Booking Sync privacy policy

Last updated: 8 November 2026

Who we are

Booking Sync is made by Support Labs (www.supportlabs.co.uk). Contact: support@supportlabs.co.uk.

Our role

When your business uses Booking Sync, your business is the controller of your clients' details, and Support Labs is your processor. We only use the data to run Booking Sync for you.

What we read

From Acuity: your account's id and login email, your appointment types and products, and each booking or order we're told about (client name and email, service, date, price, payments, any package or certificate used).
From Xero: your organisation name, accounts and tax rates, and the contacts and invoices we create.

What we write

To Xero: contacts (client name and email, or one shared contact if you choose), invoices and payments.
To Acuity: the webhooks that tell us about new and changed bookings. Nothing else in Acuity is changed.

What we store

Your settings (accounts, tax rates and options you choose) and your Xero organisation name.
For each booking: its Acuity id, the Xero invoice id, amounts and a short activity line. Client names and email addresses are not stored; a client is matched to their Xero contact by a one-way hash.
Your Acuity and Xero access tokens, encrypted with AES-256-GCM.
Your subscription status from Stripe. We never see or store card details.

Who else handles the data (sub-processors)

Cloudflare: hosting and database.
Acuity Scheduling and Xero: your own accounts.
Stripe: subscription payments.
Resend: alert emails to you. Where: EU (Ireland).

How long we keep it

As long as Booking Sync is connected. When you click "Disconnect and delete my data", we remove our webhooks from Acuity, revoke our Xero access, cancel your subscription and delete everything we hold for your account straight away. You can also ask us to delete it by email.

Logs

Our hosting keeps short technical logs (for example, that a request failed). We never log tokens or client details.

Cookies

Booking Sync sets one cookie to keep you signed in. No tracking cookies.

AI

We do not use your data to train AI models.

Your rights

Your clients can contact your business to exercise their UK GDPR rights; we help you answer. You can contact us at support@supportlabs.co.uk, and you can complain to the Information Commissioner's Office (ico.org.uk).

Changes

If we change this policy we'll update the date above and tell you by email.

Questions: support@supportlabs.co.uk · 07725 521854