Privacy policy
How Boclar collects, uses and protects personal data: for the businesses that use Boclar, their teams, and the clients who book with them.
Last updated: October 14, 2026Effective: October 14, 2026
In plain words
- A business’s client data belongs to that business. We store and process it only to run Boclar for them.
- We never sell personal data.
- Card numbers are handled by Stripe. Boclar never stores them.
- Each business’s data is kept apart inside the database, and passwords and PINs are stored hashed.
- Clients of a business should contact that business first about their data. You can always contact us too.
1. Who we are and our two roles
Boclar is provided by Boclar LLC, a Wyoming (USA) limited liability company. We handle personal data in two different roles:
2. What we collect
From businesses and their teams
- Name, email, phone and password (stored hashed), or your Google or Apple sign-in
- Business details: locations, hours, services, prices and team profiles
- Billing details: your plan, invoices and the card you pay with, which Stripe holds
- Sign-in sessions and technical data such as your browser and device, and how you use Boclar, see the cookie policy
Stored for a business, about its clients
- Contact and profile details the business records, such as name, phone, email and date of birth
- Appointments, payments, receipts and notes. A business may choose to record sensitive details, such as health or allergy notes. The business adds and controls this information.
- Marketing consent, preferred channels and language
From people booking online
- What you enter on a booking page: your name, email, phone and notes, and the booking you make
- The bookings you make and the contact details you use are also kept on your own device, so you can find them later and book faster. You can remove them under Saved details.
From people who write to us
- What you send through the contact form: your name, email, type of business, topic and message
3. How we use it
- To provide Boclar: the calendar, booking page, reminders, checkout and reports
- To send messages a business has set up, such as booking confirmations, reminders and receipts, by email, SMS or WhatsApp
- To bill for plans, add-ons and credits
- To keep Boclar secure, prevent abuse and fix errors
- To answer support questions and messages sent through the contact form
- To send product news to account owners. You can ask us to stop at any time by writing to us.
Where laws such as the GDPR apply, we rely on our contract with you to provide Boclar and bill for it; on our legitimate interests to keep Boclar secure, fix errors and answer messages; on our legitimate interest to understand how Boclar is used, which you can object to by writing to us; on your consent for product news where the law asks for it; and on legal obligations for billing and tax records.
5. International transfers
Boclar LLC is based in the United States, and our service providers may process data in the United States and other countries. Where the law requires it, we use recognised safeguards for these transfers, such as standard contractual clauses.
6. How long we keep it
We keep account data while your account is open. After it closes, we delete it or anonymise it once we no longer need it to provide the service or meet our legal obligations. A business decides how long it keeps its clients’ data in Boclar, can export it at any time and can ask us to erase it. Report files a business creates for download are deleted after 30 days. Messages sent through the contact form are kept for as long as we need them to answer and follow up, then deleted or anonymised. Billing records are kept as long as the law requires.
7. How we protect it
- Each business’s data is kept separate from every other business’s.
- Passwords and privacy lock PINs are stored hashed.
- Roles and permissions decide what each team member can see, and the privacy lock hides contact details or earnings on a shared screen.
- Card payments are processed by Stripe. Boclar never stores card numbers.
- Data travels over encrypted connections, and the keys we hold for connected services are stored encrypted. Our database and file storage providers also encrypt the data they store.
- If a security incident affects personal data, we tell the businesses affected without undue delay and help them meet any duty they have to tell their clients.
8. Your rights
Depending on where you live, you have these rights over your personal data:
- See the personal data we hold about you and get a copy
- Correct data that is wrong or incomplete
- Ask us to delete it
- Get it in a format you can take elsewhere
- Ask us to limit how we use it
- Object to how we use it, including for product news
- Withdraw your consent at any time, where we rely on it
If you book with a business that uses Boclar, contact that business first. It controls your data, and we will help it answer you.
If you have a Boclar account, many changes can be made in Settings › Account, or write to us using the contact details below. We answer within one month.
If you live in California, you also have the right to know what personal information we collect and why, to correct and delete it, and not to be treated differently for using these rights. We don’t sell your personal information or share it for cross-context behavioural advertising.
You can also complain to the data protection authority where you live or work.
9. Children
Boclar is a tool for businesses and is not meant for children. We don’t knowingly collect children’s personal data for our own purposes. When a business books appointments for a child, that business decides what it records and is responsible for any permission the law requires.
10. Changes to this policy
When we change this policy, we update the date at the top. If a change is significant, we tell account owners by email or in the app.