Reduce no-shows with reminders and live availability.
Centralise customer records, segmentation, and retention workflows.
Manage SMS, email, and chat conversations in one place.
Capture and convert new enquiries with clearer follow-up.
Use live and team chat to reply faster and book more clients.
Track transactions, credits, refunds, and checkout-linked revenue.
Run campaigns and segments tied to booking outcomes.
Drive repeat revenue with tracked promotions and redemptions.
Connect paid campaigns to lead and booking conversion workflows.
Coordinate social workflows with revenue and retention goals.
Manage stock, suppliers, and retail performance in one stack.
Coordinate rota, roles, and team execution workflows.
Keep day-to-day actions visible, assigned, and completed.
Capture intake and consent data with cleaner records.
Run resource-aware scheduling and service continuity workflows.
Bookings, reminders, and client growth for salons.
Operational control and patient communication in one system.
Consults, treatment plans, and repeat bookings without manual admin.
Simple workflows for solo beauty therapists.
Consult, treatment, and touch-up workflows in one place.
Practitioner-led treatment journeys with stronger retention.
Protect refill workflows and improve repeat demand.
Keep bookings, checkout, and retail operations connected.
Run member journeys and retention campaigns from one place.
Service + software workflows designed to drive more bookings.
Content and engagement workflows tied to enquiries and bookings.
Google, Meta, TikTok, and Microsoft PPC campaigns managed end to end.
Launch booking-connected web experiences quickly.
Transcriptions and treatment reports powered by your voice.
Talk to our team about growth workflows for your business.
AI-driven inbox handling across email, SMS, and social.
AI voice assistant for incoming booking calls.
Learn about our mission and platform focus.
Common questions about setup, workflows, and support.
Operational and growth insights for beauty teams.
Head-to-head comparisons against major alternatives.
Compare form-first tooling with full booking-to-retention coverage.
Compare operations and growth workflow depth.
Compare enquiry conversion and repeat-booking support.
Legal
This Data Processing Agreement explains the baseline terms that apply when a Managed customer acts as controller and Managed acts as processor for customer personal data. It is intended to reflect UK GDPR Article 28 processor-contract requirements. If you have a signed DPA, order form, or negotiated security schedule with Managed, that document may supplement or override this summary where the documents conflict.
For customer personal data processed through the Managed platform, the customer is generally the controller and Managed is the processor, except where Managed determines its own purposes for limited operational, security, legal, or billing processing.
The processing covers the services provided under the customer contract and continues for the period in which Managed is providing services and any limited post-termination period needed for return, deletion, backup expiry, or legal obligations.
Processing may include collecting, storing, organising, transmitting, securing, reporting on, and otherwise handling personal data as needed to provide bookings, forms, communication, payments, reporting, support, and related Managed functionality.
Depending on customer configuration, data may include contact details, appointment data, staff data, notes, communications, form responses, payment-linked information, and treatment-related information concerning customers, prospects, staff, contractors, and other authorised users.
Managed’s processing obligations are designed to reflect the minimum processor terms required under UK GDPR Article 28 and associated accountability guidance.
Managed will process customer personal data only on the customer’s documented instructions unless required to do otherwise by applicable law.
Managed ensures that personnel and authorised subprocessors with access to customer personal data are subject to confidentiality duties and appropriate access control.
Managed applies appropriate technical and organisational measures designed to protect customer personal data, including measures for confidentiality, integrity, resilience, restricted access, and incident handling.
Managed may use subprocessors to help deliver the service. Where we do so, we remain responsible for ensuring they are bound by data protection obligations materially consistent with our own processor obligations.
Taking into account the nature of processing, Managed will provide reasonable assistance so customers can respond to requests relating to access, correction, deletion, restriction, objection, or portability where applicable.
Where appropriate and reasonably requested, Managed will provide information or support relevant to customer obligations relating to security, breach handling, impact assessments, and regulator cooperation.
Managed operates with the expectation that customer data must be protected not only within our own environment but also across suppliers, infrastructure, and international service delivery chains.
Our security controls may include authentication and access restrictions, environment separation, encrypted transport, audit logging, supplier controls, backup protections, and internal operational safeguards proportionate to the service.
If Managed becomes aware of a personal data breach affecting customer personal data, we will notify the customer without undue delay and provide information reasonably available to us to support the customer’s response obligations.
Managed may engage hosting, analytics, payments, communications, infrastructure, and support providers as subprocessors. We aim to maintain a controlled supplier set appropriate for service delivery and security.
Where customer personal data is transferred outside the UK, Managed will use an appropriate transfer mechanism, such as adequacy regulations, data transfer clauses, or equivalent safeguards suitable for the transfer.
A workable DPA must address what happens at the end of the relationship and how customers obtain assurance that processor obligations are being met.
At the end of the service, Managed will delete or return customer personal data in line with the applicable contract, customer instructions, retention constraints, and legal obligations, unless law requires continued storage.
Managed will make available information reasonably necessary to demonstrate compliance with this DPA and may support reasonable audit or assurance requests in a manner that protects service security, confidentiality, and the rights of other customers.
Customers remain responsible for deciding what personal data to collect, the lawful basis for doing so, the content of forms and communications, and the instructions given to Managed through service configuration and use.
If you need a signed DPA or supplier review information, contact support@withmanaged.com. Where there is a conflict between this summary and a signed customer agreement, the signed agreement will generally take precedence.
Related legal documents