Privacy Policy

BKR provides booking and clinic-management software to clinics in the United Kingdom. If you have a privacy question, contact us at hello@bkr.it.com.

When we handle information about a clinic, its owners, staff or account, BKR is normally the data controller. When a clinic uses BKR to handle information about its clients, the clinic is the data controller and BKR acts as its data processor.

From clinics and their teams, we may collect names, business and contact details, login and account information, subscription and billing records, support messages, service activity and technical information such as device, browser and IP address.

Clinics may use BKR to collect and store their clients' names, contact details, appointment history, treatment notes, medical-history answers, consent records, signatures, marketing preferences and payment-related records. Each clinic decides what client information it needs and why it is used.

We use information to provide, secure, maintain and improve BKR; administer accounts and subscriptions; answer support requests; prevent misuse; meet legal obligations; and communicate essential service information.

We process clinic-client information only to provide the service on the clinic's instructions, unless the law requires otherwise. Clinics are responsible for giving their clients appropriate privacy information and choosing a lawful basis for their use of personal information.

We use carefully selected suppliers to operate BKR. These may include hosting and database providers, Stripe for BKR subscription payments and, where enabled, payment services for clinics, email delivery providers and SMS providers. They may process information only to provide their services to us and must protect it appropriately.

We may also disclose information where required by law, to protect rights or safety, or as part of a business sale or reorganisation. We do not sell personal information.

Some suppliers may process information outside the UK. Where this happens, we use safeguards recognised under UK data-protection law, such as adequacy regulations or approved contractual protections.

We keep account and service information only for as long as needed to provide BKR, meet legal and financial obligations, resolve disputes and enforce agreements. Clinics control retention of their client information, subject to the service's available settings and applicable law. When an account ends, information may remain in secure backups for a limited period before deletion.

We use appropriate technical and organisational safeguards designed to protect personal information, including access controls, secure infrastructure and restricted staff access. No online service can guarantee absolute security, so clinics must also keep account credentials safe and manage team access carefully.

Depending on the circumstances, you may have rights to access, correct, erase or restrict use of your information, object to processing, receive information in a portable format, and withdraw consent where consent is relied on. You may also have rights relating to automated decisions.

If your request concerns information held by a clinic about you as its client, contact that clinic first. BKR will support the clinic in responding. For information BKR controls, email hello@bkr.it.com. We may need to verify your identity.

BKR uses cookies and similar storage that are necessary to keep users signed in, remember essential choices, maintain security and operate the service. If we introduce non-essential analytics or advertising cookies, we will provide suitable information and choices before using them where consent is required.

Please contact hello@bkr.it.com first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office, the UK's data-protection regulator, at ico.org.uk or by calling 0303 123 1113.

We may update this policy as BKR or the law changes. We will publish the latest version here and update the date at the top. We will give appropriate notice of material changes.