Circumflex Booking

Circumflex Booking is a self-hosted appointment booking plugin for treatments,
consultations, and other scheduled services. Customers request an available
time, and authorized staff approve or reject each request manually.

Customer booking

• Let customers select one or more services in a single booking.
• Show a practitioner choice or “first available” when several practitioners
  qualify. The choice is hidden automatically when only one qualifies.
• Present available dates and times in accessible calendar and list views.
  Unavailable times are visually distinct and not selectable.
• Collect name, email address, phone number, and an optional practical comment.
• Reserve a requested time while the booking is pending, preventing another
  customer from taking it.
• Send customer and staff notifications for booking events and reminders.
• Give confirmed customers a private link to view the booking, request another
  time, or cancel within the configured deadline.

Administration

• Configure services, durations, preparation buffers, prices, booking and
  cancellation deadlines, and drag-and-drop service order.
• Configure one or more practitioners and assign the services each can provide.
• Combine recurring weekly hours with closures, extra opening dates, and manual
  blocks.
• Review and process bookings in a filterable list or calendar with
  role- and practitioner-scoped permissions.
• Optionally let linked practitioners decide only requests assigned to them.
• Configure email identity and templates, then preview the responsive HTML and
  plain-text versions.
• Use WordPress privacy tools, configurable retention, local diagnostics,
  configuration transfer, and a link to the WordPress-selected privacy policy.

Add the booking form anywhere

Circumflex Booking does not create or reserve a booking URL. Create or edit a
normal WordPress page and insert the Circumflex Booking block, the
[circumflex_booking] shortcode, or optional Elementor widget. Publish it and
share that page’s URL with customers. Elementor, WooCommerce, and customer
accounts are not required.

All shipped functionality is available without payment or a license key.
Payments, recurring bookings, and multiple locations are outside scope. Email
uses wp_mail(); a separate SMTP plugin is recommended.

Booking and diagnostics stay on the site. Optional Cloudflare Turnstile is
disabled by default and disclosed below.

Privacy and External Services

The site’s database stores customer contact details, optional practical
comment, services, practitioner, appointment time, and customer-notice
snapshot. Internal notes are visible only to authorized roles.

By default, personal data is anonymized 365 days after a terminal status; the
period is configurable. Anonymization removes contact details, free text,
customer tokens, and identifying notification and audit data. Anonymous
booking facts may remain for statistics. WordPress privacy export and erasure
are supported. Erasing an active booking does not release its reserved time.

Authorized administrators can generate local diagnostics that omit personal
data, free text, tokens, secrets, IP addresses, and site URLs. Nothing is sent
to Circumflex AS.

Cloudflare Turnstile

Cloudflare Turnstile is an
optional anti-spam service. It is disabled by default and requires Cloudflare
keys plus explicit administrator activation.

When enabled, the browser loads https://challenges.cloudflare.com. Cloudflare
processes signals including IP address, TLS fingerprint, User-Agent, site key,
and origin. WordPress sends the secret and response token to Siteverify but
does not explicitly add the visitor IP. Bookings fail closed if verification
cannot finish.

Review Cloudflare’s
Turnstile Privacy Addendum,
Privacy Policy, and
Terms before enabling the service.
The site owner must reflect this processing in the site’s privacy information.

Source Code

Source and build instructions are in the
public GitLab repository.

Support

Use the Support tab for help. Product information is at
circumflex.no/circumflex-booking.
Never post customer data, private links, credentials, or health information.