1. Purpose of This Page
This page explains how Bookedtify handles data protection rights requests under the General Data Protection Regulation, UK GDPR, and similar privacy laws where they apply.
It should be read together with the Bookedtify Privacy Policy, Cookie Policy, Terms of Service, Provider Terms, and any provider privacy information that applies to a booked service.
2. Controller and Provider Roles
Bookedtify is generally the controller for platform account data, marketplace data, booking workflow data, platform security data, support data, reports, billing records, and administration records.
Independent providers may be separate controllers for personal data they receive through Bookedtify and then use to manage, deliver, follow up on, or legally document their own services. Providers are responsible for their own lawful use of client data outside the Bookedtify platform.
3. Your Rights
Depending on your location and applicable law, you may have the right to:
- Request access to personal data Bookedtify holds about you.
- Request correction of inaccurate or incomplete personal data.
- Request deletion of personal data where no lawful reason requires continued retention.
- Request restriction of certain processing.
- Object to processing based on legitimate interests, including certain profiling or direct marketing.
- Request a portable copy of data you provided to Bookedtify where portability applies.
- Withdraw consent where processing is based on consent, without affecting processing that happened before withdrawal.
- Complain to a data protection authority.
4. How to Submit a Request
Submit privacy or GDPR requests through the contact page or the privacy email shown in Bookedtify legal notices or your account.
Please include enough information for us to identify your account or booking, such as your account email, provider name, booking reference, or relevant dates. Do not send unnecessary sensitive information.
5. Identity Verification
Before acting on a privacy request, Bookedtify may need to verify your identity, authority, or relationship to the account or booking. This protects users from unauthorised access, deletion, or disclosure.
If a request relates to provider records, booking evidence, payment records, legal records, or another person's data, we may ask for additional context or limit what can be disclosed.
6. When Requests May Be Limited
Some requests may be refused, limited, delayed, or fulfilled only partly where allowed by law.
- Data may need to be retained for tax, accounting, payment, refund, chargeback, fraud-prevention, security, legal claim, enforcement, or consumer protection reasons.
- Data may include another person's personal data, provider business records, confidential investigation notes, security logs, or abuse-prevention signals.
- Deleting data may not cancel outstanding bookings, refund obligations, dispute obligations, provider payment obligations, platform fees, or legal duties.
7. Response Timing
Bookedtify aims to respond to valid privacy rights requests within the timeframe required by applicable law. Under the GDPR, this is generally one month, with possible extension where requests are complex or numerous.
We may contact you if we need more information to verify or process the request.
9. Provider-Created Guest Bookings
A provider may enter a client's name, email, or phone number when creating a booking on behalf of that client. Bookedtify processes that data to show the booking in the provider calendar, support booking administration, and maintain relevant records.
If you believe a provider entered your information incorrectly or unlawfully, contact Bookedtify and identify the provider or booking so the issue can be reviewed.
10. Contact
For GDPR or data protection questions, contact Bookedtify through the contact page and mark your message as a privacy or GDPR request.