Privacy

Bookfin processes salon owner account data (name, email, billing) as controller for the subscription. Appointment and WhatsApp content is processed as processor for the salon.

WhatsApp phone numbers, booking times and payment status (paid / unpaid only — not full card data) are stored to run the diary. Card numbers never touch Bookfin; Stripe or the Iranian PSP is the payment controller for those details.

Data stays in the UK/EEA where we host. Salons may export or delete their tenant. Message logs are kept as needed for disputes and GDPR access requests, then deleted.

This page is a demo notice, not a finished DPIA.