How The Palm Planner looks after your information, in plain English. Last updated October 2026.
The Palm Planner is an online booking, diary and business tool for independent appointment-based businesses, studios, salons and solo professionals, across beauty, wellness, fitness, pets, photography and other services. It is run by Jay, trading as The Palm Planner, in the United Kingdom.
If you run a business and have a Palm Planner account, we are responsible (the controller) for your account details. If you book an appointment with a business that uses The Palm Planner, that business is responsible (the controller) for your details, and we look after them on its behalf (as its processor). If you have a question about a booking, please contact the business first.
Your login email, business name and details, opening hours, services and prices, plans, marketing posts and uploaded photos or videos. Passwords are handled by our sign-in provider and are never shown in the app.
Your name, mobile number and email, the appointments you book, notes you add, answers to any consultation forms the business asks for, how you heard about them, loyalty stamps and whether you agreed to news and offers. You do not need an account to book.
To run accounts and provide the service a business has signed up for (contract), to take and manage bookings on a business's behalf, to keep the service secure and working (legitimate interests), and to send news and offers only to clients who have said yes (consent). We do not sell personal information or use clients' details for our own marketing.
Some treatments need health or patch test questions. These answers are only visible to the business you booked with. The business is responsible for deciding what it asks and why.
Our hosting and database provider (Lovable Cloud) stores records and files on servers in the European Union. If a business uses the AI writing or photo helpers, the text or photos it chooses are sent to an AI provider just to produce an answer. Once switched on, we will use an email provider for booking emails, a text message provider for reminders and Stripe for payments. Each only receives what it needs to do its job.
Business records are kept while the account is open. A business can export its records or delete its account and all its data from Settings. Client records are kept for as long as the business they booked with keeps them, and are removed when that business deletes them or closes its account. Copies in routine backups are cleared on the provider's normal backup cycle.
Each business can only see its own records. Connections are encrypted, files are stored privately, and public booking pages show only free times and services, never other clients' details. No online system can promise it will never be attacked, but if something went wrong we would act quickly, tell the businesses affected and report it where the law requires.
Under UK data protection law you can ask to see, correct, export or delete your information, object to how it is used, and withdraw consent to marketing at any time using the unsubscribe link. Clients should contact the business they booked with; businesses can contact us. You can also complain to the Information Commissioner's Office at ico.org.uk.
If we change this policy in a way that matters, we will update this page and tell account holders.
Questions about your data, or want a copy or deletion? Email hello@palmplanner.com and we will reply within one month.