Data protection

Privacy when booking an appointment

Last updated: November 2026 · Bendel Desarrollos S.L.
This is a courtesy translation. If there is any discrepancy, the Spanish version prevails.
For people who book an appointment with a business through Bendely. Are you a business? See the Privacy Policy for businesses.

1 Who processes your data

The data controller is the business you book with (the hair salon, beauty centre, clinic or workshop whose name appears on the booking page). It decides what your data is used for. Its contact details appear on the booking page and in your appointment emails; if you cannot find them, write to us at dpd@bendel.es and we will provide them.

Bendel Desarrollos, S.L., the company behind Bendely, acts as data processor: it stores and manages the data on the business's behalf, following its instructions and without using it for its own purposes.

Processor Bendel Desarrollos, S.L. · Tax ID B21964440
Address C/ Cartagena de Indias, 10. 28300 Aranjuez (Madrid), Spain
Data protection dpd@bendel.es

2 What data is processed

  • What you enter when booking: name, email address, phone number and any notes you add. You do not need to include medical details.
  • Appointment details: service, professional, date and time.
  • Technical connection data (such as IP address and browser), only to protect the website against bots and bulk bookings.

You do not need to create an account or password to book. If you tick "Remember my details", your name, phone number and email are stored only on that device until you untick the option or clear your browser data.

3 What it is used for

  • Managing your appointment in the business's schedule.
  • Sending you the confirmation by email, with a file to add it to your calendar.
  • Letting you know if anything changes with your appointment.

Bendel will not send you advertising or marketing communications, does not use your data for its own purposes and does not sell it. If the business wanted to send you promotions, it would have to ask for your permission separately.

4 Why it can be used (legal basis)

  • Managing your appointment: your own appointment request (Art. 6.1.b GDPR). Your consent is not needed and you do not have to tick any box.
  • Protecting the website against bots and abuse: the legitimate interest in keeping the service secure for businesses and their customers (Art. 6.1.f GDPR).
  • Healthcare centres: if you book with a healthcare or physiotherapy centre, the appointment details may reveal health information. In that case they are processed to provide the care you request, under professional secrecy (Art. 9.2.h GDPR).

5 How long it is kept

For as long as the business needs to manage its relationship with you (for example, to keep your appointment history) and then for the legal periods that apply to it. If the business stops using Bendely, your data is deleted from Bendely 30 days after the account is closed.

6 Who else can see it

Your data is not shared with third parties unless required by law. For the website to work, Bendel uses these providers, which process the data only on its behalf and with the same safeguards:

  • Microsoft (Azure and Microsoft 365): hosting of the website and data in the European Union, and sending confirmation emails.
  • Google (reCAPTCHA): protecting the booking form against bots. It receives technical connection data and may process it in the United States; Google LLC participates in the EU-U.S. Data Privacy Framework, which ensures a level of protection equivalent to that in Europe.

7 Minors

You must be at least 14 to book on your own. If you are under 14, a parent or guardian must make the booking and any requests about your data.

If you are between 14 and 17, you can provide your details to book services that are usual for your age and exercise your rights, but the business may ask for your parents' or guardians' authorisation to provide the service.

8 Your rights

You can ask at any time to access your data, correct it, delete it, restrict its use, object to its processing or take it to another service.

The quickest way is to ask the business you booked with directly. You can also write to dpd@bendel.es stating the business and what you need: we will forward your request to the business without delay.

If you are not satisfied with the reply, you can complain to the Spanish Data Protection Agency (aepd.es).

9 Cookies

The website only uses technical and preference cookies (for example, to remember your language). It does not use analytics or advertising cookies. Full details are in the Cookie Policy.

10 Changes to this information

If this information changes, we will publish the new version here with its update date.