Privacy policyWhat Slot keeps and why.

Roles and responsibility

The business a client books with decides why booking data is processed and acts as its controller. Slot processes that data on the business’s behalf. Slot acts as controller for account, platform-security and billing data.

Data we process

We process business account details, service and schedule settings, client name, phone or email, appointment time and service, and any note the client chooses to provide. Security logs contain technical request data and identifiers.

Purpose and legal basis

Data is used to create and manage bookings, send notifications, perform contracts, protect the platform, prevent abuse and meet legal obligations. Each business defines the legal basis for processing its own client data.

Recipients

Data may be shared with infrastructure providers, Stripe for subscription billing, and messaging providers only when the relevant function is enabled. Slot does not sell personal data.

Retention

Booking contact details are anonymised after the configured retention period when the client has no newer booking. Security and delivery logs are cleared regularly. Records required by law may be kept longer.

Retention period: 730 days

Your rights

You may request access, correction, deletion, restriction, portability or object to processing where the right applies. Contact the booked business about a specific appointment and the Slot operator about platform-account data.

Cookies and security

Slot uses cookies required for sign-in sessions and request protection. Access controls, encrypted connections, rate limits, backups and auditable events protect platform data.