Privacy Policy

The data controller for BOOKFLO is BOOKFLO, operating bookflo.app. Contact: hello@bookflo.app.

Where a salon or studio uses BOOKFLO to take bookings, that business may also be a controller of their clients’ booking data. BOOKFLO processes that data on their behalf as a processor for the booking service.

Depending on how you use BOOKFLO, we may process:

• Account data — name, email, password (hashed), business name, and onboarding details you provide.
• Booking data — client name, contact details, service, time, and related notes entered through a booking page.
• Usage and device data — pages visited, approximate location from IP, browser type, and similar technical logs needed to run and secure the service.
• Support messages — content you send to hello@bookflo.app.

We process data to:

• create and manage accounts, trials, and subscriptions;
• power branded booking pages and calendars;
• send transactional messages (for example booking confirmations);
• secure, debug, and improve bookflo.app;
• respond to enquiries and meet legal obligations.

Our usual legal bases under UK GDPR are contract (providing the service you ask for), legitimate interests (running a secure SaaS product), and consent where we ask for it (for example optional marketing).

We use essential cookies and similar storage that are necessary for the site and demo sessions to work (for example keeping you signed in to a prototype dashboard). We do not run advertising trackers in this prototype. If non-essential cookies are added later, we will update this notice and, where required, ask for consent.

We do not sell personal data. We may share data with infrastructure and email providers who process it for us under contract, or if the law requires disclosure. Demo accounts on this prototype are for product evaluation and should not be used for real client records.

We keep account and booking data while your subscription or trial is active and for a reasonable period afterwards for backups, disputes, and legal retention. You can ask us to delete account data where we are not required to keep it.

Under UK data protection law you may have rights to access, correct, delete, or restrict processing of your personal data, to object to certain processing, and to data portability. You may also complain to the Information Commissioner’s Office (ICO). To exercise rights, email hello@bookflo.app.

If we use providers outside the UK, we will rely on appropriate safeguards (such as UK adequacy regulations or standard contractual clauses) where required.

Questions about this policy: hello@bookflo.app · bookflo.app

Last updated: 31 October 2026.