Effective Date: 03/03/2026

This Data Processing Agreement forms part of the agreement between Bookly and its users regarding the processing of personal data.

1. Definitions

Controller

The business using Bookly to manage customer data.

Processor

Bookly acts as a data processor when handling data on behalf of the user.

Personal Data

Any information relating to an identifiable individual, including names, emails, phone numbers, and appointment details

2. Scope of Processing

Bookly processes personal data solely for the purpose of providing appointment scheduling and booking management services.

This may include:

• Customer contact information

• Appointment details

• Payment records

• Business staff schedules

3. Responsibilities of the User (Controller)

The user agrees to:

• Obtain necessary consent from customers

• Ensure lawful collection of personal data

• Provide accurate privacy disclosures to customers

• Comply with applicable data protection laws

4. Responsibilities of Bookly (Processor)

Bookly agrees to:

• Process personal data only as instructed by the user

• Implement appropriate technical and organizational security measures

• Protect personal data from unauthorized access or disclosure

• Limit data access to authorized personnel

5. Data Security

Bookly implements security measures designed to protect personal data, including:

• Secure server infrastructure

• Encryption where appropriate

• Access controls

• System monitoring

6. Sub-Processors

Bookly may engage third-party service providers such as:

• Payment processors

• Cloud infrastructure providers

• Email and SMS delivery services

These providers may process data as part of delivering the Bookly service.

7. Data Retention

Personal data will be retained only as long as necessary to provide services or comply with legal obligations.

8. Data Subject Rights

Where applicable, individuals may request:

• Access to their personal data

• Correction of inaccurate information

• Deletion of personal data

Such requests should be directed to the business that collected the data.

9. Data Breach Notification

In the event of a data breach affecting personal data, Bookly will take appropriate steps to investigate and mitigate the issue.

10. Termination

Upon termination of services, Bookly may delete or anonymize stored personal data after a reasonable period unless retention is required by law.