Privacy Notice

We process account and business details, staff and service records, customer names and contact details, appointment and waitlist records, consent choices, booking communications, payment references, subscription records, and service security logs.

We use information to provide the service, create and manage bookings, communicate about appointments, process subscriptions or enabled payment features, prevent fraud and abuse, provide support, meet legal obligations, and improve the reliability of the service.

Information is available to the merchant that operates the booked service and to service providers that help run Book My Hands, such as hosting, authentication, email, messaging, and payment providers. We share only what is needed for the relevant service, legal requirement, or security purpose.

Customer and booking identity data is retained for 24 months after the last relevant booking or account closure. Messaging metadata is retained for 12 months. Consent evidence and privileged audit events are retained for 24 months. Financial, refund, and dispute records are retained for 7 years after the transaction or dispute closes. Security logs are retained for 90 days and encrypted backups for 35 days.

At the end of the applicable period, we delete or irreversibly anonymise direct identifiers, including names, contact details, WhatsApp identifiers, addresses, notes, tags, custom values, files, images, external identifiers, lookup hashes, and search indexes. A legal hold, active dispute, fraud inquiry, or legal obligation may require us to retain the minimum relevant records for longer.

You may ask the relevant merchant about a booking, service, or customer record. You may contact Book My Hands about access, correction, deletion, or a privacy concern at [email protected]. We may need to verify your identity and may retain limited information where required for a transaction, dispute, security incident, or legal obligation.

We use reasonable administrative, technical, and organisational safeguards designed to protect information. No system can guarantee absolute security. We may update this Notice and will publish the new version and effective date here.

Privacy contact: [email protected]