Your clients’ data, handled properly.
Bookatu is built for GDPR. Your clients can see and delete their own data without writing to anyone, you can see every request in your dashboard, and we are plain about the records that have to stay for tax law. No badges, no absolutes, just how it works.
Your clients don’t have to ask you for either of them.
Right of access
Self-service — no support tickets
- A client can download a copy of everything you hold about them.
- Bookatu builds the file — profile, appointments, invoices, payments, consents.
- It arrives instantly as a single readable export, no ticket and no waiting on us.
Right to erasure
Self-service — no support tickets
- A client can ask to be removed, from their own profile or through you.
- Bookatu shows exactly what goes and what stays before anything runs.
- You confirm by typing their name, and the finished request keeps its timestamps in your queue.
Five steps, including the one nobody likes to mention.
From the client’s own booking profile, where they type their name to arm it — or through you, from the client record.
We confirm the request with the address on the account, so nobody is erased by mistake. Unconfirmed requests expire after 48 hours.
A big Cancel button for changed minds. Open appointments, unpaid balances or an active no-show agreement route the request to your queue instead.
Invoices stay as financial documents with the personal fields stripped. Tax law usually requires them for about seven years.
The account is re-checked, personal data is removed, past appointments become anonymous entries, and the request keeps a timestamped record.
The controls sit where you already work.
Erasure requests arrive in one place in the dashboard, with where each one stands and a 30-day response countdown.
Clients, services, products and appointments in one download. Your data leaves as easily as it arrived.
Typed confirmations, an email double-confirm, and a preview of what goes before anything runs. Nothing permanent happens by accident.
This page is maintained by Bookatu to answer common privacy questions about the product. It describes features that exist today and is not a certification, an audit result, or legal advice. GDPR compliance is shared: we build the controls, you decide what you collect and how long you keep it.
The ones owners actually ask.
0% commission, forever. Bookings, calendar, payments and client records in one place.