Privacy policy

The platform is operated by Baxim.az, which controls your personal data. For any privacy question, write to info@baxim.az.

We collect only what we need to run the service:

• Account data: your email address. If you sign in with Google, the name, email and profile picture Google shares with us.
• Profile data: your name, phone number and preferred language.
• Booking data: the venue, services, professional, date and time, price, any note you add and the booking status.
• Technical data: session cookies, plus the IP address and browser details recorded in our hosting provider's security logs.
• Data on your device: your favourites and language choice. These stay in your browser and are not sent to us.

We do not collect payment card details, ID documents or health information. Please don't put such details in a booking note.

• To create your account and recognise you when you sign in.
• To create your booking, deliver it to the venue you chose and show you its status (confirmed, cancelled and so on).
• To contact you about your booking.
• To keep the platform secure and prevent fake bookings and abuse.
• To meet our legal obligations.
• To improve the service using aggregated statistics that don't identify you.

We do not sell or rent your data, or share it with third parties for advertising.

We process your data based on your consent (when you sign up and book), the need to carry out your booking, our legitimate interest in keeping the platform secure, and obligations set by law.

• The venue you book: your name, phone, note and booking details, so it can serve you and contact you if needed. The venue may use this data only to fulfil the booking.
• Technical providers: Supabase (database and sign-in), Vercel (website hosting) and Google (only if you choose to sign in with Google). They process data only on our instructions and under their own security standards.
• Public authorities: only where and as required by law.

Our technical providers' servers may be located outside Azerbaijan. We make sure your data travels over encrypted connections and is protected from unauthorised access. By using the platform you consent to this.

We keep your data while your account is active. If you ask us to delete your account, we will delete your data within 30 days, except where the law requires us to keep it or records are needed to resolve a dispute.

• All traffic to the site is encrypted with HTTPS.
• Database access rules ensure each user sees only their own bookings, and each venue sees only bookings made with it.
• We don't store passwords: you sign in with a one-time email link or with Google.

No system is perfectly secure. If you suspect someone has accessed your account, contact us right away.

Under the law you have the right to:

• find out what data we hold about you;
• have inaccurate or outdated data corrected;
• have your data and account deleted;
• withdraw your consent at any time;
• object to the processing of your data.

To use these rights, write to info@baxim.az. We will reply within the period set by law.

We use only cookies the site needs to work: session cookies that keep you signed in, and a short-lived cookie that protects the sign-in process. We do not use advertising or tracking cookies. Favourites and your language choice are kept in your browser's local storage.

You can delete or block cookies in your browser settings, but you won't be able to sign in.

The platform is not intended for anyone under 16. If we learn we have collected data from someone under 16, we will delete it.

We may update this policy from time to time. The date of the latest version is shown at the top of this page. We will give advance notice of significant changes on the platform or by email.

Questions, requests and complaints: info@baxim.az.