Road, London W5 5TH, United Kingdom (hereinafter referred to as “Booksy,” “Controller,” or “we”). This policy applies to the extent that personal data is processed by us as a data controller within the meaning of Article 4(7) of the United Kingdom General Data Protection Regulation (“UK GDPR”).

Booksy has appointed a Data Protection Officer (DPO), who can be contacted via email at gdpr.gb@booksy.com or in writing at the address provided above.

If you have any questions regarding the processing of your personal data by us, you may contact us via email at gdpr.gb@booksy.com or by post at the above address.

If you are a user of the Booksy or Booksy Biz platform or a business partner, you can find detailed information regarding the processing of your personal data in the Booksy Biz Privacy Policy.

Click below to access the information clauses, which provide details about the purposes, scope of data, processing periods, and your rights regarding the processing of your data by Booksy:

I. General Information on Data Processing in the Booksy Application

To keep our communication clear, we remind you that under the UK GDPR:

Definition

Description

Data Controller

A person, company, or institution that determines the purposes and means of processing personal data. The controller is responsible for compliance with data protection rules and makes all key decisions regarding the data.

Data Processor

A person or company that processes personal data on behalf of the controller under its instructions. The processor does not independently decide the purposes or means of data processing.

Personal Data

Any information relating to an identified or identifiable natural person, such as name, surname, address, telephone number, email, image, or residence address.

Data Processing Agreement

An agreement between the data controller and the data processor that defines how personal data should be protected and specifies the rights and obligations of both parties regarding data processing.

Processing of Personal Data

Any operation or set of operations performed on personal data, such as collection, recording, use, transfer, or deletion. Any use of personal data in any way constitutes processing.

We would like to inform you that:

