Client onboarding

How we handle your information

This page explains what our onboarding site collects, who can see it, how long we keep it and how to ask us to delete it. In short: only what we need to build your website, kept private, and deleted when we no longer need it.

Who we are

ONNO Booked is a division of ONNO Agency (Pty) Ltd, based in Johannesburg, South Africa. You can reach us at hello@onnobooked.com.

What we collect

• Your answers: your spa's details, address and hours, treatments and prices, memberships and financing, booking links, social links, how you'd like your site to feel, sites you admire and your notes.
• Your team: provider names, license types, states and short bios, and any headshots you choose to upload.
• Your files: logo, brand guide, font files, photos and menus, including any images from your own website that you keep.
• The name, role and email of the person filling in the brief, and of your decision-maker and clinical approver.

Reading your current website

If you ask us to, by typing your website address on the welcome page or by giving it to us when you sign up, our system reads the public pages and images of your own website and fills in your answers for you: things like your treatments and prices, team, address, opening hours, links, logo and photos. It reads nothing else: no other websites, no social media, no review sites, and nothing behind a password. It follows your website's robots.txt, it never collects patient names, reviews or testimonials, and it skips before-and-after and results photos.

Every answer it fills in is marked "From your website: please check" and every image it adds has Keep and Remove buttons, so you decide what stays. Any image you remove is deleted, and reading your website again won't bring it back. We record which answers you confirmed or changed.

If we prepare your answers by hand instead, before we send your private link, we read only the same public pages of your own website and your Google Business Profile. We don't buy data or use any other sources.

No patient information, ever

This site is not designed to hold patient information, and we never ask for it. Please don't include patient names, photos, before-and-after images or health details anywhere in your brief. If something like that is uploaded by mistake, tell us and we'll delete it straight away.

What we don't do

• No cookies, analytics, advertising or tracking scripts on this site.
• We don't sell or share your personal information, and we don't use it to market anything else to you.

Who can see it

• Anyone who has your private link. Please treat it like a password and only share it with people at your spa. We can replace it at any time, and the old link then stops working.
• Rozanne at ONNO Booked, who builds your site.
• Your files are stored privately. They are never public; they are only shown through this site after your link or our sign-in is checked.

Where it's stored

On Cloudflare's network (a database and private file storage), which may store it outside South Africa and outside the United States. Cloudflare acts as our service provider.

How long we keep it

• Your submitted brief: while we build and look after your website, so we can refer back to what you asked for.
• Your original uploaded files: deleted 90 days after your site launches. The photos and logo used on your website live on in your website, in your own account.
• If the project doesn't go ahead, we delete everything when you ask, or once the project is closed.

On your device

This site keeps your private link in your browser's local storage, so you can come back without opening the email again. Clearing this site's data in your browser removes it.

Your choices

You can ask to see, correct or delete the information we hold about you at any time. Email hello@onnobooked.com and we'll reply within a few business days. We follow South Africa's Protection of Personal Information Act (POPIA). If you're unhappy with how we've handled your information, you can also contact South Africa's Information Regulator.

Last updated October 28, 2026.