Privacy Policy

Last updated 17 October 2026

Booked & Busy is booking and admin software for makeup artists and beauty creatives. This policy explains what information we hold, why we hold it, who else can see it, and what you can ask us to do with it.

It covers two different groups of people, and the difference matters throughout:

• Artists, who have an account with us and use the app to run their business.
• Clients, who never sign up for anything. They receive a link from their artist to view a quote, agree to terms, or share inspiration for a booking.

Who is responsible for your information

For an artist's own account information, Booked & Busy is the data controller.

For the details an artist records about their clients, the artist is the controller and Booked & Busy is their processor. In plain terms: it is their client list, not ours. We hold it on their behalf, we do not use it for our own purposes, and if a client wants their details changed or removed, their artist is the person to ask. We will help them do it.

What we collect

If you are an artist

• Your account: name, email address, password (stored only as a cryptographic hash, never in a form we can read).
• Your business details: business name, contact details, address, logo, bank details shown on your invoices, tax registration number, prices, terms and contract templates.
• Your work: bookings, quotes, invoices, deposits, notes, and the documents you upload such as insurance certificates.
• Your clients' details, as recorded by you: names, email addresses, phone numbers, event dates and locations.
• Your enquiry email, if you choose to connect it. See the section on Google below, because it deserves its own.
• Your public profile, if you switch one on: the photo, biography, portfolio images, services and prices you publish.
• Usage and technical information: when you last used the app, and ordinary server logs including IP address and browser type.

If you are a client

• Whatever your artist has recorded about your booking.
• Anything you send through their enquiry form or their public profile.
• Photos or files you upload to your booking page, and the fact that you accepted a quote, agreed to terms, or said you had paid, with the date and the name you typed.

We do not use tracking cookies or advertising cookies. We do not sell personal information to anyone, and we never will.

Counting visits

We count how many times each page is opened, so we can tell whether anybody is finding us. We built this ourselves rather than adding Google Analytics or anything like it, because we did not want a third party watching our visitors and we did not want to put a cookie banner in front of you.

For each page opened we record the page address, the website you came from if you followed a link, any campaign tags on that link, your screen width, and a random number. Nothing else. In particular:

• No cookie is set, by us or by anyone else.
• Your IP address is not stored.
• The random number lives only in the tab you have open and is thrown away when you close it. It lets us see that two pages were opened in one visit. It cannot connect today's visit to yesterday's, and it is never linked to your name or your email address.
• Links that carry a private token, such as the one your artist sent you to view a quote, are recorded only as a quote was opened. The token itself never reaches us, so we cannot tell whose booking it was.
• If your browser sends a Do Not Track or Global Privacy Control signal, we do not count the visit at all.

Because none of this identifies anyone, it is not personal information and there is nothing here to ask us to delete. It is stored on our own database in Europe and shared with nobody.

Our free tools

Our free tools at bookedandbusy.app/tools (the bridal quote calculator, the contract template and the wedding morning timeline) work in your browser. The prices, names and timings you type into them stay on your device and are not sent to us.

To unlock the full result of a tool we ask for your full name and email address, and you can add your Instagram handle if you like. We store those details with the name of the tool you used, the date, the page you came from and any campaign tags on the link. We use them to understand who finds the tools useful and to improve them, which is our legitimate interest.

• Marketing emails are opt-in. We only send you tips, new tools and news about Booked & Busy if you tick the box on the form, which is unticked unless you tick it. We keep a record of the wording you agreed to. Every email has an unsubscribe link, or you can email us.
• Your details are remembered on your device (in your browser's local storage, not a cookie) so you don't have to type them again for the next tool. Clearing your browser data removes them.
• We never sell them, and we do not share them with anyone except the companies that run our database and send our emails, listed below.

Connecting your Google account (sending replies)

An artist may connect a Google account so that a reply they send from Booked & Busy goes out from their own address, on the same email thread the client started, rather than from a Booked & Busy address with their name bolted on.

• It is entirely optional. Everything else works without it.
• We ask for one permission, send email on your behalf (gmail.send), and nothing else. We do not ask to read your mailbox, and a send permission cannot read a single message. If our database were ever breached, nobody would get anyone’s inbox.
• It is used only to send an individual reply you have written and pressed send on. There is no automated, scheduled or bulk sending.
• Enquiries reach Booked & Busy because you choose to forward them to your own private address at our domain, not because we look in your inbox.
• The only Google information we store is the email address of the account you connected, so replies go from the right place, and a token limited to sending. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to anyone except as needed to run the service, comply with the law, or with your consent. No human at Booked & Busy reads your Google data, except with your explicit consent, for security or legal reasons, or in aggregated and anonymised form.
• Booked & Busy’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• You can disconnect at any time in Settings, which deletes the token, and you can revoke access directly from your Google account permissions.

Artificial intelligence features

Some optional features draft a reply or a quote for you by sending the relevant conversation, along with your saved prices and writing style notes, to Anthropic's Claude API. Anthropic processes it to generate the draft and does not use it to train their models.

Nothing is ever sent automatically. It happens only when you press the button, the result is a draft that you read and edit before anything is sent, and you can turn these features off entirely in Settings.

Why we are allowed to hold it

Who else processes it

We keep this list short on purpose. Each of these companies acts on our instructions and cannot use your information for their own ends.

Where information is transferred outside the UK or the European Economic Area, it is protected by the standard contractual clauses approved for that purpose, or an equivalent safeguard.

How long we keep it

• While your account is open, we keep your information so the app works. Your bookings from three years ago are still yours to look at.
• If you close your account, we delete your data within 30 days, apart from anything we must keep by law.
• Invoices and payment records are kept for six years, because UK tax law requires it.
• Server logs are kept for a short period and then discarded.
• Free tool sign-ups are kept for up to two years from the last time you used a tool, unless you unsubscribe or ask us to delete them sooner.

Keeping it safe

• Everything travels over an encrypted connection, and is encrypted at rest.
• Passwords are stored only as hashes. Nobody at Booked & Busy can read your password.
• Every artist's data is separated at the database level, so one account cannot reach another's, even if our own code has a bug.
• Files a client uploads sit in private storage and are reachable only through short-lived links.
• A booking page link contains a long random token. It is not guessable, but anyone the link is forwarded to can view that booking, so treat it the way you would treat an invoice sent by email. An artist can switch a link off at any time.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of what we hold about you;
• correct anything that is wrong;
• delete your information;
• stop or limit how we use it;
• send your information to another service;
• stop relying on consent, where consent is what allowed it.

Email hello@bookedandbusy.app and we will respond within one month. There is no charge.

If you are a client rather than an artist, please ask the artist you booked with first, since it is their record. If you cannot reach them, write to us and we will help.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first, so we can put it right.

Children

Booked & Busy is a tool for running a business and is not intended for anyone under 18. We do not knowingly collect information about children. If you believe we have, tell us and we will remove it.

Changes to this policy

If we change this policy in a way that affects you meaningfully, we will email you. The date at the top always tells you when it last changed.

Contact

Booked & Busy
hello@bookedandbusy.app