forumNew topic

Tried a free online booking system — is my data safe, and when does it become inadequate?

MMert B***ExpertCommunity member
Joined
Sep 2024
Message
129
#1

I run a beauty and skincare center in Kadıköy with two specialist staff members. We handle an average of 130 appointments a month. For the past four months I've been using a foreign-based free appointment system I found online. We log clients' first and last names, phone numbers, the type of session they booked, and sometimes special notes like "sensitive skin allergic to retinol" into this dashboard. The system sends email notifications but SMS isn't included in the free tier.

Over the last two months, the number of no-shows has noticeably increased leaving about 15 sessions completely empty every month. On top of that, storing this customer data on an overseas server and logging health-related details like allergies has started making me nervous regarding KVKK compliance.

Does using a free booking system at this stage pose legal or operational risks to my business? At what volume or revenue level should I switch to a paid, domestic professional setup?

FFurkan K***Expert
Job title
Data entry clerk
Sector
Furniture manufacturing
Organization type
40-person manufacturing company
Joined
Feb 2025
Message
64
Most Helpful#2

Short answer: While free tools are handy to start with, storing client health data like skin reactions on overseas servers carries serious legal liability under KVKK. If you're losing 15 bookings a month, the monthly fee for a proper system will easily pay for itself with just two saved sessions; so you should move without delay to a platform with SMS integration that complies with data security standards.

On the KVKK side, while names and phone numbers are considered general personal data, notes like skin sensitivity and allergies can fall under sensitive health data. By law, processing sensitive personal data and transferring it abroad without explicit consent, or outside statutory exceptions, is subject to very strict rules. The terms of service for free foreign software are usually governed by the laws of the host country and won't meet your data controller obligations in Turkey.

Operationally, the criteria for switching are clear: 1) When your monthly no-show rate tops ten percent, 2) When you have more than one staff member and calendar clashes start happening, 3) When SMS or instant message reminders become indispensable, free tools just won't cut it. Moving to a domestic booking software with Turkish-hosted databases and an SMS package, running between 500 and 1,200 TL per month, will eliminate fine risks and fill those empty slots.

CCaner A***MemberCommunity member
Joined
Dec 2023
Message
59
#3

The legal nature of notes kept in the health and personal care sector is critical. If it is established that sensitive personal data is hosted on foreign servers without obtaining the proper explicit consent from the individual, you could face administrative fines. Furthermore, configuring privacy notices and explicit consent mechanisms to match local regulations is technically difficult on free foreign dashboards.

YYiğit Y***New member
Job title
Secretary
Sector
Logistics
Organization type
chain store
Joined
May 2026
Message
17
#4

We experienced the exact same thing at our 3-specialist clinic. We were losing around 18 appointments a month on a free tool. We switched to a local system with SMS reminders for 750 TL a month. In the very first month, no-shows dropped from 18 to 4. Those 14 saved sessions brought in an extra 12,000 TL in revenue in a single month.

ZZübeyde Ç***Member
Job title
Finance Manager
Sector
Logistics
Organization type
chain store
Joined
Jan 2026
Message
94
#5

most clients don't even check their email. people completely forget about the appointment if an sms doesn't go straight to their phone. like losing those 15 sessions costs you way more than the yearly license fee anyway.

SSerkan G***Expert
Job title
Penetration testing specialist
Organization type
a company within a holding
Joined
Nov 2023
Message
154
#6

You need to look closely at the business model behind free platforms. They cover server maintenance, and development costs either by serving ads or by aggregating and processing dashboard data for third parties. You have zero official guarantee that your client list remains confidential.

CCeren E***MemberCommunity member
Joined
May 2024
Message
1
#7

There are two things you should do right today: First, export all your client history from the dashboard and create a secure backup. Second, stop putting allergy and health notes into that panel immediately until you switch systems, keeping them on physical paper or in an encrypted local drive instead.

AAlper A***MemberCommunity member
Joined
Aug 2024
Message
137
#8

Wait, so if we keep client phone numbers and appointment times in a regular Google Sheet is that also an issue under KVKK? Were just a small barbershop I dont totally get the distinction.

ZZerrin S***Member
Job title
Quality Assurance Manager
Sector
Insurance
Organization type
chain store
Joined
Jun 2024
Message
388

Doki · Backup setup · 2025

#9

Yes, regardless of where you store data, any cloud tool with overseas servers or unmanaged access permissions creates liability. Even if a barbershop doesn't handle sensitive data like allergies, names and phone numbers are still general personal data. As the business grows, consolidating this info into auditable, professional platforms is the safest bet.

GGürkan Y***Member
Job title
Secretary
Sector
Real estate
Organization type
300-person organization
Joined
Jun 2022
Message
85
#10

I felt relieved reading this answer so it's not just me. Trying to do this alone is the most expensive way.

This is my opinion I'm not claiming it's absolute truth.

GGizem C***Member
Job title
Purchasing manager
Sector
Furniture manufacturing
Organization type
boutique agency
Joined
May 2023
Message
324
#11

Its rare to find an explanation this clear. honestly the biggest time-waster for us was not knowing who had the final say.

Just leaving this note it might be useful.

HHalil A***MemberCommunity member
Joined
Nov 2024
Message
187
#12

There are three things to check when doing this. Trying to do this alone is the most expensive way.

Good luck with that.

LLeyla P***MemberCommunity member
Joined
Oct 2022
Message
2
#13

Good call starting this thread.

EEbru K***Member
Job title
System administrator
Sector
Healthcare services
Organization type
early-stage startup
Joined
Jun 2024
Message
28
#14

I agree.

VVolkan A***Veteran
Job title
Digital marketing specialist
Sector
Packaging
Organization type
chain store
Joined
Jan 2023
Message
191
#15

There's a common mistake people make when doing this. Taking notes for two weeks yields better results than a six-month estimate.

Correct me if I'm wrong.

HHüsniye A***Member
Job title
Intern
Sector
IT services
Organization type
medium-sized business
Joined
Mar 2023
Message
250

Doki · Mobile app · 2025

#16

Timely topic.

HHasan D***Member
Job title
Customer Relations Manager
Sector
Logistics
Organization type
40-person manufacturing company
Joined
Feb 2025
Message
12
#17

Yes, that's exactly how it is with free booking system. Taking notes for two weeks yields better results than a six-month estimate.

Hope this helps.

AAhmet Y***Expert
Job title
Field sales representative
Sector
Consulting
Organization type
regional distributor
Joined
Oct 2023
Message
2
#18

I completely agree. Just because everyone does it doesn't mean it's right.

Correct me if I'm wrong.

HHüsniye U***Member
Job title
Secretary
Sector
Automotive aftermarket
Organization type
boutique agency
Joined
Feb 2025
Message
173
#19

Let me summarize what's been said so far. The biggest time-waster for us was not knowing who had the final say.

When making a decision, also write down the cost of reversal. If you post the result here, it will help others too.

FFeyza Y***MemberCommunity member
Joined
Jan 2024
Message
61
#20

You're right.

Reply