符合歐盟 GDPR 規範的線上預約排程系統 - SimplyBook.me 最完整的線上預約系統，幫助您業績蒸蒸日上

Internal policies and procedures are drafted, maintained and followed in all business operations
The online Terms & Conditions have been reviewed and amended
The online Privacy Policy has been reviewed and amended
We have prepared a Data Processing Agreement to be concluded between you and SimplyBook.me Ltd, and made it available on our website
Additional online policies are made available for users and visitors
Our contractual relationships with our suppliers are assessed and additional documentation for privacy and data protection is concluded - the Data Processing Agreements/Addendums.
Old suppliers have been scrutinised and some have been dropped just for security’s sake.
All members of the company go through a privacy and data protection training server security has been hardened even further.
Back up procedures have been changed to minimize personal information storage for deleted systems.

Restricted access to Personal Data

- We follow the principle of least privilege in our business operations.

- For the level of access employees are instructed to use in diagnosing and resolving problems as well as responding to customer support requests.

- All employees have signed a Data Processing Addendum to the contract of employment and have provided a clean criminal record as part of our hiring process.

- All employees are legally binding to comply with the internal policies and procedures of the implemented Information Security Management System.

CUSTOMER SUPPORT REQUESTS: Upon activation of the double authentication feature of the System, we DO NOT have any access to your account and system. However, when you need quick assistance from our support team, you may give our representative a temporary code so they can help them out with settings if needed.
Protection of medical information - Patients Details

Medical information is considered as “sensitive personal data” and it may be stored in the system, in a component called “SOAP”. The SOAP component has now been enhanced to be encoded at rest so that no one can have access to this information, even if they break into the user’s system, or even into SimplyBook.me servers UNLESS they have the secret key. This key can be kept on an USB drive, or in a computer’s folder - but never on the SimplyBook.me servers. Just make sure that the computer is well protected, so that if it is stolen, thieves would not have easy access to the hard disk. Same applies to the USB drive, this can also be encrypted with a code that only you remember.

HIPAA FEATURE: For users that want to harden security even more, the HIPAA Custom Feature is available to the Standard and Premium Subscriptions. This allows users to set automatic system log out after predefined time, like 20 minutes after the system was being used. It also allows users to get notifications upon each login into the system. Furthermore, this feature disables personal data to be sent over email or SMS, it removes client’s and service names from these notifications, making it harder for snoopers to see personal data.
Right to withdraw consent to processing of Personal Data

All our email communications have included the option to unsubscribe via specific and easy to find links. This has now also been added to the promotions emails so clients that have unsubscribed from getting these messages will not be receiving them. This has though fortunately not been a problem as clients are generally happy to receive promotions from their favorite providers.

公司資料

usually publicly available on the internet in order for clients to be able to book.
系統使用者資料

通常會公開在網路上給所有人看，以讓客戶可以選擇與他們預約
客戶資料

Never available on the internet for other than system users to see

Each of these groups can access an interface to see and print out all information stored in the SimplyBook.me system. Additionally, upon request, all client details can be deleted with the use of a simple button.

Please note that these records can only be accessed by users after a simple authentication procedure by re-entering the password and if they have double authentication, they will be asked for a verification code to get access.

As client data is often part of statistical information about sales and bookings, the data is not all deleted but made completely unrecognisable but still kept usable for statistic purposes.