Privacy policy

For your own account — your name, your email, how you use the dashboard — Enorabooking decides what is collected and why, and this policy covers it.

For the details a business records about its customers — a name, an email, a phone number, an appointment — the business decides what to collect and why. Enorabooking only stores and processes that information on the business's behalf, under the business's own privacy policy. If you are a customer, the business you booked with is who to ask about your information first.

For your account: your name and email, the password you set (stored only as a secure hash, never in a form we can read), and the business details you enter.

As you use the service: basic technical information needed to run it — the pages you load, and the security and rate-limit records that keep accounts safe. We do not track you across other websites, and we do not sell anyone's information to anyone, ever.

For a booking a customer makes: what the business asked for — typically a name, a way to be reached, and what they booked.

If you turn on notifications: an address for that device issued by Apple or Google, the keys needed to send to it, and a short description of the browser so you can tell your devices apart in your own settings. It is tied to your account, you can remove any device yourself, and removing it stops us sending to it.

If you write to us through the contact page: your name, your email, what the message is about and what you wrote. We keep it so your message is not lost if an email fails, so anyone on our team can pick it up rather than it sitting in one person's inbox, and so we have a record of what was answered.

To run your page and your bookings, to send the emails a booking needs, a confirmation, a reminder, a receipt, to keep the service secure, and to meet our legal obligations.

A business can also choose to invite its own customers back when they are due another appointment. Those emails come from that business, only ever go to someone who has booked and paid with them before, and every one carries a link that stops them in a single click with no sign-in. Stopping them with one business does not affect any other.

We do not track you across other websites, we do not sell anyone's information, and we do not send you marketing for other businesses.

Notifications are delivered by Apple or Google and shown by your phone, which means they can be read on a locked screen. We keep them deliberately thin: what happened, the service, and a customer's first name at most. We never put an amount, a full name, a phone number or an address in one.

Running the service means trusting a few specialist providers, each handling only what its job needs and none of them free to use your information for their own purposes:

Our hosting and database provider, Supabase, which stores the data, and Vercel, which runs the service itself. Our email provider, Resend, which delivers the confirmations and reminders a booking sends. Our payment provider, Stripe, which handles card details directly — we never see or store a card number, and your card details never reach us.

We use only what the service cannot work without. One cookie keeps you signed in, and that is the only one we set ourselves. Your choice of a light or dark screen is remembered by your own browser rather than by a cookie, and never leaves your device.

When you pay a deposit, our payment provider sets its own cookies on that page to spot fraudulent use of a card. They are part of taking the payment safely, they are only set once you reach the payment step, and they are never used to advertise to you.

There are no advertising or tracking cookies anywhere in this service, and nothing that follows you to other websites. That is why you are not asked to accept or reject anything when you arrive: there is nothing optional here to decide about.

We keep information for as long as your account is open, and afterwards only where the law requires — booking and payment records are kept because they are a record of things that happened. You can close your account at any time, which removes what is not legally required to be kept.

You can ask to see the personal information we hold about you, to correct it, or to have it deleted, subject to what the law requires us to keep. Much of it you can already see and change yourself in your dashboard. For the rest, contact us and we will help.

If you are a customer of a business that uses us, ask that business first, since the information is theirs — we will support them in answering you.

Information is kept separate between businesses at the database level, not merely in the interface, so one business cannot reach another's data. Passwords are hashed, connections are encrypted, and access to the systems is limited to what running the service requires.

Enorabooking is for businesses and their adult customers. It is not directed at children, and we do not knowingly collect information from anyone under 18.

We will update this policy as the service changes or the law requires, and update the date below when we do. Where a change is significant, we will tell you.

To ask anything about your information, or to exercise a right above, reach us by email at kyngslyabebe@gmail.com.