This Privacy Policy provides detailed information regarding the processing of personal data by Booksy UK LTD, a limited liability company with registered address at Ealing Cross, 1st floor, 85 Uxbridge Road, London W5 5TH, United Kingdom (hereinafter referred to as “Booksy,” “Controller,” or “we”). It applies to the extent that we process such data as a data controller within the meaning of the United Kingdom General Data Protection Regulation (“UK GDPR”).
Booksy informs that a Data Protection Officer (DPO) has been appointed and can be contacted via email at gdpr.gb@booksy.com or in writing at the Booksy address indicated above.
If you have any questions related to the processing of your personal data by us, please contact us via email at gdpr.gb@booksy.com or in writing at the address indicated above.
If you are a user of the Booksy service or the Booksy Customer Application, information regarding the processing of your personal data can be found in the Booksy Privacy Policy.
Click below to view the information clauses, which contain detailed information regarding the purposes, scope of data, and period of processing of your data by Booksy, as well as your rights in this regard:
General Information on Data Processing in the Booksy Biz Application
To keep our communication clear, we remind you that under the UK GDPR:
Controller: A person, company, or institution that decides the purpose and method of processing personal data. The controller is responsible for ensuring compliance with data protection rules and makes all key decisions regarding the data.
Data Processor: A person or company that performs certain tasks related to personal data on behalf of the controller. The data processor does not independently decide on the purpose or method of data processing.
Personal Data: Information that can identify a person, such as name, surname, address, phone number, email, image, or place of residence.
Data Processing Agreement: An agreement between a data controller and a data processor. It defines how data is to be protected and what may be done with the data. This agreement ensures that both parties understand and comply with data security requirements. The Data Processing Agreement between Booksy and you, as a Partner, forms part of the Terms of Service.
Processing of Personal Data: Any operation performed on personal data, such as collecting, recording, using, sending, or deleting. Any use of personal data in any manner constitutes processing.
We would like to inform you that:
- Booksy is the data controller for the personal data of Partners who are natural persons.
- To the extent that both Booksy and the Partner process the personal data of Customers for their own, independently determined purposes, they act as separate data controllers. Specifically, Booksy is the data controller for personal data processed in connection with Customers' accounts in the Customer Application, while the Partner is the data controller with regard to the provision of their services to Customers. In cases described in sections 4 and 7 below, Booksy will act as a data processor and process personal data on documented instructions from the Partner, who acts as the data controller for the personal data disclosed to Booksy for processing.
- Upon the confirmation of a Reservation, a service agreement is concluded between the Customer and the Partner for the provision of the Partner's services to the Customer. Additionally:
- The Customer may grant consent within the Customer Application for the Partner to process their personal data for purposes specified by the Partner, including marketing communication;
- Booksy provides the Partner, through the Application, with the Customer's personal data necessary for the provision of services to that Customer; and
- At this point, the Partner becomes the data controller of the Customer's personal data and is therefore obligated to comply with UK GDPR requirements, bearing legal responsibility for such compliance.
- In order for Booksy to provide services to the Partner via the Application, it is necessary for the Partner to entrust Booksy with the processing of the following categories of personal data:
- Personal data of Customers who have made Reservations,
- Personal data of the Partner’s customers who have entered into service agreements with the Partner outside the Application (e.g., directly at a salon operated by the Partner), if the Partner inputs such data into the Application,
- Personal data of individuals employed or engaged by the Partner (e.g., employees, collaborators, contractors) who use the Application,
- Personal data of Customers and the Partner’s customers who have consented to receiving marketing communication from the Partner.
- To facilitate this data processing as described above, the Partner and Booksy enter into a Data Processing Agreement (DPA).
- The Partner acknowledges that the termination of the Data Processing Agreement will result in Booksy being unable to provide services that require the processing of data for which the Partner is the data controller. Consequently, upon the termination of the DPA, Booksy’s obligations under the Service Agreement related to such data processing will cease.
- When the Partner uses tools available within the Booksy Services (e.g., appointment calendar, marketing tools), Booksy processes the Partner’s customer data on the Partner’s behalf, in accordance with the terms of the Data Processing Agreement.
- The purposes for which the Partner may process their customers' personal data will depend on the legal grounds for data processing that the Partner identifies in their capacity as a data controller.
- Booksy is not responsible for the scope of personal data processed by the Partner or for the legal compliance of such processing by the Partner. The detailed obligations of both parties in this regard are outlined in the Data Processing Agreement.
