Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Booksy is an appointment booking marketplace and scheduling platform for service businesses that embeds a booking widget, sets cookies and processes customer personal data.
Booksy is an appointment booking marketplace and scheduling platform used by service businesses such as salons, barbers and clinics. It lets customers find providers, book slots and receive reminders, often through a widget embedded on the provider website. Booksy operates from the United States and Poland and processes customer personal data on hosted infrastructure.
Booksy processes customer names, contact details, appointment times, service preferences and payment related information. Its widget sets cookies to keep the booking session working and may set analytics or marketing cookies to measure usage. Depending on the business, appointment notes can reveal health or wellbeing details that count as special category data.
Strictly necessary booking cookies are exempt from consent, but analytics and marketing cookies are not, so the ePrivacy Directive requires prior consent for them. Under the GDPR you need a lawful basis and clear information for processing customer data. As the business you are the controller and Booksy acts as your processor under a data processing agreement.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Managing a booking that a customer actively requests can rely on the performance of a contract, so it does not require cookie consent for the strictly necessary parts. Any non essential cookies, including analytics and marketing, must load only after freely given, specific, informed and unambiguous consent. Where appointment notes reveal health data, you need an additional condition such as explicit consent.
Booksy operates from the United States and Poland, so personal data may be processed outside the European Economic Area. Such transfers must be covered by an appropriate safeguard, typically Standard Contractual Clauses or the EU US Data Privacy Framework. Confirm the hosting region and transfer mechanism in your data processing agreement and document it in your records.
Sign the data processing agreement and confirm transfer safeguards. List Booksy cookies in your cookie policy and gate non essential ones behind your consent banner. Set retention limits for customer and appointment data, handle any health related notes with extra care and describe the processing in your privacy notice so customers understand how their bookings are used.
Websites using Booksy must obtain user consent under GDPR regulations.
DPIA considerations
Because Booksy processes customer contact details, appointment history and may transfer data internationally, assess the volume and sensitivity of the bookings you handle. A data protection impact assessment is advisable where you process large volumes of customer data or any health related appointment information.
Sample consent text
We use Booksy to manage appointments, which sets cookies and processes your booking details. Non essential cookies load only after you accept. You can change your choice at any time in cookie settings.
Third-party domains contacted
booksy.comwidget.booksy.comus.booksy.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| booksy_session | Functional | Session | Keeps the booking widget and session state working during a reservation. |
| _booksy_uid | Analytics | 1 year | Recognises devices to measure usage of the booking flow. |
| booksy_mkt | Marketing | 6 months | Supports marketing measurement and promotional features. |
Booksy uses cookies for user preferences — inform visitors with a consent banner.
Booksy sets a strictly necessary cookie that keeps the booking session working and may set analytics and marketing cookies that measure usage and support promotions. The non essential cookies require consent before they load.
Yes for non essential cookies. The booking session cookie is exempt, but analytics and marketing cookies are not, so under the ePrivacy Directive you must obtain prior consent before they load through your consent banner.
Managing the booking a customer requests relies on the performance of a contract. Service operation can rely on legitimate interest, while non essential cookies rely on consent. Any health related appointment notes need an extra condition such as explicit consent.
Yes. Booksy operates from the United States and Poland, so personal data may be processed outside the European Economic Area. Ensure transfers are covered by Standard Contractual Clauses or the EU US Data Privacy Framework and keep the safeguard on file.
A data protection impact assessment is advisable where you process large volumes of customer data or appointment notes that reveal health information. Assess the scale and sensitivity of the bookings and record your conclusions before deployment.
Sign the data processing agreement, confirm transfer safeguards, list cookies in your cookie policy and gate non essential ones behind your consent banner. Set retention limits, handle health related notes carefully and describe the processing in your privacy notice.
Yes. Platforms such as Fresha, Treatwell and SimplyBook.me offer similar booking features, and some are hosted in the European Union. Whichever you choose, the same consent, transfer and documentation duties apply to its cookies and customer data.
List each Booksy cookie with its name, purpose and duration, note that data may be processed in the United States and Poland and name the safeguard used. Keep the policy aligned with what your consent banner controls and review it whenever the integration changes.