Privacy Policy

Your privacy matters to us. This Privacy Policy explains how Bookme Online ('Bookme Online', 'we', 'us', 'our') collects, uses, discloses, and protects personal data when you use our website and applications (the 'Platform'), whether as a Client, a Professional, or a Business Owner. This Policy is designed to meet the requirements of the EU/EEA General Data Protection Regulation (GDPR), Brazil's Lei Geral de Proteção de Dados (LGPD), the California Consumer Privacy Act (CCPA/CPRA), and Cabo Verde's data protection law, to the extent any of them apply to you.

Bookme Online is the data controller responsible for the personal data described in this Policy. For any privacy question, request, or concern, you can reach us at privacy@bookmeonline.app.

Depending on how you use the Platform, we collect the following categories of data:

• Account & identity data: first name, last name, username, email address, password (stored encrypted), and phone number.
• Profile data: profile picture, cover photo, bio, address line 1/2, postal code, country/region, rating average, and — if you sign up or log in with a social account — the provider (Google, Facebook, or Apple).
• Business data (for Professionals and Business Owners): company name and logo, workplace name and address, postal code, latitude/longitude of the workplace, business email, mobile/telephone/fax numbers, and tax/VAT identification number (NIF).
• Service data: the name, description, price, duration, and images of the services you list.
• Booking & scheduling data: appointments booked, availability/work times, booking history, and ratings given or received.
• Subscription & billing data: your subscription plan and status. We do not collect or store your full card number — see 'How We Share Data' below.
• Communications: the name, email, subject, and message you submit through our Contact Us form, and any support correspondence.
• Technical & usage data: IP address, browser/device information, cookie and local storage identifiers and, only if you accept statistics cookies, information about how you use the Platform collected through Google Analytics — see our Cookies Policy for details.

We collect personal data:

• Directly from you, when you register, complete your profile, create a company, workplace, or service listing, book an appointment, or contact us;
• Automatically, through cookies and similar technologies when you use the Platform (see our Cookies Policy); and
• From third parties, such as Google, Facebook, or Apple, if you choose to register or sign in with a social account — in that case we receive only the basic profile information the provider shares with your permission.

We process personal data for the following purposes, on the legal bases indicated:

• Providing the Platform (creating your account, authenticating you, displaying Professional/Business profiles and services, processing bookings, sending booking confirmations and administrative emails) — performance of a contract.
• Processing subscriptions and billing for Professionals and Business Owners — performance of a contract and, for accounting/tax records, compliance with a legal obligation.
• Responding to messages sent through our Contact Us form or support channels — legitimate interest and performance of a contract.
• Keeping the Platform secure and preventing fraud or abuse — legitimate interest.
• Complying with legal obligations, such as tax, accounting, or lawful requests from public authorities — legal obligation.
• Remembering your choices and keeping you signed in (session, language, and cookie choices) — legitimate interest, as strictly necessary for the Platform to work.
• Improving the Platform through statistics (Google Analytics) — consent, given through our cookie banner and withdrawable at any time through 'Cookie preferences' (see our Cookies Policy).

We do not sell your personal data. We share it only as follows:

• With other users, as needed to operate the Platform: a Professional's or Business Owner's public profile, services, and workplace location are visible to Clients so they can book an appointment; a Client's name, contact phone number, and booking details are shared with the Professional or Business Owner they booked.
• Stripe (payment processor), to process subscription payments for Professionals and Business Owners. Stripe processes and stores your payment card details directly, under its own privacy policy.
• Hosting and infrastructure providers who store and process data on our behalf, under confidentiality and data-processing obligations.
• Google Analytics (Google Ireland Limited), to measure how the Platform is used. With your consent to statistics cookies it receives usage data such as pages visited, device type and approximate location; without it, only limited cookieless signals. Google may process this data outside the EEA under appropriate safeguards, such as the EU–US Data Privacy Framework.
• Map and address providers: OpenStreetMap (map images) and Esri (address search when a Business Owner adds a workplace), which receive your IP address and, for Esri, the address searched.
• Government authorities, regulators, or other third parties, where required by law or legal process, or to protect the rights, safety, or property of Bookme Online or our users.
• As part of a merger, acquisition, or sale of assets, in which case personal data may be transferred subject to this Policy.

We use essential cookies and similar technologies, such as local storage, to keep you signed in, show the Platform in your language, remember your cookie choices and, during subscription checkout, help Stripe prevent fraud. Only with your consent do we also use Google Analytics statistics cookies. You can change your choice at any time through 'Cookie preferences'. For full details on the cookies we use, their purpose and duration, please see our Cookies Policy.

Bookme Online and our service providers (such as our hosting provider, Stripe and Google) may process data outside your country of residence, including outside the EEA or Brazil. Where we transfer personal data internationally, we rely on appropriate safeguards recognized under applicable law — such as standard contractual clauses, an adequacy decision, or the EU–US Data Privacy Framework — to ensure your data continues to receive an appropriate level of protection.

We retain personal data for as long as your account is active and as necessary to provide the Platform. If you delete your account, we delete or anonymize your personal data within a reasonable period (typically within 90 days), except where we must retain it longer to comply with legal, tax, accounting, or dispute-resolution obligations — for example, billing records may be kept for the period required by applicable tax law. Aggregated or anonymized data that no longer identifies you may be retained for as long as needed for legitimate analytical purposes. Google Analytics data is kept for 14 months and then deleted automatically by Google. Your cookie choice is kept for 6 months, after which we ask you again.

We use technical and organizational measures to protect your data, including password encryption, access controls, encrypted connections (HTTPS), and a secure httpOnly session cookie so your authentication token is never exposed to page scripts. No system is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal data, we will notify you and any applicable regulator as required by applicable law.

The Platform is intended for use only by individuals who are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us at privacy@bookmeonline.app so we can delete it.

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your data;
• Restrict or object to certain processing;
• Receive a copy of your data in a portable format; and
• Withdraw consent at any time, where processing is based on consent — for statistics cookies, through 'Cookie preferences' in the footer or your profile.

Many of these actions are available directly from your account settings. For any request you cannot complete there, contact privacy@bookmeonline.app; we will respond within the time required by applicable law (for example, one month under the GDPR). If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority — for example, Cabo Verde's Comissão Nacional de Proteção de Dados (CNPD), your national supervisory authority in the EEA, or Brazil's Autoridade Nacional de Proteção de Dados (ANPD).

If you are a California resident, the CCPA/CPRA gives you additional rights: to know what personal information we collect, use, and disclose about you; to delete your personal information; to correct inaccurate personal information; and to opt out of the 'sale' or 'sharing' of personal information. We do not sell your personal information for money, and we do not knowingly share it for cross-context behavioral advertising. We will not discriminate against you for exercising any of these rights. To submit a request, email privacy@bookmeonline.app; we may need to verify your identity before completing certain requests.

We do not use your personal data to make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

We may update this Privacy Policy from time to time. If we make a material change — for example, a new purpose or category of data, or a new category of recipient — we will update the 'Last Updated' date and take reasonable steps to notify you before the change takes effect, such as by email or a notice on the Platform. We encourage you to review this Policy periodically.

For questions or privacy-related requests, contact us at privacy@bookmeonline.app.

For more details on how the Platform works and what you agree to when using it, please also see our Terms of Service and Cookies Policy.