As a solo freelancer in the EU, GDPR applies to you just as it does to a 10,000-person company — but with a critical difference: some of the more burdensome requirements (DPO appointment, formal DPIAs, audit programs) only kick in at scale. Here's what a solo operator actually needs.
You are a data controller for your clients' booking data
When a client books a call with you, you are the controller. Your scheduling tool is the processor. That means you are on the hook for legal basis, retention, and DSR response — not the tool. This is non-negotiable.
The baseline solo-operator GDPR stack
1. Privacy policy on your website. Must list what data you collect via bookings, how long you keep it, and how a client can request deletion.
2. A DPA with your scheduling tool. Request from support; most SaaS providers issue standard DPAs without resistance.
3. A clear retention policy. 30 or 60 days for most bookings is appropriate. Longer only if you need them for tax/billing records.
4. A documented DSR process. For solo operators, this can be as simple as: email bob@yourdomain.com and we delete within 7 days.
When you don't need a DPO (most solo operators)
You need a Data Protection Officer only if (a) you're a public body, (b) your core activities require large-scale, regular, systematic monitoring, or (c) you process special-category data at scale. A solo freelancer running 20-40 bookings a month almost certainly doesn't need a DPO.
Enforcement risk for solo operators
Real talk: solo operators are rarely GDPR-enforcement targets. Enforcement focuses on large tech companies and data brokers. But a client complaint to a Data Protection Authority can still land on your desk — and the stress of handling it as a one-person shop is significant. Building the baseline right once saves pain later.
This is part of our privacy-first scheduling pillar guide — 18 articles covering every privacy angle.
Frequently Asked Questions
Do I need a DPA with Cal Clear as a solo freelancer?
If you're processing EU residents' booking data, yes — it's legally required and Cal Clear provides one on request. For non-EU solo operators it's optional but recommended.
How long should I keep booking records?
For most freelancers, 30-60 days covers active scheduling needs. Longer retention is justifiable if you need the records for billing, taxes, or audit. Document your retention period in your privacy policy.
Try privacy-first scheduling, free
Cal Clear runs zero trackers on booking pages and auto-deletes booking data on your schedule. Start at calclear.app.