Privacy Policy

Last updated: 29 June 2026

1. Who We Are

Farset ("we", "us", "our") operates the Farset booking and scheduling platform available at farset.app and via our mobile applications. Farset is the data controller for personal data collected through this platform.

For GDPR purposes, our representative in the UK/EU can be contacted at privacy@farset.app. For California and US privacy requests, the same address applies.

2. Information We Collect

We collect information in the following categories:

2a. Information You Provide

  • Account Information: Full name, email address, phone number, business name, address
  • Booking Data: Client/guest names, email addresses, phone numbers, appointment notes, consultation answers
  • Service Information: Services offered, pricing, availability schedules
  • Payment Information: Processed and stored securely by Stripe. We do not store full card numbers or CVV details.
  • Marketing Consent: Records of your opt-in/opt-out preferences for marketing communications

2b. Information Collected Automatically

  • Usage Data: Pages visited, features used, session duration, clicks
  • Device Data: IP address, browser type, operating system, device identifiers
  • Cookies & Tracking: See our Cookie Policy for full details
  • Email Engagement: Open and click tracking for transactional and marketing emails (via tracking pixel)

2c. Information from Third Parties

  • Google Reviews and business data (when you connect Google Business Profile)
  • Stripe identity and payment verification data

3. Legal Basis for Processing (GDPR)

If you are located in the UK or European Economic Area (EEA), we process your personal data under the following legal bases:

  • Contract performance (Art. 6(1)(b)): To provide the booking platform, process appointments, send confirmations and manage your account
  • Legitimate interests (Art. 6(1)(f)): To improve our services, prevent fraud, ensure security, and communicate service-related updates
  • Legal obligation (Art. 6(1)(c)): To comply with applicable laws including tax, financial, and data protection regulations
  • Consent (Art. 6(1)(a)): For marketing emails and optional analytics cookies — you may withdraw consent at any time without affecting the lawfulness of prior processing

4. How We Use Your Information

  • Provide, operate and maintain the Farset platform
  • Process appointments and send booking confirmations, reminders and receipts
  • Process payments and manage billing through Stripe
  • Send marketing and rebooking reminder emails (only with your explicit consent)
  • Improve platform features, fix bugs and conduct analytics
  • Respond to support enquiries
  • Detect and prevent fraud, abuse and security threats
  • Comply with legal, tax and regulatory obligations
  • Enforce our Terms of Service

5. Data Sharing and Disclosure

We do not sell, rent or trade your personal data. We may share information with:

  • Stripe, Inc.: Payment processing, fraud prevention and identity verification. Stripe's privacy policy applies to data shared with them: stripe.com/privacy
  • Resend: Transactional and marketing email delivery
  • Google: Maps, Reviews and Analytics integrations (where enabled)
  • Infrastructure providers: Our underlying application platform and hosting providers, bound by data processing agreements
  • Legal authorities: When required by law, court order, or to protect the rights, property or safety of Farset, our users or the public
  • Business transfers: In connection with a merger, acquisition or sale of assets, with prior notice where required by law

All third-party processors are bound by data processing agreements and are required to handle your data in compliance with applicable privacy laws.

6. International Data Transfers

Farset operates globally. If you are located in the UK or EEA, your data may be transferred to and processed in countries outside your jurisdiction (including the United States). Where we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the relevant supervisory authority, or we rely on adequacy decisions.

7. Data Retention

  • Active accounts: Data is retained for as long as your account is active
  • After deletion: All personal data is permanently deleted within 30 days of account deletion, except where we are legally required to retain it (e.g. financial records)
  • Financial records: Retained for up to 7 years to comply with tax and accounting laws
  • Backups: May persist for up to 90 days in encrypted backup systems before permanent deletion

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies for functionality, analytics and (with your consent) marketing purposes. You can manage cookie preferences at any time. See our full Cookie Policy.

9. Security

We implement industry-standard security measures including TLS/HTTPS encryption in transit, encryption at rest, access controls, and regular security reviews. Payment data is handled exclusively by Stripe's PCI-DSS compliant infrastructure. No online service can guarantee absolute security; you use the platform at your own risk and should protect your login credentials.

10. Your Rights (GDPR / UK GDPR)

If you are in the UK or EEA, you have the following rights under GDPR / UK GDPR:

  • Right of access (Art. 15): Request a copy of the personal data we hold about you
  • Right to rectification (Art. 16): Request correction of inaccurate or incomplete data
  • Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
  • Right to restrict processing (Art. 18): Request that we limit how we use your data
  • Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
  • Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time
  • Right to lodge a complaint: You may complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or your local EU supervisory authority

To exercise any of these rights, email us at privacy@farset.app. We will respond within 30 days (or within any shorter period required by applicable law).

11. Your Rights (US — California & Other States)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA:

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months
  • Right to Delete: Request deletion of your personal information, subject to certain exceptions
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioural advertising
  • Right to Limit Sensitive Personal Information: Request that we limit our use and disclosure of sensitive personal information
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

Residents of Colorado, Connecticut, Virginia, Texas, Nevada and other US states with privacy laws have similar rights. To submit a verifiable request, contact us at privacy@farset.app.

Do Not Sell or Share My Personal Information: We do not sell personal information. We do not share personal information for cross-context behavioural advertising.

12. Children's Privacy

Farset is not directed at children under the age of 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us at privacy@farset.app and we will delete it promptly.

13. Google API and Services Disclosure

Farset's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access Google data (such as Google Reviews and Business Profile information) solely to display it within your Farset dashboard. We do not transfer Google user data to third parties, use it for advertising, or allow humans to read it except as required to provide the service or as permitted by law.

14. Marketing Communications

We will only send marketing emails to clients who have given explicit consent (opt-in). You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us directly. Unsubscribing from marketing does not affect transactional communications related to your bookings or account.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the platform before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of Farset after changes are posted constitutes acceptance of the updated policy.

16. Contact Us

For any privacy-related questions, requests or complaints:

UK residents may also contact the Information Commissioner's Office (ICO): ico.org.uk

We use cookies to improve your experience.

By continuing, you agree to our Privacy Policy, Terms of Service, and Cookie Policy.