Booksy
Booksy is an appointment booking marketplace and scheduling platform for service businesses that embeds a booking widget, sets cookies and processes customer personal data.
What does Booksy do?
What Booksy is
Booksy is an appointment booking marketplace and scheduling platform used by service businesses such as salons, barbers and clinics. It lets customers find providers, book slots and receive reminders, often through a widget embedded on the provider website. Booksy operates from the United States and Poland and processes customer personal data on hosted infrastructure.
What data and cookies it collects
Booksy processes customer names, contact details, appointment times, service preferences and payment related information. Its widget sets cookies to keep the booking session working and may set analytics or marketing cookies to measure usage. Depending on the business, appointment notes can reveal health or wellbeing details that count as special category data.
GDPR and ePrivacy implications
Strictly necessary booking cookies are exempt from consent, but analytics and marketing cookies are not, so the ePrivacy Directive requires prior consent for them. Under the GDPR you need a lawful basis and clear information for processing customer data. As the business you are the controller and Booksy acts as your processor under a data processing agreement.
Consent requirements
Managing a booking that a customer actively requests can rely on the performance of a contract, so it does not require cookie consent for the strictly necessary parts. Any non essential cookies, including analytics and marketing, must load only after freely given, specific, informed and unambiguous consent. Where appointment notes reveal health data, you need an additional condition such as explicit consent.
Data transfers and hosting
Booksy operates from the United States and Poland, so personal data may be processed outside the European Economic Area. Such transfers must be covered by an appropriate safeguard, typically Standard Contractual Clauses or the EU US Data Privacy Framework. Confirm the hosting region and transfer mechanism in your data processing agreement and document it in your records.
Practical compliance steps
Sign the data processing agreement and confirm transfer safeguards. List Booksy cookies in your cookie policy and gate non essential ones behind your consent banner. Set retention limits for customer and appointment data, handle any health related notes with extra care and describe the processing in your privacy notice so customers understand how their bookings are used.
Booksy and the GDPR
Booksy is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent for non essential cookies under ePrivacy; contract for managing bookings and legitimate interest for service operation
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive
Impact assessment (DPIA)
Because Booksy processes customer contact details, appointment history and may transfer data internationally, assess the volume and sensitivity of the bookings you handle. A data protection impact assessment is advisable where you process large volumes of customer data or any health related appointment information.
Sample text for your banner
We use Booksy to manage appointments, which sets cookies and processes your booking details. Non essential cookies load only after you accept. You can change your choice at any time in cookie settings.
What Booksy sets and contacts
- Tracking method
- Embedded booking widget that sets cookies and processes customer and appointment data through hosted infrastructure
- Server location
- United States and Poland
- Data transferred outside the EU
- Booksy operates from the United States and Poland and may process personal data outside the European Economic Area. International transfers rely on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| booksy_session | Functional | Session | Keeps the booking widget and session state working during a reservation. |
| _booksy_uid | Analytics | 1 year | Recognises devices to measure usage of the booking flow. |
| booksy_mkt | Marketing | 6 months | Supports marketing measurement and promotional features. |
Third-party domains contacted (3)
booksy.comwidget.booksy.comus.booksy.com
Frequently asked questions about Booksy
Can't find your question? Write to us, we answer fast.
What cookies does Booksy set?
Booksy sets a strictly necessary cookie that keeps the booking session working and may set analytics and marketing cookies that measure usage and support promotions. The non essential cookies require consent before they load.
Is consent required for Booksy?
Yes for non essential cookies. The booking session cookie is exempt, but analytics and marketing cookies are not, so under the ePrivacy Directive you must obtain prior consent before they load through your consent banner.
What is the legal basis for using Booksy?
Managing the booking a customer requests relies on the performance of a contract. Service operation can rely on legitimate interest, while non essential cookies rely on consent. Any health related appointment notes need an extra condition such as explicit consent.
Does Booksy transfer data internationally?
Yes. Booksy operates from the United States and Poland, so personal data may be processed outside the European Economic Area. Ensure transfers are covered by Standard Contractual Clauses or the EU US Data Privacy Framework and keep the safeguard on file.
Do I need a DPIA for Booksy?
A data protection impact assessment is advisable where you process large volumes of customer data or appointment notes that reveal health information. Assess the scale and sensitivity of the bookings and record your conclusions before deployment.
How do I implement Booksy compliantly?
Sign the data processing agreement, confirm transfer safeguards, list cookies in your cookie policy and gate non essential ones behind your consent banner. Set retention limits, handle health related notes carefully and describe the processing in your privacy notice.
Are there alternatives to Booksy?
Yes. Platforms such as Fresha, Treatwell and SimplyBook.me offer similar booking features, and some are hosted in the European Union. Whichever you choose, the same consent, transfer and documentation duties apply to its cookies and customer data.
How do I update my cookie policy for Booksy?
List each Booksy cookie with its name, purpose and duration, note that data may be processed in the United States and Poland and name the safeguard used. Keep the policy aligned with what your consent banner controls and review it whenever the integration changes.
RoboReception
RoboReception is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. RoboReception integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, RoboReception helps organizations maintain robust websites that meet user expectations and technical requirements.
Navu
Navu is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Navu provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Navu helps deliver the right message to the right audience at the right time.
BugHerd
BugHerd is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. BugHerd supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, BugHerd ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Quiq Messaging
Quiq Messaging is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Quiq Messaging integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Quiq Messaging helps organizations maintain robust websites that meet user expectations and technical.
Gleap
Gleap is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Gleap integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Gleap helps organizations maintain robust websites that meet user expectations and technical requirements.
Botsonic
Botsonic is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Botsonic integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Botsonic helps organizations maintain robust websites that meet user expectations and technical requirements.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.