Your data, your rights, our responsibility
Bookify Malta is a salon booking platform built and supported in Malta. Data is hosted securely in the EU. We do not sell personal data, we do not serve advertising, and we name every provider that touches your information. This page brings together every legal, privacy, and security document in one place.
At a glance
Choose who you are
For salon owners
Terms of Service
The full SaaS agreement covering your account, subscription, obligations, and our responsibilities.
Business owners
Platform Privacy Notice
How we handle business-owner and staff data inside the Bookify application.
Business owners & staff
Client Booking Privacy Notice
Dedicated privacy notice for people booking appointments through a Bookify-powered booking page.
Salon clients
Data Processing Agreement
Article 28 DPA with processing details, approved subprocessors, security measures, and your rights as controller.
Business owners
SMS Communications Policy
How appointment reminders work, consent requirements, and the line between transactional and marketing messages.
Business owners
Billing, Trials & Refunds
Free trial terms, monthly and annual billing, SMS add-on charges, cancellation, and refund eligibility.
Business owners
Account Deletion & Data Export
How to delete your account, export your data, and what happens to bookings during the process.
Business owners
For everyone
Website Privacy Policy
How we handle data from our marketing website, onboarding forms, and contact forms.
Website visitors
Cookie Policy
Every cookie and local-storage item on bookify.mt, with purpose, duration, and how to control them.
Website visitors
Subprocessor Register
Every third party that may process personal data on our behalf, with region and transfer mechanism.
Business owners & reviewers
Data-Subject Rights Guide
Your GDPR rights explained: access, rectification, erasure, portability, objection, and how to exercise them.
Everyone
Security, reliability & research
Security & Reliability
How we protect your data: encryption, access controls, monitoring, backups, and incident response.
Business owners & reviewers
Incident Response
How we detect, assess, and respond to security incidents and personal data breaches. Severity levels and notification timelines.
Business owners & reviewers
Business Continuity
How we plan for disruptions: critical services, backup and restore, provider outages, and recovery priorities.
Business owners & reviewers
Vulnerability Disclosure
How security researchers can report vulnerabilities responsibly, with safe-harbour terms.
Security researchers
Platform Status
Live uptime, incident history, and planned maintenance for the Bookify Malta platform.
Everyone
How We Calculate Our Numbers
Methodology behind our bookings, uptime, and no-show reduction figures.
Everyone
Directory
Unclaimed Listings Policy
What an unclaimed directory listing is, what we publish, where the information comes from, and how to claim, correct or remove it.
Business owners & visitors
Directory Ranking Policy
How Directory results are ordered: ranking factors, claimed and Featured status, and paid-placement transparency.
Everyone
Claim & Ownership Verification
How claiming a listing works, the verification methods we use, and how disputes and ownership transfers are handled.
Business owners
Correction & Removal
How to correct or remove a listing free of charge, response targets, and what a removal does.
Everyone
Content & Intellectual Property
How names, logos, photos and descriptions are used in the Directory, and how to raise an IP complaint.
Everyone
Policies
Acceptable Use Policy
What you can and cannot do on Bookify. Covers fake bookings, unsolicited SMS, account sharing, and more.
Business owners & staff
Data Retention & Deletion Schedule
How long we keep each category of data, why, and how it is deleted. Full per-item breakdown.
Business owners & reviewers
Government & Legal Requests
How we handle requests from law enforcement and regulators. Requirements, user notice, and record keeping.
Reviewers
Accessibility Statement
Our commitment to WCAG 2.1 AA. Current status, known limitations, and how to report barriers.
Everyone
Complaints & Escalation
How to raise a complaint, expected response times, and external escalation routes including the IDPC and MCCAA.
Everyone