Privacy Policy

Who we are

Set is operated by Set Booking Ltd Co, registered in Arizona, United States. When this policy says “Set”, “we”, or “us”, it refers to Set Booking Ltd Co.

Information we collect

When you create an account we collect your name, email address, and phone number. Professionals may also provide business details such as a business name, service descriptions, pricing, and availability.

When a client books an appointment we collect the booking details (service, date, time) and the contact information needed to confirm it. Payment card details are entered directly into Stripe and are never stored on our servers.

Optional inspiration photos are saved with appointments and visible to the professional. Please do not upload medical records or other sensitive information. Saved cards are handled by Stripe; Set stores payment references, not card numbers. Imported client lists may include names, phones and email addresses.

How we use your information

We use your information to operate the booking platform: creating and managing accounts, scheduling appointments, processing payments, sending booking communications and permitted promotional emails, and providing customer support. Automated platform SMS is currently paused; professionals may independently use their own device's SMS composer. SMS choices and data handling are described in the SMS privacy and consent section.

Payments and third parties

Payments are processed by Stripe through Stripe Connect. When you pay or get paid through Set, Stripe receives the information needed to process the transaction and is responsible for securely handling card data. Stripe’s use of your information is governed by Stripe’s own privacy policy.

We do not sell your personal information, and we only share it with service providers who help us run the platform.

Cookies and sessions

We use a secure session cookie to keep you signed in. This cookie is essential for the platform to function and is not used for advertising.

Where your data is stored

Booking and account information is stored with our hosting provider in the United States. Cross-border transfer arrangements, including any required contractual safeguards, depend on the applicable market and providers involved and are under review.

Access to your data is limited to you, the members of your business you invite, and a small number of Set personnel who need it to operate and support the platform.

Data retention

We retain booking and account data while needed to provide services and resolve disputes; payment and accounting records may require longer retention. Deletion requests are reviewed for linked bookings, pending payments, professional records and legal obligations. Backups may take time to expire and restored data must be checked against completed requests. Exact periods and regional exceptions require review.

Your rights (including GDPR)

You may access, correct, or delete your personal information by contacting us. If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR/AVG) gives you additional rights, including the right to:

• access a copy of the personal data we hold about you;
• correct inaccurate or incomplete data;
• have your data erased (“right to be forgotten”) when it is no longer needed;
• receive your data in a portable, machine-readable format and take it elsewhere;
• object to or restrict certain processing of your data.

Signed-in clients can request an export or submit an erasure request after password verification. We review linked appointments, photos, reviews and payment records before acting. Guest clients and professionals can contact support; we verify identity and coordinate with the relevant professional. Response deadlines and exceptions depend on applicable law. You may contact your local data protection authority where applicable.

Roles under the GDPR

For account information of professionals and clients who sign up with Set, we act as the data controller. For the client records a professional manages through Set (such as their client list and appointment history), the professional is the controller and Set processes that data on their behalf, only to provide the booking platform.

Contact us

Questions about this policy? Email us at support@set-booking.com.

SMS privacy and consent

When you choose to opt in to Set booking text messages for a business, we process your mobile number, the message categories you selected, the disclosure you accepted, consent timestamps and source, message content and delivery records, and any opt-out requests. These records help us deliver requested messages, honor your preferences, prevent abuse and maintain evidence of consent.

We do not sell, rent or share mobile information or SMS opt-in data and consent with third parties or affiliates for their own marketing or promotional purposes. Your consent applies only to the business and message categories you selected; it is not permission for other businesses to contact you.

The business you selected can access its own client and consent records. We disclose information only as needed to provide the requested messaging service through our contracted messaging, carrier and infrastructure providers, or where legally required. Providers process this information to operate the service, not to conduct independent marketing using your SMS consent.

Appointment messages and marketing messages are separate, optional choices. Neither SMS consent nor marketing consent is a condition of booking or purchase. Providing a phone number, accepting booking policies or being imported into a client list does not by itself opt you in to SMS.

For an active Set SMS program, reply STOP to opt out or HELP for help. You can also contact support@set-booking.com or the business to withdraw consent. Opting out of SMS does not cancel an appointment. We may retain limited consent and suppression records to honor the opt-out and meet legal obligations, subject to our retention policy. Automated platform SMS is currently paused; messages sent independently from a professional's own device are outside this program.