Privacy Policy

Last updated: April 2026

1. Who we are

Appointy Cloud ("we", "us", "our") is a booking and appointment management platform operated at appointy.cloud. We act as a data processor on behalf of businesses ("Tenants") who use our platform, and as a data controller for our own platform operations.

2. What data we collect

Business owners (Tenants): Name, email address, business name, industry, and any configuration data you provide (services, availability, branding).

Customers making bookings: Name, email address, phone number (optional), and any notes provided during the booking process. This data is collected on behalf of and controlled by the Tenant business.

Automatically collected: IP address, browser type, device information, pages visited, and cookies necessary for the platform to function.

3. How we use your data

  • To provide and operate the booking platform
  • To send booking confirmations, reminders, and notifications
  • To authenticate users and manage sessions
  • To process payments (via Stripe — we do not store card details)
  • To improve the platform and fix issues
  • To comply with legal obligations

4. Data sharing

We do not sell your data. We share data only with:

  • Tenant businesses — customer booking data is shared with the business you booked with
  • Email providers — to send transactional emails (confirmations, reminders)
  • Payment processors — Stripe, for subscription billing
  • Law enforcement — if required by law

5. Data retention

Booking data is retained for as long as the Tenant account is active, plus 12 months after account closure. You may request deletion of your data at any time by contacting us.

6. Cookies

We use essential cookies only:

  • Session cookie — to keep you signed in (admin users)
  • Privacy consent — to remember your cookie preference

We do not use tracking cookies, analytics cookies, or advertising cookies.

7. Your rights (GDPR)

Under UK GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure of your data
  • Object to processing
  • Data portability
  • Lodge a complaint with the ICO

To exercise any of these rights, email us at privacy@appointy.cloud.

8. Data security

We implement appropriate technical and organisational measures including: encrypted connections (TLS/SSL), data isolation per tenant, rate limiting, input validation, secure session management, and audit logging.

9. Contact

For privacy enquiries, contact us at privacy@appointy.cloud.