← Back to home
Privacy Policy
Last updated: March 2026
🔒 We keep this simple: we only collect what we need to run your account. We never sell your data or your clients' data. Ever.
1. Who We Are
BookMyBeauty is a booking management platform for UK beauty professionals, operated at bookmybeauty.co.uk.
For the purposes of UK GDPR, BookMyBeauty is the data controller for information relating to your professional account. You are the data controller for your clients' personal information stored within your account.
If you have any questions about this policy, contact us at hello@bookmybeauty.co.uk.
2. Information We Collect
When you register:
- Full name, business name, email address, phone number
- Your beauty specialisms (e.g. nails, lashes, hair)
- Password (stored as a secure bcrypt hash — we cannot see it)
When you use the platform:
- Appointment details you create (dates, times, notes)
- Client records you add (name, email, phone, notes)
- Services and pricing you set up
- Business documents such as your Terms & Conditions
- Financial records (income and expenses you log)
- Blocked dates and availability settings
Automatically:
- Standard server logs (IP address, pages visited, browser type) — retained for up to 30 days for security purposes
- Session cookie to keep you logged in
3. How We Use Your Information
- To create and maintain your BookMyBeauty account
- To provide the booking management service you signed up for
- To send you account-related emails (welcome, receipts, password reset, subscription notices)
- To process subscription payments (when Stripe billing is introduced)
- To respond to support requests
- To improve the platform based on how it is used
We do not use your data for advertising, profiling, or any purpose beyond operating the service.
4. Your Clients' Data
When you store client names, email addresses, phone numbers, and appointment details in BookMyBeauty, you are the data controller for that information under UK GDPR. BookMyBeauty acts as your data processor.
This means:
- We only access client data to provide the service to you
- We never contact your clients for our own marketing purposes
- We never sell or share client data with third parties
- You are responsible for having a lawful basis to hold and process your clients' data
- You should have your own Privacy Policy displayed on your booking page, which you can create in the Documents tab
5. Cookies
BookMyBeauty uses the following cookies:
- Session cookie — keeps you logged in during your visit. Expires when you close your browser or log out.
- Theme preference — remembers if you prefer light or dark mode (stored in localStorage, not a traditional cookie).
- Cookie consent — remembers that you have acknowledged this notice (stored in localStorage).
We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
6. Data Sharing
We do not sell, rent, or share your personal data with third parties for their own purposes.
We may share data in the following limited circumstances:
- Hosting provider — our servers are provided by StackCP. Data is stored on servers in the UK/EU.
- Payment processor — when subscription billing is introduced, payment data will be handled by Stripe. We will not store card details ourselves.
- Legal requirement — if required to do so by law or a court order.
7. Data Retention
- Active account data is retained for as long as your account is open.
- If you close your account, your data is retained for 30 days then permanently deleted.
- You can request immediate deletion by emailing hello@bookmybeauty.co.uk.
- Server logs are retained for up to 30 days.
8. Your Rights Under UK GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data ("right to be forgotten")
- Portability — request your data in a portable format
- Restriction — ask us to restrict processing of your data
- Object — object to processing based on legitimate interests
To exercise any of these rights, email us at hello@bookmybeauty.co.uk. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO).
9. Security
We take reasonable technical measures to protect your data, including:
- HTTPS encryption on all pages
- Passwords stored as bcrypt hashes (never in plain text)
- Multi-tenant data isolation — each professional can only access their own data
- Time-limited password reset tokens
No system is completely secure. If you suspect unauthorised access to your account, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you by email of any significant changes. The date at the top of this page shows when it was last updated.