  1. Booksy places a strong emphasis on respecting your privacy.
  2. As a Customer, you are required to keep your personal data up to date, particularly the data in your Profile, Account, or within the System.
  3. If you choose to use a Partner's services and make a booking for an appointment or service through the Application, Booksy will share your personal data with the relevant Partner to the extent necessary for the performance of the selected service. The Partner will then process your personal data as an independent data controller in order to fulfil the contract for the provision of the chosen service. The Partner assumes full responsibility for this data processing.
  4. You may also separately provide the Partner with consents for processing your personal data for specific purposes of your choosing.
  5. Additional purposes for which the Partner may process your personal data will depend on the lawful basis identified by the Partner for such processing under the UK GDPR. These bases may include, for example, your explicit consent, the Partner’s legitimate interest, or the performance of legal obligations by the Partner.
  6. For its own purposes (e.g., marketing activities), the Partner may use tools provided by Booksy, including tools for sending you marketing messages with recommendations or promotions, provided you have given your consent for such communication. Please note that for this type of processing, the Partner acts as the data controller and assumes full responsibility, while Booksy merely provides the necessary tools (e.g., messaging systems, calendar management systems for the Partner).
  7. When creating an Account, you may voluntarily provide consents relating to the processing of your personal data and electronic communication.
  8. Given that the core functionality of Booksy involves Service Bookings, which require confirmation of the booking and the scheduled appointment time, after making a booking, you will receive notifications via the System in the form of email, push notifications, or SMS messages containing these confirmations. These notifications do not contain any marketing or commercial content but are limited to information regarding your booking.
  1. **General Information About Cookies **Booksy uses cookie technology and similar technologies within its Application and on its website. This means that when you use our platform (either via the website or mobile application), various types of information are exchanged between your device and the Booksy server. Information about you is collected regardless of whether you are a Partner as defined in the Terms of Service for the Booksy Application. The determining criterion is your visit to our platform. Cookies are small data files stored on users' terminal devices. They are used, for example, to customize the display of our website to your preferences (e.g., remembering the language setting you selected). When you access our platform and provide your consent, where required (as explained below), our server stores cookies on your terminal device. Upon your next visit, the server reads the information stored in the cookies on your device and adjusts the website display according to your browser settings. Similar technologies are used primarily to avoid storing files directly on your terminal device (e.g., phone, tablet, or computer). Instead, information is stored on a secure server and linked to a unique identifier assigned to you for the duration of your visit to our platform. The tools employed by Booksy include cookies as well as other similar technologies, such as: pixels (embedded software codes within a website that allows the entity managing the pixel to track user activity), SDKs (software that collects technical data on how you use an application) mobile device identifiers (unique markers that allow the identification of your mobile device and the display of personalized advertisements (e.g., AdID for Android and IDFA for iOS), digital fingerprinting (a method that identifies and tracks your device (also referred to as a digital fingerprint). These technologies are used in cases where cookies may not be suitable (e.g., in mobile applications). For simplicity, these technologies will be collectively referred to as “cookies” throughout this policy. Some of the information collected through these technologies may be classified as personal data under the UK GDPR. More details on this are provided later in this policy. In such cases, the processing of your personal data will be governed by the provisions outlined in the information clause linked in the Privacy Policy above. This includes information regarding your rights and the transfer of personal data outside the UK or European Economic Area (EEA). Booksy requires your consent to store or access information (cookies) on your device unless the cookies are strictly necessary to provide electronic services (e.g., displaying content). You may withdraw your consent at any time. You can do this via the cookie banner shortcut on our platform (a padlock symbol on a white background at the bottom left of the screen), or by changing your browser settings. Instructions for cookie management in popular browsers: Google ChromeMozilla FirefoxOperaSafariFor more details on modifying browser settings, blocking, or filtering cookies, visit:
    http://www.aboutcookies.org/ or http://www.cookiecentral.com/faq/.
  2. **Purposes of Using Cookies **Booksy uses cookies to:
    1. Adjust the platform’s appearance to user preferences and device specifications,
    2. Ensure user security,
    3. Improve website efficiency and identify potential improvements for user experience,
    4. Secure access and prevent breaches (e.g., anti-spam measures, bot protection),
    5. Perform statistical and analytical activities,
    6. Conduct marketing activities, including personalizing displayed content based on user interests.
  3. **Scope of Information Collected Through Cookies **Cookies collect data on how you use our platform. As noted above, some of this data may be considered personal data under UK GDPR, particularly if you are logged into one of our platforms (Booksy/Booksy Biz). Collected data may include:
    1. Technical data: IP address, MAC address, device type/model, unique device identifier, browser type, operating system, screen resolution, app version.
    2. Session data: Time and duration of your visit, pages viewed, clicked elements, time spent on specific pages.
    3. Preference data: Language and location settings, saved choices (e.g., cookie consent).
    4. Behavioral data: Browsing history, interaction history, information on previous visits, stage of service booking.
    5. Authentication data: Login session details (e.g., session tokens), information enabling you to stay logged in.
    6. Other data: Referring links, displayed ads, location data (based on IP address).
    7. If you are logged into the Application, we may combine the above data with information processed as part of your account.
  4. **Types of Cookies
    **Cookies used on our platform can be categorized by the following characteristics:
    1. Storage Duration:
      Persistent Cookies: Stored on your device for a specified time, even after you close your browser.
      Session Cookies: Temporary cookies that exist only during your browser session and are deleted when the session ends.
    2. Origin:
      First-party Cookies: Set directly by Booksy.
      Third-party Cookies: Set by external entities providing services on our platform.
    3. Purpose:
      Essential cookies: These cookies are necessary to ensure the functionality of our platform, its optimization, and the security of users. Booksy does not require your consent to store or access these cookies on your device. If you block or delete these cookies, your ability to use our platform may be hindered, and in some cases, access may become impossible. The legal basis for processing personal data collected via essential cookies is Article 6(1)(b) of the UK GDPR (performance of a contract) and Article 6(1)(f) of the UK GDPR, where Booksy’s legitimate interest is to ensure the security of users and the proper functioning of our platform. Functional cookies: These cookies facilitate your use of our platform, particularly by remembering your preferences. Blocking or deleting these cookies should not prevent you from using the platform, but it may reduce the quality of your experience.Booksy requires your consent to store functional cookies on your terminal device. The legal basis for processing personal data collected via functional cookies is Article 6(1)(f) of the UK GDPR, i.e., our legitimate interest in improving your experience when using our platform. Analytical cookies: These cookies do not affect your ability to use our platform. They are used to collect information about user visits and behavior, which helps Booksy develop and improve its services.Booksy requires your consent to store analytical cookies on your terminal device. The legal basis for processing personal data collected via analytical cookies is Article 6(1)(f) of the UK GDPR, i.e., our legitimate interest in analyzing user preferences, planning service development, and testing new features. Marketing cookies: These cookies enable Booksy to collect information about how you use our platform, as well as other information associated with you, to display advertisements tailored to your interests. Booksy requires your consent to store marketing cookies on your terminal device. The legal basis for processing personal data collected via marketing cookies is Article 6(1)(f) of the UK GDPR, i.e., our legitimate interest in delivering marketing communications and advertisements, including personalized ads, to better align with your preferences. If the displayed marketing information pertains to the products or services of Booksy’s partners, these partners do not participate in the processing of your personal data.
  5. **Retention Period for Cookies **The storage period for cookies is specified in our cookie banner, which is displayed to you upon your first visit to our platform. Additionally, you can always access it by clicking on the padlock symbol within a circle on a white background located at the bottom left corner of the screen. Personal data collected through cookies is retained as long as the legal basis for its processing remains valid and for the period necessary to achieve the purposes defined by Booksy in this Privacy Policy. Detailed information regarding the data retention periods can be found in the information clause provided at the beginning of this Privacy Policy.
  6. **Third-party Tools **Booksy may use external services and tools to enhance platform security and offer analytics and advertising services. For marketing activities and ad presentation, Booksy uses tools such as:
    1. Google Ads, Branch, Appsflyer (cookies and SDKs),
    2. Facebook, Microsoft Ad, TikTok, Pinterest, Snapchat, Reddit (cookies and tracking pixels).
  7. **Right to Lodge a Complaint
    **You have the right to lodge a complaint regarding the processing of your personal data through cookies with the supervisory authority – Information Commissioner's Office.

Last update: March 17, 2025