Privacy Policy for Website
Effective Date: 05-08-2026
1. Who We Are and What This Policy Covers
Section titled “1. Who We Are and What This Policy Covers”This policy explains how Bookora (“we,” “our,” or “us”) handles personal data on the Bookora website and on the public booking pages it hosts. It covers the website only. How specialists use the Bookora mobile app is covered by the Mobile App Privacy Policy.
When you book an appointment, we share your booking with the specialist you selected so that they can prepare for and provide the service. Specialists are independent businesses, not Bookora staff. Each specialist is an independent controller of the appointment records they keep, and is responsible for how they use that information and for answering privacy requests about it. Their available contact details appear on their booking page — contact them directly about an appointment, or contact us if you need help reaching them about a privacy request.
Contact details are in Section 12.
2. Information We Use
Section titled “2. Information We Use”| Category | Examples | Where it comes from |
|---|---|---|
| Booking information | The specialist, service, location, and time you select, plus the name, phone number, social media profile, comments, and reminder preference you submit | You |
| Time zone | Your time zone, so appointment times are shown and stored correctly | Your browser |
| Public specialist information | A specialist’s name, profile photo, phone number, Instagram account, services, prices, addresses, and available time slots | The specialist |
| Preferences | Your cookie choice, language, and appearance settings, stored on your device | You |
| Technical and security | Browser settings, screen resolution, interactions with the site, your IP address in our server request logs, and the data Cloudflare Turnstile needs to tell a person from a bot | Collected automatically |
| Website statistics | Page views and interactions measured by Umami, without cookies, a persistent browser identifier, a stored IP address, or cross-site tracking | Collected automatically |
| Optional browser diagnostics | Error, performance, and session diagnostics through Sentry, only if you consent | Collected with your consent |
| Support | The messages and details you send us | You |
IP addresses. Your IP address is recorded in our server request logs, which we keep for up to 30 days for security, abuse prevention, and troubleshooting. An IP address indicates an approximate region rather than a precise location, and we do not use it to track you across websites. The Umami website statistics described above do not store IP addresses.
We use this information to display booking pages, submit and manage appointment requests, send the reminders you asked for, remember your choices, keep the booking flow secure, fix problems, provide support, and meet our legal obligations. We do not sell personal data and do not use it for behavioural advertising.
3. Why We Process It — Purposes and Legal Bases
Section titled “3. Why We Process It — Purposes and Legal Bases”| Purpose | Legal basis |
|---|---|
| Submit and manage the appointment you request, and answer your support messages | Performance of a contract, or steps taken at your request |
| Send appointment reminders over SMS, WhatsApp, Telegram, or another messaging channel | Your consent, withdrawable at any time |
| Optional browser diagnostics through Sentry | Your consent, given through the cookie banner |
| Cookieless website statistics, security, spam and abuse prevention, and troubleshooting | Our legitimate interests |
| Complying with legal obligations and handling legal claims | Legal obligation, or our legitimate interest in legal claims |
You do not have to provide booking details, but we cannot submit an appointment request without the required fields. Withdrawing consent does not affect processing already carried out lawfully, or processing that rests on one of the other bases above.
4. What Is Public on a Booking Page
Section titled “4. What Is Public on a Booking Page”Booking pages are public and can be opened without an account. A page shows what the specialist chose to make public: their name, profile photo, phone number, and Instagram account; the addresses and services they made bookable; and their free time slots. A team page lists the owner and their active team members so you can pick a specialist.
Only free slots are published — the calendar entries behind them, and the clients and notes attached to them, are not part of the page. Booking details you submit are not displayed publicly either; they go to the specialist you selected.
Because these pages are public, anyone can view or share them, and search or caching services may keep a copy of information that was publicly available. See Online booking.
5. Who We Share It With
Section titled “5. Who We Share It With”We share personal data only where it is needed to provide the service, or where law permits or requires it. Recipients may include:
- The specialist you selected, and the team owner who administers that specialist’s Bookora account where the specialist is part of a team.
