Privacy Policy
Last updated: 24 June 2026
Bookitly is committed to protecting your personal information in accordance with the Protection of Personal Information Act (POPIA) of South Africa.
1. Who is responsible for your data
Bookitly is the responsible party for the personal information described in this policy. If you have a privacy question or want to exercise any of your rights, contact our Information Officer at privacy@getbookitly.com.
2. Information we collect
Service providers: email address, business name, first name and surname, city or suburb, business bio, working hours, service list and prices, and any business photos you upload. Clients (web booking form): first name, last name, and phone number. Contact form: first name, last name, email address, and the message you send us. All users: basic technical data such as device and browser information and server logs, generated automatically when you use the app or website.
3. Why we collect it (purpose)
We use this information to create and manage accounts, enable appointment scheduling, send booking confirmation and reminder messages, respond to enquiries submitted through our contact form, and keep the platform secure. We don't use your information for any purpose beyond these without asking you first.
4. Lawful basis for processing
We process personal information under POPIA on the following bases: performance of a contract (running your provider account or facilitating a booking you've requested), consent (for example, submitting our contact form), and legitimate interest (keeping the platform secure and working properly). You can withdraw consent at any time by contacting us.
5. Payment and financial data
Bookitly does not currently process payments for appointments, so we do not collect or store card or bank details for that purpose. If in-app payment collection is introduced in future, this section will be updated to name the payment processor and explain how that data is handled.
6. Cookies and tracking
The Bookitly website and booking pages use only the essential session data required for the site and booking flow to function. We do not use advertising cookies, tracking pixels, or behavioural profiling.
7. Who we share data with
We share client phone numbers with BulkSMS SA solely to send booking confirmation and reminder messages. We share contact form details with Resend, our email delivery provider, solely to send and respond to enquiries. Our data is hosted with Supabase, our cloud database provider. We do not sell your data, and we do not share it with any other third party except where required by law.
8. Data security
Data is encrypted in transit and at rest using industry-standard encryption, and access to our systems is restricted to what's needed to operate the platform. No method of transmission or storage is 100% secure, but we take reasonable technical and organisational measures to protect your information.
9. Data retention
Provider account data is retained while your account is active, and for a reasonable period afterwards in case you wish to reactivate it. Client booking data is retained for 2 years from the date of the appointment. Contact form submissions are retained for 1 year. You may request deletion of your data at any time, subject to any legal obligation we have to keep it.
10. Cross-border transfers
Bookitly operates in South Africa, but some of our service providers (including Supabase and Resend) may process or store data outside South Africa, including in the European Union. Where this happens, we rely on providers that maintain a level of protection consistent with POPIA.
11. Your rights under POPIA
You have the right to: • Access the personal information we hold about you • Request correction of inaccurate information • Request deletion of your data • Object to the processing of your information • Withdraw consent where we rely on it • Lodge a complaint with the Information Regulator of South Africa
12. How to exercise your rights
To make a data access, correction, or deletion request, email our Information Officer at privacy@getbookitly.com. We will respond within 30 days.
13. Children's data
Bookitly is not intended for use by anyone under 18. If we become aware that we've collected personal information from a minor without appropriate consent, we will delete it promptly.
14. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. If we make a material change, we will update the date below and make reasonable efforts to notify active account holders.