Privacy Policy

Last updated: January 2025

At TotBook, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.

1. Information We Collect

Personal Information

When you register for TotBook, we collect information such as:

• Name and business name
• Email address
• Phone number
• Business address and service areas
• Payment information (processed securely through Stripe)

Customer Information

When you add customers to your booking system, we store:

• Customer names
• Contact information (email and phone)
• Appointment history
• Service preferences
• Notes you add about the customer

Usage Information

We automatically collect certain information about your device and how you interact with TotBook, including:

• Device type and operating system
• IP address
• App usage patterns
• Features accessed
• Error logs and performance data

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our booking management services
• Process payments and send payment reminders
• Send appointment confirmations and reminders
• Improve our app features and user experience
• Provide customer support
• Comply with legal obligations
• Protect against fraudulent or illegal activity

3. Information Sharing

We do not sell, trade, or rent your personal information. We may share information with:

• Service Providers: Third-party companies that help us operate our business (e.g., Stripe for payments, Supabase for data storage)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Your Consent: With your explicit permission

4. Data Security

We implement appropriate technical and organisational security measures to protect your information, including:

• Encryption of sensitive data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Regular backups
• PCI compliance for payment processing through Stripe

5. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. When you cancel your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal purposes.

6. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Object to processing of your information
• Request data portability
• Withdraw consent

7. GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). We process personal data based on:

• Contract performance (to provide our services)
• Legal obligations
• Legitimate interests (to improve our services)
• Your consent (where applicable)

8. Children's Privacy

TotBook is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.

9. Cookies and Tracking

Our website uses cookies to enhance your experience. You can control cookie preferences through your browser settings. Our mobile app may use similar technologies for analytics and performance monitoring.

10. Third-Party Links

Our app may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the app. Your continued use of TotBook after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: