This Privacy Notice explains how SimplyBook.me Ltd ("we," "us," "our") collects, uses, and protects your personal data when you use the Booking.page Marketplace App (branded as "SimplyBook for Clients" on the App Store and Google Play, and referred to in this Privacy Notice as the "App"). This Notice supplements our main SimplyBook.me Privacy Policy, which governs the SimplyBook.me platform as a whole.
Data Controller: SimplyBook.me Ltd
Registration: Cyprus company, registration number HE 387490.
Supervisory Authority: Office of the Commissioner for Personal Data Protection (Cyprus)
SimplyBook.me Ltd is the data controller for the personal data collected and processed through the App. Although the App is branded as "Booking.page," all contractual and data processing obligations reside with SimplyBook.me Ltd.
For full details about how SimplyBook.me processes data across its platform, see our main Privacy Policy at https://simplybook.me/en/policy.
01
DATA CONTROLLER:
Who controls your data?
SimplyBook.me Ltd (Cyprus) processes the data you provide through this app.
02
DATA COLLECTION:
What do we collect?
Your name, email, and optional phone number when you sign up;
Services you book, reviews you post, and searches you run;
Device information (OS, model, app version) to keep the app working;
Location (with your permission) to show nearby services.
03
DATA USE:
How do we use it?
To create your account and process bookings;
To show you relevant services near you;
To improve the app and keep it secure;
To send booking confirmations and reminders.
04
DATA SHARING:
Who do we share it with?
Service providers you book with (they see your name and booking details);
Technical providers who help run the app (analytics, notifications);
team.blue group companies.
We do not sell your data. We only collect what is needed to make the app work and improve your experience.
05
YOUR RIGHTS:
What are your rights?
You can access, correct, or delete your data at any time. Use the in-app settings or contact us.
Privacy Notice of the Booking.page Marketplace App
I. Who We Are
We are SimplyBook.me Ltd and we operate the Booking.page Marketplace App (branded as "SimplyBook for Clients" on the App Store and Google Play, and referred to in this Privacy Notice as the "App"). You may check our Terms and Conditions, containing more details of the App and our legal obligations.
In order to comply with the requirements of the GDPR, we must inform you that we are the "data controller", making decisions about your personal data, when you use the App.
For this document and all privacy and personal data protection purposes, our information and contact details are as below:
Device data collection at install: IP, OS, screen size, language, and timezone are collected when the app is first installed, before you see any screen. This helps us detect bugs and deliver a working app experience.
2.3 Data We Receive from Service Providers
When you book through the App, the service provider you book with may share booking-related data back to us (e.g., appointment status updates, cancellation requests). This data is processed to keep your booking history accurate and to facilitate communication between you and the provider.
III. How We Use Your Data
We use your personal data for the following purposes:
3.1 Account Management and Bookings
Create and maintain your account on the App.
Process bookings you make with service providers listed in the App.
Send booking confirmations, reminders, and updates (transactional notifications — no separate consent required).
Enable you to view your booking history and manage appointments.
3.2 Location-Based Search
Show you services near your current location (requires GPS permission).
Provide distance-based sorting and map views.
3.3 Reviews and Ratings
Publish your reviews and ratings to help other users.
Allow reviews to be posted without requiring a confirmed booking, and without moderation before publication (see Reviews and Content Moderation, below).
Process removal requests in line with the Review System Policy (see the Users Terms & Conditions).
3.4 Communications
Send appointment reminders and booking status updates via push notifications (transactional — no opt-in required).
Send promotional offers and marketing messages from service providers you've booked with (requires separate opt-in consent).
3.5 Analytics and Improvement
Monitor app performance, identify bugs, and improve features.
Understand user behaviour to enhance the app experience.
Aggregate and anonymise data for statistical analysis.
3.6 Security and Fraud Prevention
Detect and prevent fraudulent activity.
Protect against abuse of the App.
Maintain the integrity of the platform.
3.7 Legal Compliance
Comply with legal obligations (e.g., tax, accounting, regulatory reporting).
Respond to lawful requests from authorities.
IV. Device Permissions
The App may request the following device permissions. All are optional, and you can manage them in your device settings at any time:
4.1 Location Services
Why we ask: To show services near you and enable distance-based sorting.
What happens if you decline: You can still search by entering a city, postcode, or address manually. "Near me" results will still work using your approximate IP-based location, though less precisely than with GPS. Map features may be limited without GPS.
4.2 Push Notifications
Why we ask: To send booking confirmations, appointment reminders, and promotional offers (if you opt in).
What happens if you decline: You will not receive push notifications. You can still access booking details in the App.
Control: Promotional notifications are managed separately from transactional reminders. You can opt in or out per service provider in Settings > Notifications.
4.3 Camera / Photo Library
Why we ask: To upload a profile photo.
What happens if you decline: No profile photo will be displayed. This does not affect core app functionality.
V. How We Share Your Data
We do not sell your personal data. We share data only in the following circumstances:
5.1 Service Providers You Book With
When you make a booking, the service provider receives:
Your name, email, and mobile phone number (if provided);
Booking details (service, date, time, any notes).
Service providers are separate data controllers for the data they hold. Each provider is responsible for processing your data in line with their own privacy policy. You can request your data from each provider directly through the App's My Data section.
5.2 Analytics and Technical Providers
We use Firebase Analytics and Amplitude to analyse app usage and improve performance. These providers process data on our behalf under data processing agreements.
5.3 Push Notification Services
We use Firebase Cloud Messaging to deliver push notifications to your device. Device tokens are shared with this provider to enable notification delivery.
5.4 Group Companies
SimplyBook.me Ltd is part of the team.blue group of companies. Data may be shared within the group for internal administration, IT support, and security purposes, as described in our main Privacy Policy.
5.5 Legal Obligations
We may disclose your data to comply with legal obligations, respond to lawful requests from public authorities, or protect our legal rights.
VI. International Data Transfers
SimplyBook.me operates infrastructure in Canada, France, and Singapore. Your data may be processed in these locations.
We also work with third-party service providers who may process data in countries outside the European Economic Area (EEA). Where data is transferred to countries without an adequacy decision from the European Commission, we use Standard Contractual Clauses (SCCs) or other appropriate safeguards approved under GDPR.
For more information about data transfers, contact us at [email protected].
VII. How Long We Keep Your Data
Data Type
Retention Period
Reason
Account data (name, email, password)
While your account is active; deleted upon account deletion.
N/A — see the limited transaction-record exception below
Booking data (services booked, dates, provider)
5 years from booking date
Tax, accounting, and legal compliance
Statutory withdrawal records
7 years from the withdrawal request
Consumer protection law compliance and audit trail
Reviews and ratings
While published; removed within 30 days of deletion request
Provide transparency for users; allow removal on request
Analytics data (aggregated usage)
26 months, then anonymised
Understand long-term trends without identifying individuals
Device tokens (push notifications)
Until you uninstall the app or revoke permission
Enable notification delivery
Location data (GPS)
Not stored; used only in real-time for search
Show nearby services on demand
After the retention period ends, data is securely deleted or anonymised so it can no longer identify you.
VIII. Your Rights
Under data protection law (including GDPR if you are in the EEA/UK), you have the following rights:
8.1 Access
Request a copy of the personal data we hold about you. You can:
View your account data in Profile > Profile Details.
Request company-held booking data via the My Data section for each provider.
8.2 Correction
Update incorrect or incomplete data in Profile > Edit Profile Details. Your email address cannot be changed after account creation, as it is used to keep your bookings synced between the App and the business's own booking system. If your email is incorrect, you will need to create a new account.
8.3 Deletion
Request deletion of your data. Note:
Deleting your business listing from booking.page also removes it from the App (shared database). This is separate from deleting your own client account and personal data — for that, use Delete Account within the App's Settings.
Reviews will be removed within 30 days.
Some data may be retained to comply with legal obligations (e.g., tax records).
8.4 Restriction
Ask us to limit how we use your data in certain circumstances (e.g., while we verify accuracy).
8.5 Portability
Receive your data in a structured, commonly used format, or have it transmitted to another controller.
8.6 Object
Object to processing based on legitimate interest (e.g., marketing, analytics). We will stop processing unless we have compelling legitimate grounds.
8.7 Withdraw Consent
Withdraw consent for GPS location, promotional push notifications, or other consent-based processing at any time through Settings. This does not affect processing that occurred before withdrawal.
8.8 Complain
Lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus) or your local supervisory authority if you believe we have not handled your data properly.
To exercise these rights, contact us at [email protected] or use the in-app settings where available.
IX. Search Ranking and Visibility
Listings in the App are displayed based on several ranking parameters, which can include: your city or area, your distance from the business, the completeness of the business's profile (such as its description, listed services, categories, and pricing information), and customer reviews.
Default order: results are generally ordered first by city or area and distance, with profile completeness and customer reviews used as secondary factors.
User control: You can sort results by distance or rating at any time using the sort menu.
This ranking approach is disclosed in line with the Platform-to-Business (P2B) Regulation (EU) 2019/1150, which requires transparency about factors influencing visibility on online platforms.
X. Reviews and Content Moderation
Reviews posted in the App are visible to all users. To maintain quality and trustworthiness:
Reviews can be posted regardless of whether you have a confirmed booking with the service provider. Reviews are not moderated before publication. Each client may submit only one review per service provider.
Removal requests: Service providers can report reviews by emailing [email protected]. We review reported content case-by-case in line with the Review System Policy (see the Users Terms & Conditions).
User deletions: You can delete your own reviews via Profile > Bookings. If this option is not available to you, contact [email protected] to request deletion. Deleted reviews are removed within 30 days.
When you open the catalogue, we ask for permission to use your device's GPS location to show you nearby businesses. If you don't grant this permission, or it's not available, we automatically estimate your approximate location from your IP address using ipapi.co (operated by Kloudend, Inc., United States) — this happens by default for all users, regardless of whether GPS permission was granted, to support distance-based search. You can also enter a location manually in search at any time.
Personal data processed: precise GPS coordinates (with your permission); IP address (always, for the automatic estimate).
Legal basis: your consent for GPS; our legitimate interest in providing core "nearby businesses" search functionality for the IP-based estimate, which is coarse and not used for any other purpose.
Third party: ipapi.co / Kloudend, Inc. — place of processing: United States.
XII. Restricted Businesses and Acceptable Use
Certain types of businesses are not permitted to list on the App, including:
Services promoting hate, discrimination, or violence;
Entities subject to international sanctions.
We use a combination of automated screening and manual review to enforce these restrictions; automated screening does not cover every category listed and does not guarantee that a violating listing will never appear.
If you encounter a listing that violates these standards, you can report it using the "Report a Listing" button within the App.
XIII. Residential Address Protection
If you are a service provider listing on the App and choose to display your business address, please ensure it is a commercial address, not your home address. Displaying a residential address may expose you to privacy and security risks.
Only city/area is mandatory; full street address is optional. A warning is shown when a business enables their listing, notifying them their address will be publicly visible.
Contact details. A business's phone number and email address are optional to show on their listing, but at least one of the two must remain visible so clients can contact them directly. If a business chooses to display either, this is shown publicly on their Marketplace listing.
We recommend using:
A business premises address;
A co-working space or virtual office;
A general area descriptor (e.g., "City Centre") without a specific street address.
XIV. Children
This App requires you to be at least 18 years old to create a profile (see Eligibility in the App Terms of Use). We do not knowingly collect personal data from anyone under 18.
If we become aware that a profile has been created by someone under 18, we will suspend or delete it promptly. If you believe this has happened, contact us at [email protected].
XV. Changes to This Notice
We may update this Privacy Notice from time to time to reflect changes in our practices, legal requirements, or app features.
Material changes will be communicated through:
An in-app notification when you next open the App;
Email to your registered address (for significant changes affecting your rights).
The "Effective date" at the top of this Notice indicates when the current version came into force. Continued use of the App after the effective date constitutes acceptance of the updated Notice.
XVI. Contact Us
If you have questions about this Privacy Notice or how we process your data, contact us at:
