piklo booking

Privacy Policy

Last updated: 18 May 2026

1. Data controller

Piklo Systems, Denmark, is the data controller for the processing of your personal data on this website and in the booking system. Contact: privacy@piklo.dk.

2. What data we collect

  • When you book an appointment: your name, email, phone number and details about the service you have booked. Practitioners can add notes.
  • Payment data: if you pay online, this is processed by Stripe. We never store card details on our servers.
  • Technical data: IP address, browser type, pages you have visited.

3. Legal basis

  • Booking: performance of a contract (article 6.1.b).
  • Reminders: legitimate interest + consent for SMS (article 6.1.a/f).
  • Marketing: explicit consent (article 6.1.a).
  • Accounting: legal requirement, the Danish Bookkeeping Act (article 6.1.c).

4. How long we keep data

  • Booking data: 5 years (accounting requirement).
  • Marketing consent: until you withdraw it.
  • Log files: 90 days.

5. Your rights

You have the right to:

  • Access to your data (GDPR article 15).
  • Rectification of incorrect information (article 16).
  • Erasure ("the right to be forgotten", article 17) — note that booking data is kept anonymised for accounting reasons.
  • Restriction of processing (article 18).
  • Objection and data portability (articles 20-21).
  • Complaint to the Danish Data Protection Agency (datatilsynet.dk).

Requests are sent to privacy@piklo.dk or directly to the practitioner you have booked with.

6. Data processors

  • Supabase (database service, EU region)
  • Vercel (hosting, EU region)
  • Stripe (payments, EU/US — Standard Contractual Clauses)
  • Resend (email, EU region)
  • BulkGate (SMS, EU)

7. Cookies

We use necessary cookies to make the site work. Analytics and marketing cookies require your consent. See our cookie policy.

8. Security

We use HTTPS across the entire platform, encrypted database storage and Row-Level Security as access control. We carry out regular security audits.

9. Changes

This policy may change. Material changes are communicated via email to registered users. History can be requested by email.