- Messaging providers, to deliver the appointment reminders you consented to over SMS, WhatsApp, Telegram, or another channel. The channels available to you may vary by location and applicable law.
- Cloudflare, which provides the Turnstile challenge that protects the booking form from automated abuse. See the Cloudflare Privacy Policy.
- Umami, for cookieless website statistics, and Sentry, for the optional browser diagnostics you consent to.
- Service providers that support hosting, storage, security, and customer support. We have data processing agreements in place that require them to protect the data and use it only for the purposes we specify.
- Authorities, professional advisers, or a business successor, where legally necessary and subject to appropriate safeguards.
Service providers may use the information only to perform their services for Bookora or as otherwise permitted by law, and they have their own privacy policies governing their operations.
6. Cookies and Similar Technologies
Section titled “6. Cookies and Similar Technologies”Essential technologies remember the choices you ask us to keep and protect the booking flow. Umami provides cookieless website statistics. Optional Sentry browser diagnostics stay off until you consent — you can reject them and still make a booking, and you can change your choice at any time through Cookie preferences in the website footer.
See the Website Cookie Policy for the full list and durations.
7. How Long We Keep It
Section titled “7. How Long We Keep It”| Data | Retention |
|---|---|
| Booking information held by Bookora | Stored in the specialist’s Bookora account and kept until the specialist deletes that account, or until you ask us to delete your information |
| Booking records held by the specialist | Kept by the specialist while needed to manage the service and meet their legal obligations |
| Your cookie choice | 12 months |
| Language and appearance preferences | On your device until you change them or clear site data |
| Diagnostic and troubleshooting logs | Up to 30 days |
| Support correspondence, and records needed for legal claims | For the period required |
| Irreversibly anonymised or aggregated statistics | May be retained, as they no longer identify you |
You can ask us to delete the personal information we hold about you at any time. We will remove it from our active systems within 30 days of your request, except where law permits or requires us to keep it. Data may remain in protected backups until the backup cycle completes.
8. International Transfers
Section titled “8. International Transfers”Bookora’s infrastructure and some of our service providers are located outside the European Economic Area and the United Kingdom. When personal data is transferred out of the EEA or UK, we rely on one of the following safeguards:
- Adequacy decisions issued by the European Commission or the UK Government for the destination country.
- EU Standard Contractual Clauses (2021/914) and, for UK transfers, the UK International Data Transfer Addendum or IDTA.
- Additional technical and organisational measures — including encryption in transit and at rest and access controls — where the destination country has no adequacy decision.
You can request a copy of the safeguards in place by contacting us.
9. Your Rights
Section titled “9. Your Rights”Depending on where you live, you have the right to access your personal data, correct inaccurate information, request erasure, receive a copy in a machine-readable format, object to processing based on legitimate interests, restrict processing in certain circumstances, and withdraw consent — including consent to reminders and to optional browser diagnostics. You may also complain to your data-protection authority.
Contact the specialist directly about the appointment records they hold, or email support@bookora.me and we will help. We may need to verify your identity, and we may keep information where law permits or requires it.
Automated decisions. We do not make decisions about you solely by automated means that produce legal effects concerning you or similarly significantly affect you, and we do not profile you.
10. Security
Section titled “10. Security”We implement industry-standard technical and organisational measures to protect personal data, including encryption of data in transit, access controls that restrict data to authorised personnel, regular security review, and ongoing data protection training.
No method of transmission over the internet or electronic storage is 100% secure. In the event of a personal data breach we will act in accordance with applicable data protection laws, which may include notifying the relevant supervisory authorities and affected individuals as required.
11. Children
Section titled “11. Children”We do not knowingly collect personal information from children under 16, and the website is not intended for anyone under 16 to submit a booking independently. Where a specialist offers a service to a child, a parent or guardian should make the booking. If you believe a child has provided us with personal information, contact us so we can remove it.
12. Changes and Contact
Section titled “12. Changes and Contact”We may update this policy when the website or legal requirements change. We will publish the current version and its effective date on this page and give additional notice where required by law.
For questions about this policy, privacy requests, or complaints:
Email: support@bookora.me