If you are bot integrating commerce ( visa / mastercard) kind of interactions go with an esrablished company
If its basic booking appointment it is a fairly simple build. How you store user information will be the only critical decision that will determine the securitu of the website. Thats the only complicated piece