Policies and consents
Updated September 19, 2026
When a customer books through Slotsy, your company is the controller of their data and Slotsy only processes it on your instructions. So the customer should be reading your rules, not ours.
Where to set it
Settings → Booking → Your policies
| Field | What it is |
|---|---|
| Privacy policy | A link to your own policy |
| Terms of service | A link to your own terms, if you have any |
| Offer a newsletter subscription | Whether to show the customer a subscription box |
If you leave it empty
Nothing breaks. The customer sees a short notice naming your company as the controller, and a separate link to Slotsy as the platform:
Your details are processed by Pilates / Larysa Polianska to make and remind you of this booking. Slotsy (the platform)
Our policy is never shown as yours. We do not know your house rules, whether you film in class, or who else you share data with — so we cannot speak for you.
The newsletter
Turning on "Offer a newsletter subscription" adds a separate, empty box at the confirmation step. Without their consent you may not send marketing — not in the EU, not in Ukraine.
The customer card shows the answer:
| What you see | What it means |
|---|---|
| "Agrees to the newsletter · since 19.09.2026" | you may write |
| "Does not want the newsletter" | you may not |
| nothing | never asked — which is not the same as a refusal |
You cannot set consent on a customer's behalf, deliberately. They give it themselves, at a recorded moment, against recorded wording. A field staff could tick would be a consent nobody gave.
The box is shown until the customer answers it. Once they have, later bookings do not show it again — and an unticked box cancels nothing: silence is not a refusal.
They can withdraw from their own account, under "Privacy", and you see it on the card straight away. If it says they do not want the newsletter, do not write — even if they agreed before.
What is recorded automatically
| When | What |
|---|---|
| A customer signs in for the first time | acceptance of Slotsy's terms and privacy policy |
| They book with the cancellation-rules box ticked | the consent and the wording shown |
| They tick a newsletter box | yours and Slotsy's, separately |
Not just the fact, but the version and fingerprint of the text, the date and the IP. Change your cancellation rules later and old consents stay tied to the old wording — a new version cannot be passed off as agreed.
What we do not ask
There is deliberately no "I consent to the processing of my personal data" box for the booking itself. The basis for processing is the contract with the customer, not consent. Consent that the service is impossible without is not freely given, so such a box adds no protection — only the appearance of a choice that is not there.
Related
- Cancellation rules — the text the customer sees
- Customer management — the customer card