Anti-spam policy

Last updated: 3 June 2026

BookOS gives salons tools to send transactional and marketing communications to their own customers via email and SMS. This policy explains the rules you must follow when using those tools. It supplements (and does not replace) the Acceptable Use Policy, the Terms of Service, and any local marketing law that applies to you or to your recipients.

1. The legal baseline

You are responsible for compliance with, at minimum:

• EU ePrivacy Directive 2002/58/EC, Articles 6 and 13;
• Danish Marketing Practices Act (Markedsføringsloven), in particular § 10 (electronic marketing requires prior consent) and § 6 (unsolicited approaches);
• GDPR Articles 6 and 7 (lawful basis and the conditions for valid consent);
• The recipient’s national equivalents (e.g. UK PECR + UK GDPR, German UWG, French CNIL guidance, Swedish IMY guidance);
• Carrier and aggregator rules where SMS is involved (no prohibited content, no aggregator hopping, no traffic pumping).

2. Consent requirements

• Marketing emails and SMS may only be sent to recipients who have given prior, freely given, specific, informed, and unambiguous opt-in consent for the channel and message type.
• Consent must be evidenced. Keep dated records of when, how, and on what wording the recipient opted in. BookOS stores marketing-consent flags per customer for this purpose.
• The narrow “soft opt-in” under ePrivacy Art. 13(2) only applies where the recipient’s contact details were obtained in the context of a sale of similar goods/services, you provided a clear opt-out at the time of collection, and every subsequent message offers a clear opt-out.
• Purchased, scraped, harvested, rented, or appended lists are prohibited.

3. Content and identification

Every marketing message you send through BookOS must:

• clearly identify the sender (your business legal name and a working reply address);
• include your business postal address (Markedsføringsloven § 6 and CAN-SPAM equivalents);
• describe its commercial nature without disguise;
• include a functional, one-click opt-out / unsubscribe mechanism that does not require login;
• honour opt-out requests within ten (10) business days — BookOS automates the flag immediately on click, but the legal duty remains yours.

4. SMS-specific rules

• Use SMS only for legitimate appointment confirmations, reminders, urgent operational notices, or marketing messages where the recipient has separately opted in for marketing SMS (an email-only consent does not authorise SMS).
• Respect time-of-day curfews in the recipient’s jurisdiction. In Denmark, do not send marketing SMS between 21:00 and 09:00 local time.
• Include “STOP” instructions in marketing SMS (BookOS handles inbound STOP/UNSUBSCRIBE/AFMELD keywords automatically).
• Do not send messages designed to trigger paid response, premium-rate calls, or carrier-billing flows.
• Our SMS sub-processor imposes its own acceptable-use rules — comply with those as well. See sub-processors for the current provider.

5. Prohibited content (any channel)

• Content prohibited by the Acceptable Use Policy;
• Misleading headers, deceptive subject lines, or false sender identities;
• Adult content, gambling, or content targeting minors;
• Pyramid schemes, multi-level-marketing recruitment, get-rich-quick offers;
• Cryptocurrency / token sales, ICOs, or unregulated financial promotions;
• Content that violates a recipient’s rights under GDPR (e.g. profiling without lawful basis, targeting based on special-category data without explicit consent).

6. Bounce, complaint, and reputation thresholds

BookOS may throttle or suspend an account’s sending if any of the following are sustained:

• spam-complaint rate above 0.3% on email;
• hard-bounce rate above 5% on email;
• SMS opt-out rate above 5% within 24 hours of a send;
• spike in undelivered SMS suggesting carrier filtering;
• any pattern indicative of list buying, list rental, or SMS pumping.

7. Investigations and enforcement

We investigate reports of suspected spam sent through the Service. Where a violation is confirmed, BookOS may, at its discretion: (a) require remediation; (b) throttle or pause sending; (c) suspend or terminate the account; (d) cooperate with carriers, mailbox providers, or supervisory authorities. We provide a statement of reasons and an appeal path consistent with Articles 17 and 20 of the EU Digital Services Act.

8. Reporting abuse

Report suspected spam sent through a BookOS-hosted account to abuse@bookos.io. Recipients of unwanted marketing emails or SMS may also unsubscribe directly through the message itself; the unsubscribe link / STOP keyword is processed automatically.