Booked In
Privacy
Last updated 12 October 2026
No cookies, no analytics and no trackers of any kind. There is nothing to accept, which is why you have not been asked.
Booked In is run by YSB Designs. If you want anything on this page explained, or want your information removed, write to hello@ysbdesigns.uk and a person will answer.
There are two different relationships here
This matters, because it decides who is responsible for what.
| If you run a studio | We hold your information because you have an account with us. For that, we are the data controller. |
|---|---|
| If you booked an appointment | Your details were given to the studio you booked with, not to us. She decides what to do with them; she is the data controller and we are her processor. We only hold them so her page works. If you want your details changed or deleted, ask her first — and if you cannot reach her, write to us and we will help. |
What we hold, and why
If you run a studio
- Your email address, so you can sign in. There is no password.
- Your studio name, link, treatments, prices, hours and photographs, because those are the page.
- Your bookings, so you have a diary.
- A Stripe customer reference, if you subscribe. We never see or store your card. Stripe does that.
If you booked an appointment
- Your name and email address, and your phone number if you gave one — all of which you typed in yourself.
- What you booked and when, and — so the studio can see at a glance how long it has been since she saw you — how many times you have been and what you have spent with her.
- Anything the studio writes in her own notes about you. That box is hers and we do not read it or use it for anything; it is where she keeps the things she would otherwise write in a diary, like when you were last patch tested or which adhesive disagreed with you. She decides what goes in it and she is responsible for it. Ask her what she holds, and if you cannot reach her, write to us.
That is the whole list, and all of it is either something you typed in yourself or something that follows from an appointment you made. We do not buy information about you, we do not build a profile of you, and we will never sell any of it or use it to advertise anything.
One thing we deliberately do not do: a client of one studio is a separate record from a client of another, even where that is the same person and the same email address. The two know nothing of each other. It would be easy and useful to us to join them up, and that joined-up list is exactly the thing a booking marketplace sells, which is why the database is built so that it cannot exist.
Why we are allowed to hold it
- To do what you asked — make a booking, send a confirmation, take a subscription payment. In the law's words, performance of a contract.
- Because we have to — invoices and payment records, which we must keep for tax.
- Because a studio's diary has to stay usable — the limits described below, which stop a stranger filling it with bookings nobody will keep. In the law's words, legitimate interests.
We do not send marketing to the people who book appointments. Ever. They are the studio's clients, not ours, and we will never email them about Booked In, about another studio, or about anything we are selling.
A studio on the Pro plan can choose to send one kind of reminder of her own: a note, when you are about due, that it has been a few weeks since your last appointment. It goes only to people who have actually booked with her, only about the treatment they already had, only once per appointment, and every one of them carries a link that turns them off for good in a single tap. That is what the law calls the soft opt-in, and it is the only message of its kind this software can send. If you turn it off, it stays off — you will still get your confirmation and your reminder, because those are about an appointment you have actually made.
Who else sees it
Four companies, each doing one job, and none of them allowed to use it for anything else:
| Supabase | Stores the database and the photographs, in the EU. |
|---|---|
| Render | Serves the pages. |
| Resend | Sends confirmations and reminders. |
| Stripe | Takes subscription payments from studios. |
Nobody else. No advertising networks, no data brokers, no analytics companies.
Cookies, and what is kept on your device
There are no cookies on any page of this site, and nothing is stored on your device by anything that is counting or watching you. Two things are stored, and both of them exist only to make something you asked for work:
- If you run a studio, signing in leaves a token in your browser so that you stay signed in. Signing out removes it. Without it you would have to ask for a new email link on every page.
- If you are booking an appointment, nothing at all is stored. Close the tab and the page has no memory of you.
Neither of those needs your consent under the Privacy and Electronic Communications Regulations, because both are strictly necessary to provide the thing you actually asked for. That is the whole reason this site has no cookie banner: there is nothing on it that you could meaningfully refuse.
The typefaces are served from this site rather than from Google, so opening a page here does not quietly tell anybody else that you did.
Stopping people ruining a studio's diary
Anybody can open a studio's booking page, which means anybody can try to fill her week with appointments that nobody will turn up to. To put a limit on that, a booking is stored with a scrambled version of the internet address it came from — not the address itself, but a one-way hash of it made with a secret key, which cannot be turned back into an address. It is used for one thing: counting how many bookings came from the same place in the last hour. It is erased after seven days.
We do this because a studio's diary being usable is in her legitimate interests and in her clients'. It identifies nobody, and it is never used to recognise you, to work out where you are, or for anything else whatsoever.
Keeping it apart
One studio cannot read another studio's bookings or clients. That is enforced by the database itself rather than by application code, and it is covered by automated tests that run against a real database.
How long we keep it
- Bookings stay while the studio's account is open, because that is her record of her own business.
- If a studio closes her account, we delete her page, her treatments and her clients' details within 30 days.
- Payment records we keep for six years, because HMRC requires it.
- The scrambled address attached to a booking is erased after seven days. It is only ever counted over the last hour, so keeping it longer would be keeping something we have no use for.
What you can ask for
You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to our holding it at all. Write to hello@ysbdesigns.uk. We will reply within a month, and it costs nothing.
If you are not happy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first so we can put it right.
Children
Booked In is for people running a business, so it is not for under-18s. If a studio takes bookings from under-18s, that is between her, them and their parents, and she is responsible for handling it properly.
If this page changes
We will change the date at the top. If a change actually affects you, studios will get an email about it rather than being left to notice.
← Back to Booked In