Legal

Privacy Policy

Last updated: June 27, 2026

This Privacy Policy explains how sbSlots (“sbSlots,” “we,” “us”) collects, uses, shares, and protects information when you use our online appointment-scheduling service (the “Service”). We aim to keep this plain and honest.

1. Who this covers

Two kinds of people use sbSlots, and we treat their data differently:

• Account holders — businesses and individuals who sign up to run a booking page (the “Organizer”).
• Clients — the people who book appointments through an Organizer’s page or embedded widget.

For appointment and client data, the Organizer is the data controller and sbSlots acts as a data processor on their behalf. If you booked an appointment and want your data changed or deleted, contact the business you booked with; we will assist them in honoring your request.

2. Information we collect

Information you give us

• Account details: name, email, password (stored hashed), business name, and brand settings.
• Client & booking details: when a booking is made we collect the client’s name, email, phone number, the service, date and time, and any answers submitted through intake forms.
• Payment details: when an Organizer connects Stripe and a client pays a deposit or invoice, payment card data is collected and processed directly by Stripe. sbSlots does not store full card numbers; we retain transaction metadata (amount, status, Stripe identifiers) needed to record the booking.
• Communications: messages you send us for support.

Information collected automatically

• Usage & device data: IP address, browser type, pages visited, and timestamps, used to operate, secure, and improve the Service.
• Cookies & similar technologies: we use strictly necessary cookies to keep you signed in and to keep the Service secure. We do not sell your data or use it for third-party advertising.

3. How we use information

• To provide the Service — show availability, take bookings, process payments via Stripe, and send transactional email (confirmations, reminders, reschedule/cancel notices).
• To authenticate users and secure accounts.
• To provide customer support and respond to requests.
• To maintain, debug, and improve the Service.
• To comply with legal obligations and enforce our Terms.

We send transactional email related to bookings. We do not send marketing email to an Organizer’s clients without a lawful basis and, where required, the appropriate consent and an unsubscribe mechanism.

4. Legal bases (GDPR)

If you are in the European Economic Area or the United Kingdom, we process personal data under one or more of these bases: performance of a contract (providing the Service you signed up for), legitimate interests (securing and improving the Service), consent (where you give it, e.g. optional communications), and legal obligation.

5. Sharing your information

We do not sell personal information. We share it only with:

• Service providers (subprocessors) who help us run the Service, including hosting/infrastructure (Cloudflare), payment processing (Stripe), and transactional email delivery. They may only use the data to perform services for us.
• The relevant Organizer and Client — booking details are shared between the business and the client who made the booking, as the Service requires.
• Legal & safety — when required by law, or to protect rights, safety, and the integrity of the Service.
• Business transfers — if sbSlots is involved in a merger, acquisition, or asset sale, data may transfer as part of that transaction.

6. Payments

Card payments are handled by Stripe under Stripe’s own privacy policy and terms. sbSlots never receives or stores full card numbers; payments are tokenized and processed by Stripe. We receive only the transaction metadata needed to confirm and record a booking.

7. Data retention

We keep account and booking data for as long as an account is active and as needed to provide the Service. After an account is closed, we retain data only as long as necessary for legitimate business or legal purposes (such as tax, accounting, and dispute resolution), then delete or anonymize it. Organizers can delete client and booking records from their account at any time.

8. Security

We use industry-standard safeguards — encryption in transit (HTTPS), hashed passwords, access controls, and reputable infrastructure providers — to protect your data. No method of transmission or storage is perfectly secure, but we work to protect your information and to address vulnerabilities promptly.

9. Your rights

EEA / UK (GDPR)

You have the right to access, correct, delete, restrict, or object to processing of your personal data, the right to data portability, and the right to withdraw consent. You may also lodge a complaint with your local supervisory authority.

California (CCPA/CPRA)

California residents have the right to know what personal information we collect, to request deletion or correction, and to opt out of any “sale” or “sharing” of personal information. sbSlots does not sell or share personal information as those terms are defined under California law. You will not be discriminated against for exercising these rights.

To exercise any right, contact us using the details below. If you booked through a business, please also contact that business, who controls your booking data.

10. International transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, take reasonable steps to notify account holders.

13. Contact us

Questions or requests about privacy can be sent to [email protected]. We will respond within the timeframes required by applicable law.