As of August 2026, Calendly's own security page lists SOC 2, GDPR, CCPA, ISO 27001 and PCI among its certifications — PIPEDA, Quebec's Law 25, and a Data Processing Agreement aren't mentioned anywhere on it. For a Canadian nutrition practice booking anything that touches a client's health context, that's a real gap, and it's a common reason practices end up running a booking tool and a client-record system as two disconnected pieces of software. NutraPlanner's scheduling links are built into the same platform that already holds the client record and is built around PIPEDA and Law 25, with reminders and self-serve rescheduling included.
Does Calendly's security posture cover Canadian privacy law?
Not as far as its own published pages say. Calendly's security page names SOC 2 Type 2, SOC 3, GDPR, CCPA, CSA STAR Level One, ISO/IEC 27001 and PCI compliance among its certifications, as of August 2026. PIPEDA, Quebec's Law 25, and a Data Processing Agreement don't appear anywhere on that page. GDPR and CCPA cover the EU and California; neither is the framework a Canadian nutrition practice and its clients actually operate under.
NutraPlanner is built around PIPEDA and Law 25 specifically, with a published Data Processing Agreement that sets out exactly how client data is handled — including a booking made through a scheduling link, since it lives in the same platform as the client record rather than a separate tool.
| Calendly | NutraPlanner | |
|---|---|---|
| Certifications listed | SOC 2, SOC 3, GDPR, CCPA, CSA STAR, ISO 27001, PCI | n/a — no third-party certification claimed |
| PIPEDA / Quebec's Law 25 mentioned | No | Yes — built around both |
| Data Processing Agreement | Not mentioned on any published page | Published, covers all client data including bookings |
| Cheapest paid seat | $10/mo (Standard) | Included in every paid plan, no per-seat charge |
What happens to a booking once someone schedules with a dietitian?
On a standalone scheduling tool, a new booking is a calendar event and, at best, a name and email address inside that tool — disconnected from whatever system holds the practice's actual client records. Following up, checking whether the person has booked before, or turning a first-time booker into a client on the practice's roster is a manual, separate step.
On a NutraPlanner scheduling link, a booking from someone not yet on the practitioner's client list is captured as a lead tied to that person specifically. Promoting that lead to a full client record is a single action from the practitioner's side — the booking and the client record were never two different systems to begin with.
Does a booking get reminders, and can a client reschedule it themselves?
Yes to both. A booker receives an ICS-attached confirmation email, reminder emails ahead of the appointment, and a manage link they can use on their own — to cancel the booking, or to move it to a different available slot without contacting the practitioner. It's the same manage link for both actions, so there's one thing to keep and one thing to click, not a separate reschedule request by email.
Does a NutraPlanner scheduling link cost extra on top of the subscription?
No — it's included in NutraPlanner's paid practitioner plans, not billed as a separate line item. That matters against Calendly's own current published pricing: $10 per seat per month on the Standard plan and $16 per seat per month on Teams (both billed yearly), which is a running cost on top of whatever practice-management software a practitioner is already paying for.
For a solo caseload specifically, that’s on top of what a solo dietitian gets on NutraPlanner’s cheapest working tier in the first place.
Can a booking page be shared or embedded the way Calendly's can?
Yes. A scheduling link can be shared directly, or embedded on the practitioner's own website so a visitor books without leaving it. A link can also be restricted to existing clients only, separate from a public link meant for new inquiries.
Frequently asked questions
Does Calendly comply with PIPEDA or Quebec's Law 25?
As of August 2026, Calendly's own published security page doesn't mention PIPEDA, Canada, Quebec, Law 25, or a Data Processing Agreement anywhere — it lists SOC 2, GDPR, CCPA, ISO 27001 and PCI. GDPR and CCPA cover the EU and California, not the framework a Canadian nutrition practice operates under.
Does NutraPlanner charge extra for scheduling links?
No. Scheduling links are included in NutraPlanner's paid practitioner plans rather than sold as a separate add-on or per-seat subscription.
Does a client get a reminder before their appointment?
Yes. Reminder emails go out ahead of the appointment, alongside the ICS-attached confirmation email sent at booking time.
Can a client reschedule their own appointment through the booking link?
Yes. The same manage link a booker uses to cancel their appointment also lets them move it to a different available slot themselves, without contacting the practitioner.
What happens when someone books an appointment who isn't already a client?
They're captured as a lead tied to that specific person. The practitioner can promote that lead to a full client record in a single action from their dashboard.
Can I embed the booking page on my own website?
Yes — a scheduling link can be embedded on the practitioner's own site or shared as a standalone link, and can be restricted to existing clients only when that's the intent.
References
Similar articles
Practice Management Software for Solo Dietitians — NutraPlanner
What the free and entry-level tiers of NutraPlanner, Practice Better and Healthie actually include for a single-practitioner caseload, checked against each vendor's current pricing.
Read article →Clinical referenceProtein Requirements by Population (g/kg)
Evidence-based g/kg protein targets by population: RDA vs IAAO, muscle gain, older adults, pregnancy and GLP-1 weight loss, with sources.
Read article →