Privacy Policy

Who we are

Booked & Banked is a revenue advisory service for appointment-based businesses, based in Toronto, Ontario. We are subject to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). Questions about this policy can be sent to josh@bookedandbanked.com.

What we collect and why

We collect personal information only when you provide it to us directly — for example, when you fill out our intake form or email us. The information we may collect includes:

• Name, email address, and phone number
• Business name, location, and type
• Operational details you share in your intake form (booking volume, revenue range, team size)
• Booking system data you choose to share with us as part of an engagement

We collect this information to provide revenue diagnostic services, to communicate with you about your engagement, and to prepare written analysis and recommendations. We do not collect personal information for any other purpose.

Your booking data

If you engage us for an audit, you may share a CSV export of your booking system data. This data is used solely to produce the analysis described in your engagement agreement.

Identifiable files (your original booking exports and named deliverables) are retained for the duration of your active engagement plus twelve (12) months, then permanently deleted unless you request otherwise in writing.

Anonymised and aggregated patterns derived from your engagement — from which no identifying information can be recovered — may be retained indefinitely for internal benchmarking and service improvement. Before any data informs a benchmark, it is fully stripped of all identifying details and aggregated across multiple engagements. Your business is never identified in any external material. You may opt out of this use at any time by contacting us.

We also use AI-assisted tools as part of our analysis and report-writing process. Your data is anonymised before it is processed by any AI tool. AI-generated outputs are reviewed and edited by us before delivery. Your data files are not stored or retained by the AI tool itself.

We do not:

• Share your booking data with any third party
• Reference your business by name in any public material without your explicit written consent
• Sell, licence, or transfer your data to any third party

Retention periods

• Contact and intake form submissions are retained for up to 12 months after our last communication.
• Intake form data and engagement records are retained for up to 2 years after your last engagement, then deleted.

Our intake form is processed via Netlify Forms. Data submitted through that form is transmitted securely and subject to Netlify’s privacy policy.

Who we share it with

We do not sell, rent, or share your personal information with third parties. We do not use advertising networks, analytics platforms, or data brokers.

Disclosure may occur only if required by law or court order, or with your explicit written consent.

Your rights under PIPEDA

You have the right to know what personal information we hold about you, request corrections, request deletion, and withdraw consent at any time. To exercise any of these rights, email josh@bookedandbanked.com with the subject line “Privacy Request.” We will respond within 30 days.

Changes to this policy

We may update this policy periodically. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of our services after a policy update constitutes acceptance of the revised policy. If changes are material, we will notify active clients by email.

Contact

All privacy inquiries should be directed to:
Joshua
Booked & Banked Inc.  ·  Toronto, ON
josh@bookedandbanked.com