Data Subject RightsEffective Date: October 31, 2026Last reviewed: October 31, 2026

User Data Deletion Instructions

Document Summary & Legal Context

In compliance with international data privacy laws and the Meta Developer Platform Policies (App ID: 1761678114892387), this page provides clear, publicly accessible instructions on how salon owners, clients, and WhatsApp users can request the permanent erasure of their data from Bookzello.

Transparent process: Bookzello processes data deletion requests through a verified administrative manual procedure. To protect against malicious account destruction, requests are validated before database erasure.

1. Overview & Meta Compliance Commitment

Bookzello respects individual privacy rights and provides a simple, direct mechanism to request the deletion of personal information, salon business records, customer booking histories, and WhatsApp conversational transcripts stored in our databases.

If you have interacted with Bookzello via our web application (https://bookzello.com), an embeddable website widget on a salon’s website, or a connected salon WhatsApp business number, you have the right to request deletion of your records at any time.

2. Who Can Request Deletion

We handle deletion requests across four main user categories:

Category A: Salon Clients & Customers

Any client who booked an appointment online, submitted contact details, or interacted with an automated receptionist can request removal of their customer profile, appointment history, notes, and contact phone/email.

Category B: WhatsApp Users

Any individual who messaged a Bookzello-powered salon via WhatsApp can request that their WhatsApp ID (phone number), message logs, and conversational session history be purged from our cloud database.

Category C: Salon Owners & Businesses

A salon owner may request the complete decommissioning of their organization workspace, including salon profile, service catalog, staff profiles, working schedules, and connected integration credentials.

Category D: Notification Opt-Out Users

Users who do not wish to receive automated appointment reminders or confirmation emails can request cessation of transactional notifications while preserving future self-service booking options.

3. Step-by-Step Deletion Process

To ensure genuine authorization and prevent unauthorized sabotage of another user’s or salon’s appointments, requests are submitted and verified via email:

1

Send an Email to our Dedicated Data Privacy Address

Send your deletion request to privacy@bookzello.com (or support@bookzello.com). Use the subject line: Data Deletion Request - [Your Name or Phone Number].

2

Provide Identifying Information

Include the reasonable identifying details specified in Section 4 below so our team can locate your records within our multi-tenant database.

3

Verification & Confirmation Response

Our privacy team will acknowledge receipt within 48 business hours and verify ownership (e.g. by confirming access to the email or phone number on record).

4

Database Erasure & Completion Notice

Upon verified authorization, our database administrators execute the deletion across active tables, cascading to related conversational drafts, and issue a completion confirmation to your email.

4. Information Required for Verification

To locate your records accurately without capturing unnecessary data, please include the following details corresponding to your use:

  • For Salon Clients: Your full name, the email address and/or mobile phone number used during booking, and the name of the salon where you booked an appointment.
  • For WhatsApp Users: The mobile phone number (in international E.164 format, e.g. +447700900000) used to message the salon, and the name of the salon messaged.
  • For Salon Owners: Your registered account email address, salon business name, salon URL slug (e.g. bookzello.com/booking/[slug]), and confirmation that you wish to decommission the entire organization workspace.

5. Security Notice (What NOT to Send)

Never Send Sensitive Security Credentials

For your security, NEVER send passwords, account tokens, credit or debit card numbers, copies of government identity cards (such as passports or driving licenses), or banking information in your email request.

Bookzello will never ask you for your account password or payment card credentials to process a data deletion request.

6. How Requests Are Processed & Timelines

Once your request is received, Bookzello follows a structured lifecycle to ensure thorough removal while preserving system integrity:

  • Intake Acknowledgment: Within 48 business hours of receiving your email.
  • Identity & Ownership Verification: We confirm that the request originates from the legitimate owner of the contact details or salon organization.
  • Database Purge Execution: Within 30 calendar days of completed verification:
    • Customer contact records and associated appointment history are removed or irrevocably anonymized.
    • WhatsApp conversation threads, message logs, and webhook events linked to the phone identifier are deleted.
    • For salon workspace deletions, foreign key cascading safely removes associated staff profiles, service catalogs, and draft records.
  • Confirmation Receipt: You will receive a final confirmation email stating that your data has been successfully erased.

7. WhatsApp & Meta Data Clarification

It is important to understand the boundary between Bookzello and Meta Platforms:

What Bookzello Deletes:

All records stored on Bookzello’s cloud servers (hosted on Supabase / PostgreSQL), including your phone number mapping, inbound/outbound text transcripts, and booking draft states.

What is Controlled on Your Personal Device:

The conversation thread stored inside your personal WhatsApp application on your smartphone. To remove the chat from your phone, open WhatsApp, swipe left or long-press on the conversation with the salon, and select “Delete Chat”.

Meta’s Platform Servers:

Messages transiting Meta’s WhatsApp Cloud API infrastructure are subject to Meta’s own data retention and privacy policies. For inquiries regarding Meta’s platform logs, please consult Meta’s WhatsApp Privacy Policy.

8. Operational & Statutory Retention Exceptions

In limited situations permitted or required by law, certain data cannot be immediately erased:

  • Statutory Accounting & Tax Obligations: Where a salon or Bookzello is required by commercial law to retain financial audit records or completed invoice receipts for statutory minimum periods (e.g. 6–7 years).
  • Dispute Resolution & Fraud Prevention: Information strictly necessary to resolve active disputes, enforce terms of service, or prevent malicious abuse of booking systems.
  • Encrypted Backup Rotation: Data deleted from live operational databases will automatically age out and be permanently overwritten in encrypted disaster-recovery backups within standard cloud backup retention cycles (typically 30 days).

9. Opt-Out Alternatives (Stop Reminders)

If you simply wish to stop receiving automated appointment notifications without deleting your appointment history:

  • WhatsApp Opt-Out: Reply with the word “STOP” to any WhatsApp message received from a salon. The system will mark your conversation as opted out.
  • Email Notifications: You can manage communication preferences directly by contacting the salon or clicking the management link provided in your booking confirmation email.

10. Data Deletion Contact & Support

To submit a data deletion request or check the status of an existing request, contact our privacy team:

Bookzello Data Privacy Officer / Support

Dedicated Deletion Email: privacy@bookzello.com

General Support: support@bookzello.com

Response SLA: Intake acknowledgment within 48 business hours; complete processing within 30 calendar days.