Privacy Policy

Bookpint operates an online marketplace that connects Customers with independent beauty, grooming and wellness Businesses, primarily in Ghana. For the purposes of data-protection law, Bookpint is the controller of personal information collected through the Platform, except for information that a Business processes about its own Customers, where the Business is the controller and Bookpint acts as a processor on its behalf (see section 13).

We collect the information we need to make bookings work and to keep the Platform safe.

• Account information — name, email, phone number, password (stored as a salted hash by our authentication provider), and, for owners, the businesses you manage.
• Profile & listing information — for Businesses: business name, description, address, city, photos, services, prices, staff, opening hours, booking policies and verification status.
• Booking information — the service you booked, date and time, staff selected, notes you added, confirmation code, status (pending, confirmed, completed, cancelled), and the price in Ghana Cedis (GHS).
• Payment metadata — when a deposit or subscription is paid through Paystack, we receive a reference, the amount, the currency, the status and a limited card descriptor (such as the last four digits and card brand). We do not store full card numbers, CVV codes or bank credentials.
• Reviews & messages — ratings, written reviews, owner replies and any messages you send through the Platform.
• Device & usage information — IP address, device type, browser, pages viewed and actions taken, plus crash and error reports. This helps us debug issues and improve the Platform.
• Cookies & local storage — small files used to keep you signed in, remember preferences and measure usage (see section 7).

• To create your account, sign you in and keep your session active.
• To deliver bookings — including sending the request to the Business, generating a confirmation code, and reminding you of upcoming appointments.
• To process payments and subscriptions through Paystack and to reconcile, refund or report on those payments.
• To run the reviews system after confirmed or completed bookings.
• To respond to your support requests and other communications.
• To keep the Platform safe — detect and prevent fraud, abuse, scraping, spam and breaches of our Terms.
• To improve Bookpint — understand how features are used, fix bugs, measure performance and develop new features.
• To comply with our legal obligations, including tax, accounting and lawful requests.

We do not sell your personal information, and we do not use it for third-party advertising.

Where data-protection law requires a legal basis, we rely on the following:

• Performance of a contract — to provide the Platform and your bookings.
• Legitimate interests — to keep the Platform safe, improve our services and run our business, balanced against your rights and expectations.
• Consent — for optional things such as marketing communications and non-essential cookies, where required. You can withdraw consent at any time.
• Legal obligation — to comply with applicable laws and lawful requests.

We share personal information only as described below:

• With the Business you book — your name, contact details, selected service, staff, time, notes and confirmation status are shared with the Business so they can perform the appointment.
• With service providers — see section 6.
• For legal reasons — to comply with a valid court order, regulatory request or applicable law, to enforce our Terms, or to protect the rights, safety or property of users or the public.
• Business transfers — if Bookpint is involved in a merger, acquisition, financing or sale of assets, personal information may be transferred as part of that transaction, subject to equivalent protections.

The Platform relies on a small number of trusted providers to operate. Each is bound by its own terms and security commitments and is given access only to the information they need.

• Lovable Cloud (which uses Supabase as its underlying infrastructure provider) — database hosting, authentication, file storage and serverless functions.
• Paystack — payment processing for deposits, business subscriptions and verification fees. Card data is collected directly by Paystack on a PCI-compliant page; Bookpint only receives the payment metadata described above.
• Email and notification providers — to send confirmation, reminder and account emails.
• Analytics & error monitoring — to understand product usage and diagnose problems.

We use cookies and similar technologies for the following purposes:

• Essential — to sign you in, keep your session, remember your last booking and protect against cross-site request forgery. These cannot be turned off.
• Functional — to remember preferences such as your search city or saved favourites.
• Analytics — to count visits and measure how features perform, using aggregated and de-identified metrics where possible.

You can clear cookies through your browser settings. Disabling essential cookies will break sign-in and bookings.

We keep personal information only for as long as we need it for the purposes described in this policy. In practice this means:

• Account data — kept while your account is active. When you delete your account we remove or anonymise personal fields, unless we need to keep specific records for legal, tax, accounting or dispute-resolution reasons.
• Booking history — kept for the period needed to support refunds, reviews and reporting. Older bookings may be anonymised.
• Payment records — kept for the period required by financial and tax regulations.
• Logs and analytics — kept for shorter periods, usually rolling windows of a few months, to support debugging and performance monitoring.

We use a layered approach to security. This includes encrypted connections (HTTPS) between your browser and our servers, encrypted storage at rest on our database provider, hashed passwords managed by our authentication provider, row-level access controls so users only see their own data, server-side verification of bookings and payments, and webhook-signature verification on incoming payment notifications.

No system can be made entirely secure. If you believe your account has been compromised, change your password and contact us at bookpint26@gmail.com.

Subject to applicable law, you have the right to access the personal information we hold about you, to ask us to correct or update it, to ask us to delete it, to object to or restrict certain uses, to withdraw consent where we rely on consent, and to ask for a portable copy of information you provided.

You can exercise most of these rights from inside the app — update your profile in account settings, manage or cancel your own bookings in My Bookings, and reach out to support for anything else. To make a formal request, email bookpint26@gmail.com and we will respond within a reasonable time.

Bookpint is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact bookpint26@gmail.com and we will take appropriate action.

Bookpint serves users in Ghana, but our service providers may store and process information in other countries. Where information is transferred outside your country, we rely on the providers' contractual and technical safeguards to keep your information protected to a comparable standard.

When a Business uses Bookpint to manage its own Customers (for example, viewing booking contact details, leaving notes or sending replies), Bookpint acts as a processor on the Business's behalf for that activity. The Business is responsible for:

• handling Customer information lawfully and in line with its own privacy notice;
• only using booking contact details to fulfil the booking or with appropriate consent;
• responding to its Customers' data-protection requests; and
• keeping login credentials secure.

Misuse of Customer data is a serious breach of our Terms and may lead to suspension of the listing.

We may update this policy from time to time. When we do, we will change the "last updated" date at the top and, for material changes, take reasonable steps to notify active users. Continued use of the Platform after the change takes effect means you accept the updated policy.

For any privacy-related question or to exercise your rights, email bookpint26@gmail.com or use our contact page. For the rules that govern use of the Platform, see our Terms of Service.