BookestoClinics, medspas and aesthetics
We are your diary. We are not your patient record, and we will not pretend to be.
No card needed. We set up each new venue with you, and pricing is agreed before anything is charged.
Read this before the features
Whether we can take you depends on your licence, not your signage
If you hold a DHA or DOH healthcare-facility licence in the UAE, you sit inside the health information exchange mandate. Dubai’s NABIDH policy applies to licensed facilities, and Abu Dhabi is blunter: a facility that has not connected cannot renew its licence and cannot submit claims.
Three things follow, and they are widely stated wrongly in this market.
The obligation binds your facility, not your software vendors. There is no such thing as a NABIDH-certified booking vendor. Abu Dhabi’s own connected-EMR page says being listed does not mean a vendor meets any other regulatory requirement, and connection is per-facility.
A booking system is not in scope of the exchange mandate at all. What must flow is clinical data out of your EMR. The message set is admission, discharge, transfer and documents. There is no appointment object in the minimum data set.
And calling ourselves a medspa platform instead of a clinic platform would change nothing, because scope is set by your licence category rather than by our vocabulary. A Dubai medspa doing injectables is a licensed clinic whatever anybody’s website says.
So we ask you one question when we set you up: do you hold a DHA or DOH healthcare-facility licence? When we can take licensed facilities, they will get a locked setup with no free-text reason for visit, diagnosis, treatment notes or medical intake questions, and a written boundary saying we are not the system of record.
One open question we have not answered
Our servers are in Germany. UAE federal law on ICT in health is understood to restrict processing UAE health data abroad, and the official text was not readable when we checked. Until counsel answers whether a licensed facility’s patient-identifiable booking data may sit in Germany, we cannot take a DHA or DOH licensed facility as a customer.
Not “probably fine”. Cannot. If you are a licensed facility, join early access and we will come back to you when there is an answer.
If you are not a licensed facility, which covers most non-medical aesthetic, skin and wellness businesses, none of the above applies and the rest of this page is for you.
The problem
The file that matters is the one you cannot find
A patient comes back six months after a laser course and asks about the settings you used. Or the pigmentation has changed and you want the photo from session two. Or a complaint arrives and the question is whether she was told about the downtime before she consented, and which version of the form said so.
Your booking software has her appointment times. The consent PDFs are in a shared drive named by whoever scanned them. The photos are on a practitioner’s phone. That is normal, and it is also the exact setup in which a routine complaint becomes an expensive one.
Capability
In buildWhat she signed, for which treatment, on which day
Intake forms and waivers are set up per service, so a patch test question appears for the treatment that needs it and nowhere else. The answers stay with the booking and the treatment date rather than with the patient generally, which matters when your form changes in April and a dispute is about March.
Counter-signature, long-term retention and tying the exact wording to the signature are not built yet. Today it is a record you can show, and not yet proof you can rely on in an argument.
The record
A record you can show
Capability
In buildBefore-and-after photographs have no upload screen yet
Condition photos are written and have no upload screen yet, and there is no retention rule for them.
A timeline that pairs a before with an after across a course of treatments is not built.
Signups from the EU, EEA and UK stay closed until our data-protection work is finished, and clinical photographs are a large part of why.
Capability
In buildThe device, the room and the person, booked together or not at all
A laser session needs a machine, a room and a qualified operator. Each can be listed on the service, with its own gap either side, and Bookesto takes all three together or the booking does not go through.
The same setup handles a treatment where the practitioner is needed for the first fifteen minutes and the room for forty-five.
Deposits and no-shows
WaitingA no-show on a 90-minute laser slot is not the same as a missed brow appointment
Online card deposits are not switched on yet, and your customers pay at the venue until then. When they go live, you will be able to ask for a deposit above a certain price or length, on named services, or from a patient who has already failed to attend once.
One limit to know now: a charge to a saved card after a no-show can be disputed, and it is defended with a record rather than won automatically.
Consumer law in Europe also limits what a business may keep when a client cancels. Signups from the EU, EEA and UK stay closed for now.
Moving over
In buildWhat we carry across, and what you should not let anyone carry
Your patient list and contact details import from a CSV, and your service list is set up with you.
Consent documents and clinical photographs are a different matter and we would push back on moving them in bulk. They were collected for a reason, at a place, with a retention period attached. Bringing them into a new system because it is convenient is how a clinic ends up holding images it has no current basis to hold. Keep the historical archive where it is, under its existing policy, and start clean.
Imported contacts start as service messages only, with a fresh opt-in needed before anything promotional. In the UAE that is a TDRA requirement, and for a clinic it is also the difference between a recall reminder and an unsolicited advertisement.
Questions clinics ask
Four straight answers
Are you NABIDH certified?
Nobody is, in the sense you mean. Certification is per-facility connection of your EMR, and there is no verifiable vendor certification for a booking system. Abu Dhabi’s own documentation says listing a connected EMR does not certify that vendor for anything else.
If a booking vendor tells you they are certified, ask them which document says so.
Can I store treatment notes in Bookesto?
If you hold a DHA or DOH licence, we cannot take you as a customer yet, and when we can, the setup will lock clinical free-text fields off, because your notes belong in your EMR. If you are not a licensed facility, service-level intake and notes are available.
Will you answer a security questionnaire?
Send it to us. We have no SOC 2 report and no ISO certificate, and we are not going to imply otherwise. What we can give you is how it works: each business’s data is kept apart by the database itself, access is split into separate roles, and there is a written list of who else touches the data. The detail is on /security.
Can each practitioner have their own login?
Yes. Invite your team and give each person a role. A rule that limits a practitioner to their own patients is not something we promise today. If you need it, tell us.
You can check what we say
Every capability on this site carries a status that links to the row on our public roadmap saying the same thing. Anything still coming says what it is waiting on. Any figure we publish needs a source and a date.
If you want the plain list, the roadmap is the ledger.
The other five trades
Salons and barbershops
Your team, your chairs and your walk-ins on one calendar. Customers choose their stylist, colour notes stay with the client, and tips are recorded at the desk
Courts and clubs
Peak and off-peak prices, your courts on one calendar, and a booking page of your own
Detailing, pet grooming and rentals
Your bays on one calendar. Work stages, change orders and condition photos have no screen yet, and that page says so
Classes, tours and experiences
Plan dated classes and departures with a seat count. Customers cannot book them online yet, and that page says so. Your tour-listing sites stay where they are
Restaurants
Reservations, walk-ins and a floor map. Covers, turn times and pacing are still coming, and that page says so at the top
If you are a non-licensed aesthetic or wellness business, talk to us
Your own booking page, intake forms and consent records are what we can set up with you, with online deposits to come. If you hold a healthcare-facility licence, join anyway and we will tell you when the hosting question has a real answer.
No card needed. We set up each new venue with you, and pricing is agreed before anything is charged.