Easy Booking Privacy Policy

Introduction

EasyBooking is committed to protecting the privacy of users who use our application. This Privacy Policy describes what data we collect, how we use it, how we protect it, and the rights users can exercise with respect to their personal data. By using EasyBooking, you agree to the terms of this Policy.

Data Controller

EasyBooking is not run by a company, but is a project developed by three friends. If you have any questions about privacy, you can contact us by email at:

ebooking.dev@gmail.com.

Personal Data Collected

We collect and process the following personal data:

For all registered users:
First and last name
Email
Password (stored in encrypted form)
Profile photo (optional)
Application language preference
Feedback or reports sent through the application
For business owners:
Company Name
Company category (e.g., playroom, restaurant, hair salon)
Company description
Phone number
Full address: street, city, state, zip code
Timezone
Business photos
Services offered (e.g., parking, air conditioning)
Bookable resources (e.g., tables or chairs)
Opening/closing hours
Reservation details (minimum/maximum time, time slots, other)
Location sharing (optional):
While using the app, users can choose to share their location to enhance the experience.

Note: We do not collect sensitive data or gather information automatically, except for location if the user chooses to share it.

Purpose and Legal Basis of Processing.

All data collected is used solely for the provision of the service, specifically to:

Enable the creation and management of user accounts;
Manage bookings and provide email notifications related to them;
Manage feedback and reports received from users.

The legal basis for processing is the performance of a contract under Article 6(1)(b) of the GDPR.

Sharing of Data

We do not share personal data collected with third parties.

Data Retention

Users’ personal data is retained for the duration of the active account or until the user requests deletion.
Request for deletion: When a user requests deletion of their account or company information:
The data is logically deleted, but the information will still be kept in the database for a limited period of time.
It is retained for a maximum period of 3 months exclusively to allow the user to cancel the deletion request and restore the account.
If the user does not cancel the request within this period, the data is permanently removed from the system and will no longer be recoverable or viewable.
Deletion Request: When a user requests deletion of their account or company information:
The data are logically deleted, but the information will still be maintained in the database for a limited period of time;
They are maintained for up to 3 months exclusively to allow the user to cancel the deletion request and restore the account;
If the user does not cancel the request within that period, the data is permanently removed from the system and will no longer be retrievable or viewable.

Rights of Data Subjects

Users may exercise the following rights:

Access: Obtain a copy of processed personal data;
Rectification: Correct incorrect or incomplete personal data;
Deletion: Request deletion of their account or company information;
Portability: Receive personal data in a readable format or request its transfer to another data controller;
Limitation: To temporarily restrict the processing of data under certain circumstances.

You can exercise your rights by contacting us by email: ebooking.dev@gmail.com.

Data Security

We take technical and organizational measures to protect personal data:

Account passwords are stored in encrypted form using the secure bcrypt algorithm, designed to provide high protection against unauthorized access, with the added layer of security given by the adoption of a private encryption key;
The PostgreSQL database is hosted in a Docker container and protected by credentials stored in environment variables;
Only authorized personnel have access to the data through credentials that are protected;
Locally stored unencrypted data is not sensitive and are processed in controlled environments.

International Data Transfer

We do not use service providers outside the European Union, so data are not subject to international transfers.

Use of Local Storage Technologies (Unity’s PlayerPrefs)

EasyBooking does not use cookies, but stores some information directly on the user’s device via local storage technologies provided by Unity (PlayerPrefs). This information is used to improve the user experience of the application and facilitate the management of the features offered.

Locally stored data:

For all users:
User’s email
Encrypted user password (to improve the login experience)
Device language
Geolocation of the user (if authorized)
Recent searches on the Homepage
When creating a company:
Name, description, and phone number of the company
Full address (street, city, zip code, state)
Time zone of the company
Opening and closing hours
Services offered by the company
Floor plan of the company (arrangement of resources and amount of places)
Uploaded images of the company

If the user stops the creation procedure these data are stored until the user does one of the following:

Completes the creation of the company;
Logs out of the app;
Returns to the creation process and chooses to “discard the data entered”.

Security and User Choice:

Users can choose whether or not to allow access to device location. Other locally stored information is necessary to ensure proper functioning of the app’s functionality.

Changes to the Privacy Policy

Any changes to this Privacy Policy will be communicated to users via email. We encourage you to check the Privacy Policy periodically for updates.

Contact

If you have any questions or requests regarding this Privacy Policy, you may contact us by email at: ebooking.dev@gmail.com.