How we collect, use and protect personal data across the Appointics booking platform.
Last updated · 26 October 2026
This Privacy Policy explains how Appointics ("Appointics", "we", "us" or "our") collects, uses, discloses and safeguards personal data when you use our website, booking platform and related services (the "Service"). By using the Service you agree to the practices described here.
Two roles. When you create an Appointics account, we are the controller of your account data. When a business uses Appointics to take bookings, the personal data that business collects from its own customers is controlled by that business — we act as a processor on its behalf and process that data only to provide the Service.
Where the GDPR or similar laws apply, we rely on: performance of a contract (to deliver the Service you request), legitimate interests (to secure and improve the Service), consent (for optional cookies and certain marketing), and legal obligation (to meet regulatory requirements).
We do not sell personal data. We share it only with:
If you connect a Google or Microsoft calendar, Appointics accesses events on your main calendar to: add, update and remove your bookings; check when you are already busy so customers cannot book those times; and notice when you move or delete a booking's event so the booking stays in step. We store the access tokens needed to do this and the start and end times of busy periods, not the content of your other events. We do not use calendar data for advertising, do not sell it, and do not share it with anyone. You can disconnect at any time in Profile → Calendar sync, which deletes the stored tokens; you can also remove access in your Google or Microsoft account settings.
Appointics' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Your data may be processed in countries other than your own. Where it is transferred internationally, we take steps to ensure it remains protected in line with applicable law, including using appropriate safeguards such as standard contractual clauses.
We keep personal data for as long as your account is active or as needed to provide the Service, then delete or anonymise it, except where a longer period is required for legal, accounting or dispute-resolution purposes. Businesses may delete their own booking and customer records from within their dashboard.
We use technical and organisational measures — including encryption in transit, access controls and hashed passwords — to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Depending on your location, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, contact us at privacy@appointics.com. If Appointics processes data on behalf of a business, we will refer your request to that business as the controller.
The Service is not directed to children under 16 and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
We may update this Policy from time to time. We will post the updated version here and revise the "Last updated" date. Material changes will be communicated where appropriate.
Questions about this Policy or your data? Email privacy@appointics.com or visit our contact page.