Privacy notice
1. Two different roles
- If you book with a business (a barber, salon, nail studio…) on a BookedTik site: that business decides how your data is used and is responsible for it (it is the "controller"). BookedTik runs the booking system for them (we are their "processor"). See the privacy notice on that business's own booking site, and contact the business first with questions. If you contact us, we'll pass your request to them.
- If you run a business on BookedTik, or visit bookedtik.com: BookedTik is responsible for your data (we are the controller). The rest of this notice explains how.
2. Who we are
[BookedTik owner's legal name or company name] of [registered address][, company number …]. Contact: [support email], or the Help & support box in your app. [ICO registration number]
3. What we collect about business owners and staff
- Account details: your name, email, phone (optional), password (stored scrambled by Google), business name, address, country, time zone.
- Plan and billing: your plan status and invoices. Card details are handled by Stripe and never reach us.
- Support: messages you send us and our replies.
- Technical: sign-in records, error and crash reports, and basic logs of requests (including IP address) to keep the service secure. We use your IP address to stop too many sign-ups from one place.
4. Why we use it (and our legal reason)
| Use | Legal reason |
|---|---|
| To provide your booking site and account | Our contract with you |
| To bill your plan and send account emails (trial ending, payment problems, receipts) | Our contract with you; legal obligations (tax records) |
| To answer support messages and send announcements about the service | Our contract with you; legitimate interests (keeping you informed) |
| To keep BookedTik secure and prevent abuse | Legitimate interests |
We don't sell your data and don't use it for advertising.
5. Who we share it with
Only the companies that help run BookedTik (Google, Stripe, Resend, Cloudflare — see the list and locations in our data processing terms), professional advisers, and authorities where the law requires it.
6. How long we keep it
- Account data: while your account is open. If your plan ends, your site is paused and kept for 12 months (we email you before), then deleted.
- Sign-ups never confirmed by email are removed after 48 hours.
- Invoices and payment records: 6 years, as tax law requires.
- Support messages: 2 years after the last message.
7. Your rights
You can ask to see, correct or delete your data, to object to or restrict how we use it, or for a copy to take elsewhere. Write to us using the contact above; we'll answer within a month. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113) or your local data protection authority — we'd appreciate the chance to help first.
8. Changes
We'll update this notice when things change and show the new date at the top.