Privacy policy
Last updated: 13 October 2026
Faxity is a booking and deposit tool used by small, appointment-based businesses in the UK. This page explains, in plain language, what personal data is collected, why, who handles it, how long it is kept, and what your rights are under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who is responsible for your data
There are two groups of people whose data passes through Faxity, and our role is different for each:
- Clients who book an appointment. The business you book with decides why and how your booking details are used, so it is the "controller" of that data. Faxity acts as its "processor": we store and handle your booking details only on that business's behalf and to run the booking service.
- Business owners who hold a Faxity account. For the account, subscription and sign-in details of the businesses that use Faxity, Faxity is the controller.
What we collect
If you book an appointment:
- your name, phone number and email address;
- the service, date and time you booked;
- a record of your deposit (amount, whether it was paid, refunded or kept), and any change you make to your booking, such as cancelling or rescheduling.
If you run a business on Faxity: your email address and password (stored securely, we cannot read your password), your business details, services and opening hours, your plan and subscription status, and the reference numbers Stripe gives us for your payment account.
We do not collect health information, ID documents or card numbers. We do not use advertising or tracking cookies.
Why we use it, and our legal basis
| What we do | Legal basis |
|---|---|
| Hold your booking, take and manage your deposit, and send your confirmation | Performing the booking contract between you and the business |
| Send you reminders about your appointment (email, and text message where the business's plan includes it) and tell you if it changes | The business's legitimate interest in reducing missed appointments, which also helps you remember yours |
| Let the business contact you about your appointment | Performing the booking contract |
| Run business accounts, billing and sign-in, and keep the service secure | Performing our contract with the business, and our legitimate interest in keeping the service safe |
| Keep financial and accounting records | Legal obligation |
We do not send marketing messages, we do not sell your data, and we do not make decisions about you by automated profiling.
Who we share it with
Only the business you booked with can see your booking details. To run the service we use a small number of trusted companies, each handling your data only for the purpose shown:
| Company | What it does for us |
|---|---|
| Supabase | Secure database and account sign-in |
| Vercel | Hosts the website and app |
| Stripe | Takes deposit and subscription payments. Card details go directly to Stripe and are never seen or stored by Faxity |
| Resend | Sends our emails (confirmations, reminders, account emails) |
| Twilio | Sends text messages, where the business's plan includes them |
Some of these companies handle data outside the UK. Where they do, we rely on the safeguards UK law allows for such transfers, such as the UK's approved contract terms or an adequacy arrangement. We may also have to share data if the law or a court requires it.
Automated messages
Booking confirmations, reminders and replies to a missed call are sent by an automated system, not a person. If you ask whether you are talking to a real person, we will always tell you honestly that it is an automated assistant.
Cookies
We use only the cookies needed to keep a business owner signed in. We do not use advertising, analytics or tracking cookies, so there is nothing to opt out of.
How long we keep it
Booking records are kept for as long as the business's account is active, so that any dispute about a deposit can be resolved. When a business closes its account, it can ask us to delete or anonymise its booking data, except for financial records the law requires us to keep for a set period. You can ask the business you booked with, or us, to delete your details sooner, and we will do so unless we must keep them by law.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data held about you;
- have wrong information corrected;
- have your data deleted, or its use restricted;
- object to the use of your data based on legitimate interests;
- receive your data in a portable format where that applies.
To use any of these rights, contact the business you booked with, or contact us (below) and we will pass it on or deal with it directly. We aim to reply within one month.
If you are unhappy with how your data has been handled, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
Security
Data is sent over encrypted connections and stored with providers that use industry-standard security. Each business can see only its own bookings. No online service can promise perfect security, but we take reasonable steps to protect your data and to tell the people affected, and the ICO where required, if something goes wrong.
Contact
For any privacy question or request, email support.faxity@digitalehub.io.
Changes to this policy
If we change how we use personal data we will update this page and the date at the top. See also our Terms of service.