Privacy policy

Businesses with an account

We process your name, email, business details, settings and payment details to provide and bill the service (performance of contract).

If you come to us via an ad and consent to it, we store which campaign brought you (e.g. utm data, ttclid, fbclid) to measure our ads.

Clients who book

When you book, we process your name, contact details, appointment details and any note on behalf of the business you book with. That business is the controller; we are the processor.

We email you confirmations, reminders and changes to your appointment.

Recipients

We use these processors: Vercel Inc. (hosting, EU/VS); Neon Inc. (database, EU (Frankfurt)); Clerk Inc. (auth, VS); Stripe Payments Europe Ltd. (payments, EU); Resend Inc. (email, EU/VS). Agreements cover security and, where needed, transfers outside the EU (standard contractual clauses / Data Privacy Framework).

With your consent we use TikTok and Meta pixels to measure ads (see the cookie policy).

Retention

Account data is kept while your account exists and then as long as the law requires (e.g. 7 years for invoices).

Appointment data is kept while the business is a customer, unless the business deletes it earlier.

Your rights

You can access, correct or delete your data, object, and take your data with you. Email [to be completed]. If you booked with a business, you can also contact that business.

You can file a complaint with the Dutch Data Protection Authority.

Security

Data is encrypted in transit and stored in the EU where possible. Links to manage your appointment are secret and only stored hashed.