Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

• Account information (name, email, phone number, business details)
• Payment information (processed securely through Stripe)
• Customer data you input (client names, contact information, booking history)
• Communications with us (support requests, feedback)

1.2 Automatically Collected Information

When you use our Service, we automatically collect:

• Usage data (features used, pages viewed, time spent)
• Device information (IP address, browser type, operating system)
• Cookies and similar tracking technologies
• Log data (access times, error logs)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Send administrative messages, updates, and security alerts
• Respond to your comments and questions
• Analyze usage patterns to improve user experience
• Detect and prevent fraud and abuse
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Stripe: Payment processing
• AWS: Cloud hosting and storage
• Twilio: SMS notifications
• SendGrid: Email delivery

3.2 Legal Requirements

We may disclose information if required by law or if we believe it's necessary to protect our rights, your safety, or the safety of others.

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We implement industry-standard security measures to protect your information:

• 256-bit SSL encryption for data in transit
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• Secure data centers with physical security
• Access controls and authentication measures
• Regular backups in geographically distributed locations

5. Your Rights and Choices

5.1 Access and Portability

You have the right to access your personal information and receive a copy in a portable format.

5.2 Correction and Updates

You can update your account information at any time through your account settings.

5.3 Deletion

You can request deletion of your account and personal data. Some information may be retained for legal or operational purposes.

5.4 Marketing Communications

You can opt out of marketing emails by clicking "unsubscribe" in any marketing email or updating your preferences.

6. GDPR Compliance

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

7. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Keep you logged in
• Remember your preferences
• Analyze how you use our Service
• Provide personalized content

You can control cookies through your browser settings, but disabling cookies may affect functionality.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide services. After account termination, we may retain certain information for legal, tax, or regulatory purposes.

9. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses approved by the European Commission.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: privacy@rosenheimbookings.com
• Data Protection Officer: dpo@rosenheimbookings.com
• Address: Rosenheim Bookings Ltd, London, United Kingdom