Privacy notice

Operator and contact

Responsibility

The service provider shown on the booking page controls your appointment data. AGGA provides the booking platform on its behalf. The AGGA operator separately handles platform account, subscription, support and security data. Contact the service provider about appointment data; info@agga.lt can help direct your request.

Data and purposes

Appointments use your name, phone, chosen service, location, time, status and related communication and action records. A phone number is required for appointment contact; email is optional. A specialist may also enter an appointment agreed with you. Accounts use sign-in, access, schedule, calendar integration, billing and support data.

Legal grounds

Booking and account services rely on providing the service and contractual relationships; accounting follows applicable legal obligations. Limited security records serve the legitimate interest in protecting the system and users. Marketing permission is not a booking condition. Alternative-time offers are a separate choice that is not preselected.

Recipients and providers

The service provider and authorized workspace users see data according to their permissions. Supabase provides database and authentication services, Vercel runs the application, Google supports connected calendars, Twilio delivers SMS, Resend delivers email and Stripe supports payment features when used. Required data is shared for these functions. Some provider operations may occur outside the EEA; their processing terms describe applicable transfer safeguards. Ask info@agga.lt for information or copies of safeguards applicable to your data.

Retention

Appointment history: 24 months after the appointment; SMS confirmation and reply evidence: 24 months; security logs: 12 months; support requests: 24 months after closure. Account data is needed during account service. Accounting documents follow mandatory statutory periods. Longer retention of specific records requires a documented legal obligation or justified dispute. When the period ends, authorized staff review the retention basis and safely delete, redact or restrict the data. This is not automatic deletion of all data. Records still linked to a person are not fully anonymous. Backups and provider systems have separate expiry and action procedures. After a restore, erasure and restriction decisions must be reapplied before normal use.

Your rights

Subject to applicable conditions, you may access, correct, erase, restrict or port your data, object to processing based on legitimate interests and withdraw consent where it is the basis. Write to info@agga.lt. Identity checks are proportionate to protecting the data. Requests are answered without undue delay, normally within one month; lawful extensions are explained. You may complain to the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt).

Recommendations and calendars

A phone number alone does not open appointment history. Recommendations do not move appointments automatically: the agreed specialist and customer actions are required. A copy you add to your personal Google, Apple or Outlook calendar is handled by that calendar service and does not change the AGGA booking.