Related legal information:
Last updated: July 2026
Bookday services are provided by Bookday, Inc. and Bookday Company SASU. The entity applicable to each studio is identified in its subscription, invoice or other contractual documentation.
For a studio's member and booking data, the studio decides why the data is used and Bookday processes it to provide the platform. For Bookday's own account administration, billing, support, security and service-improvement activities, the relevant Bookday entity is responsible for the processing.
Bookday does not ask for health data for its own purposes. A studio may nevertheless configure a question or waiver that contains sensitive information. In that case, Bookday only hosts and processes it to provide the service to the studio, and the studio is responsible for ensuring that its collection is lawful and necessary.
Depending on the activity, the legal basis is performance of a contract, compliance with a legal obligation, consent, or Bookday's legitimate interest in operating, securing and improving the service. Communications sent by a studio to its members are managed under the studio's responsibility.
Bookday uses infrastructure in Europe and the United States. Hosting providers, server locations and technical architecture may evolve, including through the addition or replacement of infrastructure providers. Our main providers currently include:
When data is transferred internationally, Bookday relies on the provider's applicable contractual and legal safeguards. Bookday does not sell or rent personal data.
Bookday uses cookies that are necessary for authentication, security and user preferences. Clicky is configured without tracking cookies and with anonymized IP addresses to produce audience statistics. If Bookday later introduces non-essential advertising or tracking cookies, they will not be activated for users who require consent unless that consent has been obtained.
Data is kept for as long as needed to provide the active account and services, handle support and disputes, and comply with accounting or legal obligations. When an account is closed or a valid deletion request is received, data is deleted or anonymized unless it must be retained for a legitimate legal reason. Backup copies may remain for a limited technical retention period.
Bookday uses reasonable technical and organizational safeguards appropriate to a small SaaS service, including HTTPS, access controls, authentication and managed cloud providers. No internet service can guarantee absolute security.
You may request access, correction, deletion, restriction, portability or objection where applicable, and withdraw consent at any time when processing relies on consent. For data used by a studio, we may forward or coordinate the request with that studio.
If you are in the European Union, you may also lodge a complaint with your local data protection authority, including the CNIL in France.
We may update this policy when our services, providers or legal obligations change. The date above identifies the latest version. Material changes will be brought to users' attention through the service or by email where appropriate.