Privacy Policy
Last updated 13 August 2026
This policy is provided in English only. Chính sách này chỉ có bản tiếng Anh.
HaiBooking provides online appointment booking for small service businesses such as nail salons. This policy explains what we collect, why, and what we do with it. It covers both the businesses that use HaiBooking and the customers who book appointments through it.
1. Who we are
HaiBooking is an online booking platform operated from Georgia, United States. You can reach us at hnguyen@haibooking.com.
2. What we collect
When you book an appointment
- Your name, phone number and email address
- The appointment itself — the business, date, time, services and, where one is chosen, the technician
- Whether you agreed to receive a text confirmation, and the exact wording you were shown when you agreed
- Your IP address and the time, recorded with that agreement
When you contact us through our website
- Your name, business name, email address and phone number, and whatever you write in the message
When a business uses HaiBooking
- The business's own details — name, address, phone, opening hours, services and prices, and its staff members' names and email addresses
- Sign-in information for the people who use the dashboard. Passwords are stored only as a cryptographic hash and cannot be read by us or by anyone else
Automatically
- A session cookie once a staff member signs in. It exists to keep them signed in and nothing else
- Standard server logs, including IP addresses, used to keep the service running and to detect abuse
- Cloudflare Turnstile runs on the public booking form to tell people from automated bots. It is not an advertising tool and does not track you across other websites
We do not use advertising cookies or third-party analytics trackers.
3. Text messages (SMS)
Text messages are sent by HaiBooking, not by the individual business. The business is named in the message so you know which appointment it refers to. Every message identifies HaiBooking as the sender.
- You opt in yourself, or you get no texts. The checkbox on the booking form is separate from everything else and is never pre-ticked. Booking an appointment does not opt you in.
- One message per booking. It is sent once, immediately after you complete a booking, and confirms the appointment. We do not send reminders, follow-ups, or messages when an appointment is changed or cancelled.
- We never send marketing or promotional texts, and we do not sell or share your phone number with anyone for marketing.
- Reply STOP at any time to opt out. Reply HELP for help. Message and data rates may apply.
- Opting out applies to HaiBooking as a whole. Because HaiBooking sends the messages, replying STOP stops confirmations for every business you book with through our platform — not just the one you most recently booked. You can opt in again on a future booking.
- Businesses using HaiBooking cannot write or alter the text of these messages. The wording is set by us and is the same for every business.
We use a licensed messaging provider to deliver these messages, and your phone number and the message content are shared with that provider for that purpose only.
4. Email
We send a confirmation email with a calendar attachment when you book, and we send account emails — invitations and password resets — to staff members of businesses using HaiBooking. We use an email delivery provider to send them. We do not send marketing email.
5. Who we share information with
We do not sell personal information. We share it only with the service providers needed to run the platform, and only for that purpose:
| Who | What for |
|---|---|
| The business you booked with | Your booking — they need it to serve you |
| Our hosting provider | Running the servers and storing the database |
| Our email provider | Delivering confirmation and account emails |
| Our messaging provider | Delivering text confirmations, if you opted in |
| Cloudflare | DNS, and the bot check on the booking form |
We may also disclose information where the law requires it.
6. How long we keep it
- Appointment records are kept so businesses can look back at their own history. After about 12 months, the personal parts are removed — the phone number and email address are deleted and the name is shortened — while the date, service and price remain, so a business's records stay accurate without holding your contact details indefinitely.
- Website enquiries sent through our contact form are kept while we deal with them and deleted within 90 days.
- Staff accounts are kept while the business uses HaiBooking.
- Server logs are kept for a short period for security and troubleshooting.
7. How we protect it
- All traffic is encrypted in transit (HTTPS).
- Passwords are stored only as a hash, using a modern algorithm.
- Each business's data is separated at the database level, so one business cannot read another's.
- Backups are encrypted.
- Access to the servers is restricted and requires a key.
No system is perfectly secure, and we do not claim otherwise.
8. Your choices
- Texts: reply STOP to stop them.
- Access, correction or deletion: email hnguyen@haibooking.com and we will help. If your information was given to a business using HaiBooking, we may need to work with them to action it.
- We do not sell personal information, so there is nothing to opt out of in that respect.
9. Children
HaiBooking is not intended for children under 13, and we do not knowingly collect their information. A parent or guardian booking on behalf of a child should give their own contact details.
10. Changes
If we change this policy we will update the date at the top. If a change materially affects how we use text messages, we will ask for consent again rather than rely on consent given to the old wording.