Privacy Policy

Prebookk is a booking platform. This policy covers everyone who uses it, and anyone who visits prebookk.com:

• Providers are independent professionals and businesses that create a Prebookk account to take bookings.
• Customers are people who book an appointment with a Provider through a Prebookk booking page. Customers do not need an account.

“We”, “us” and “Prebookk” mean Prebookk Inc. We are responsible for the personal information we hold. A Provider may also keep their own records about their customers. We don’t control those records, so contact the Provider about them.

We collect information you give us, information a Provider gives us about you (for example, when they add a booking on your behalf), and information our systems record automatically.

Booking notes are free text. Please don’t include health or other sensitive details unless your appointment genuinely needs them.

• To run Prebookk: create accounts, show booking pages, take and manage bookings, and send confirmations, reminders and receipts.
• To process payments and refunds through Stripe, for Providers who turn payments on.
• To protect the service against fraud, abuse and security incidents.
• To answer support requests.
• To meet legal obligations, including reporting Provider tax and transaction information to the Canada Revenue Agency where the law requires it.
• To fix errors and improve Prebookk.

We do not sell personal information, and we do not use it for targeted advertising.

• Providers. When a Customer books, the Provider receives the Customer’s name, phone number, email address (if given) and notes. A Provider may use them only to deliver the booking and communicate about it. Our Terms of Service forbid using them for the Provider’s own marketing without the Customer’s separate consent.
• Service providers. Companies that help us run Prebookk, such as hosting, database, payments, email, text messaging and error monitoring, under written terms that limit how they use the information. Each one is listed on our sub-processors page.
• Canada Revenue Agency. For Providers who use payments or list prices, we report identification and transaction information to the CRA where the law requires it.
• Legal and safety. We disclose information when required by law, court order, warrant or other legal process, or where PIPEDA permits disclosure without consent, such as to prevent fraud or in an emergency that threatens someone’s life, health or safety. We don’t give personal information to a private party just because they ask.
• Business changes. If Prebookk Inc. is involved in a merger, acquisition or sale of assets, information may transfer to the new owner, who must continue to honour this policy.

All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.

Contracted messaging service providers process this information solely on our behalf to deliver the SMS program and honour opt-outs, under restrictions that prohibit their independent use of the information. Appointment-message consent and verification-code requests do not grant a Provider or any other business permission to send its own texts.

Prebookk Inc. is a Canadian company, but several of our service providers are based in the United States and may store or process information there. Your information can therefore be held in, or accessed from, the United States, where it may be subject to US law, including lawful access requests by US authorities (for example, under the CLOUD Act). This applies wherever you are in Canada. The sub-processors page lists each provider and what it handles.

We use your contact details to manage bookings and send related communications. Appointment SMS, including confirmations, reminders and rescheduling updates, requires the separate, optional choice shown in the booking form. You can book without agreeing to texts. We record the choice with the booking, recipient number, disclosure version and time. A verification text is sent only when you separately request a code; requesting one does not subscribe you to appointment or marketing texts.

Reply STOP to stop texts from our shared sending number; this may stop texts for more than one Provider. Reply HELP for messaging help or email hello@prebookk.com. We do not sell, rent or share mobile numbers or SMS opt-in records with third parties or affiliates for marketing or promotional purposes. Messaging service providers may process that information only to deliver the program and honour opt-outs, under the service-provider restrictions described above. The rules for Providers are in section 7 of our Terms of Service.

Sign-in cookies, set by our authentication provider Supabase, keep Providers signed in. They are essential and are removed when you sign out. Prebookk also stores some files in your browser (a service worker cache) so pages load faster.

We use Sentry to monitor errors. For a sample of visits, and for any visit where an error occurs, Sentry records a replay of page interactions with all text and images masked, which helps us diagnose problems.

We don’t use advertising cookies or cross-site tracking, and we don’t share usage data with advertisers. You can clear cookies and site data in your browser settings; doing so signs you out.

All connections to prebookk.com use HTTPS, our database uses access controls, and secrets are handled on the server only. Specifics are on our trust and security page. No system is perfectly secure.

If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as soon as feasible. We keep a record of every breach, whether or not it must be reported. Quebec residents, see section 11.

You can ask us to:

• show you the personal information we hold about you;
• correct it if it is wrong or incomplete;
• stop using it where you gave consent, for example to opt out of messages; and
• delete your account or booking data.

Some records, such as financial records, we must keep for the period in section 8. To make a request, email privacy@prebookk.com. For a booking, tell us the Provider and roughly when you booked. We may ask you to confirm your identity, and we will respond within 30 days. If we can’t do what you ask, we will explain why.

Quebec’s Act respecting the protection of personal information in the private sector gives you additional protections.

• Person in charge. Our Privacy Officer is responsible for protecting personal information at Prebookk Inc. Contact them at privacy@prebookk.com.
• Transfers outside Quebec. Our service providers store or process information outside Quebec, including in the United States (see section 5), where it may be subject to local law.
• Confidentiality incidents. We keep a register of confidentiality incidents. Where an incident presents a risk of serious injury, we notify the Commission d’accès à l’information du Québec and the people affected.
• Automated decisions. We don’t make decisions about you based solely on automated processing.

Provider accounts are for people 18 and older. Customers must also be 18 or older to book, except that a parent or legal guardian may book on behalf of a minor. In that case the parent or guardian is the person we contract with and agrees to our Terms, and we collect only the details the appointment needs, typically the child’s name and the appointment details.

We don’t knowingly collect personal information directly from a child who books without a parent or guardian. If you believe that has happened, email privacy@prebookk.com and we will delete it.

Contact us first at privacy@prebookk.com. If we haven’t resolved your concern, you can complain to the Office of the Privacy Commissioner of Canada or, if you live in Quebec, to the Commission d’accès à l’information du Québec.

We post changes on this page and update the date at the top. For material changes we email Providers at least 14 days before they take effect.

Privacy questions and requests: privacy@prebookk.com

Prebookk Inc.