Who handles your information
BookMySpot provides the booking and customer communication platform used by independent businesses, studios, venues and organisers. The business you book with handles the services you buy and the customer records it needs to deliver them. BookMySpot handles platform operation and may process information on that business’s behalf. For questions about who is responsible for a particular use of your information, contact the business you book with or support@bookmyspot.co.uk.
Information we collect
- Account and contact details, including name, email address, telephone number and chosen location.
- Bookings, waitlists, attendance, membership details, purchases, payment status and customer service records.
- Workout totals and membership history supplied when you move from another booking platform.
- Messages you send to a connected WhatsApp, Facebook or Instagram account, including message content, platform identifiers, timestamps and any attachments made available by that platform.
- Technical and activity information needed to operate and protect the service, including page visits, message-link interactions and staff activity where applicable.
Stripe processes payment card details. BookMySpot stores payment references and limited card information such as card brand and last four digits, not full card numbers or security codes.
Why we use it
We use information to manage accounts, bookings, attendance, memberships and payments; send confirmations and service notices; respond to questions; maintain records; protect the service; and understand how customers use it. Contractual necessity, legal obligations and legitimate interests may apply depending on the purpose. Where consent is required, including for applicable marketing communications, we rely on consent and you can withdraw it.
Messaging and AI assistance
When you message a connected business account, authorised staff can view and respond through the inbox. Where enabled, Booking Buddy and other AI tools use relevant messages and booking context to assist with replies and requests. AI can make mistakes; contact staff if an answer is unclear or involves a complaint or payment concern. You can ask to speak to a person. Social messaging identifiers are not automatically treated as your verified phone number or booking identity.
Who receives information
Access is restricted to authorised people and service providers for the relevant business and location. Providers may include Lovable Cloud for hosting and data services, Stripe for payments, Twilio for text and WhatsApp delivery, Resend for email, Meta for Facebook and Instagram messaging, and AI services for enabled assistance. Those providers also handle information under their own applicable policies. We may disclose information where legally required or necessary to protect rights and prevent fraud. We do not sell your personal information.
Storage, retention and international transfers
We keep information for as long as needed for the service, the purpose for which it was collected, and applicable legal, accounting or dispute obligations. Retention depends on the record type and the responsible business. Some providers may process information outside the UK; where required, appropriate safeguards such as recognised contractual protections or adequacy arrangements apply. Contact us for information about your records and applicable safeguards.
Cookies and local storage
The platform uses cookies or browser storage for sign-in, security, remembered preferences and necessary booking functionality. Activity and message-link records may also be used to understand service usage. You can manage browser storage through your browser settings; blocking necessary storage may prevent sign-in or booking.
Your rights and marketing choices
Subject to applicable law, you can request access, correction, deletion, restriction or portability of your information, or object to certain processing. You can withdraw consent and unsubscribe from marketing without affecting the lawfulness of earlier processing. Service messages about existing bookings or payments may still be necessary. Contact the business you book with or support using the address below. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.
Data deletion instructions
To request deletion of your BookMySpot account or information received from Facebook or Instagram, email support@bookmyspot.co.uk with the subject “Data deletion request”. Tell us your account email or phone number, the relevant business, and, for social messages, your Facebook or Instagram account name and the business account you contacted. Do not send passwords or payment card details.
We may need to verify your identity before acting. We normally respond within one month; if a lawful extension is needed, we will explain why. We will delete or anonymise information that no longer needs to be kept and explain any records retained for legal, payment, fraud-prevention or dispute reasons. Deleting your information here does not delete your account or messages held independently by Meta. A deletion request is not a membership cancellation request; contact the business you book with separately to cancel an ongoing membership.
Contact and changes
Privacy enquiries: support@bookmyspot.co.uk. This policy may be updated when our services or legal requirements change; the date above identifies the current version.