WeByld (Appointoze) is the processor. Your business is the controller for client data collected through booking, intake, and consent.

We process booking data, contact details, consent records, and related logs only to operate Appointoze on your instructions. We do not sell client data. Medical aesthetics accounts: contact details only — not clinical records.

Have a lawful basis to collect client data, provide your own privacy notice, collect only what you need, handle client requests for data you control, and verify deposits in your own payment account.

Tenant isolation, encryption in transit and at rest, assistance with data subject requests where feasible, breach notification without undue delay, and use of service providers bound by appropriate data protection terms.

Records retained up to 2555 days unless law requires longer. On account termination, we delete or return your data within 30 days unless legally required to keep it.

By creating a business account and processing client data in Appointoze, you agree to this DPA as part of the Terms. Questions: support@milestones.webyld.pro.