GDPR and client data: what you and we take care of
How Bitbooking handles your clients' data, who's responsible for what, where the data is stored and how to add your own privacy policy to your booking page.
On this page
When clients book with you online, you process personal data: names, email addresses, phone numbers and sometimes more. The GDPR sets the rules for that. Here's what Bitbooking takes care of and what you keep an eye on yourself.
Who's responsible for what?
| Role | Who | What it means |
|---|---|---|
| Controller | You, the salon | You decide which data you ask clients for and what you use it for. |
| Processor | Bitbooking | We store and process the data for you, to make your bookings work. We don't use it for anything else and never sell it. |
This is also set out in our terms and conditions and privacy policy. Your client data stays yours.
What Bitbooking takes care of
- All data is stored within the European Union.
- Connections are encrypted and passwords are stored encrypted.
- With online payments, Stripe processes the payment. Bitbooking never sees or stores card or bank details.
- We protect your booking page against abuse. See How we protect you against abuse.
What you keep an eye on
- Don't ask more than you need, especially in digital forms with health questions. See Digital forms.
- Share logins carefully. Use a staff account for your team, so they can't access your client list and settings. See Staff accounts.
- Keep exports safe. A CSV export of your clients contains personal data.
- Be careful with your calendar link. The calendar subscription link contains client details. See See appointments in your own calendar.
Your own privacy policy and terms
Your booking page links to a privacy policy, terms and conditions and cookie policy. By default Bitbooking shows its own standard text there. Want to show your own, for example including your cancellation terms?
Step 1: Go to Businesses, click Manage next to your business and scroll to Legal texts on the Overview tab.
Step 2: Paste your text under Privacy policy, Terms and conditions and/or Cookie policy.
It's shown as plain text; line breaks are kept. Leave a field empty to use Bitbooking's standard text.
Step 3: Click Save changes.
When a client asks about their data
Clients who want to exercise their rights, such as access or deletion, come to you first. We help you respond.
- Access: open the client's profile under Customers. It shows all their appointments and details.
- Deletion: you can't delete a client yourself in the dashboard. Email info@bitbooking.nl with the client's email address and we'll help within one working day.
Does Bitbooking use my client data for marketing?
No. We only use your clients' data to make your bookings work, and we never sell personal data.
What happens to client data if I stop?
If you delete a business, its appointments and booking history are erased for good. See Delete a business or your account.
Was this article helpful?