Privacy Notice

1. Who controls your data

JuztBooking provides booking software and booking pages. For a booking, the business shown on the booking page is normally the controller of booking and customer information, while JuztBooking may process it to provide the service. The legal entity details below identify the controller for this notice.

2. Information we collect

• Name, email address, phone number, account details, and language or communication preferences.
• Booking details such as service, staff member, date, time, notes, cancellation history, and confirmation status.
• Payment references and status, amount, currency, and provider transaction identifiers. Full card numbers are handled by the payment provider, not stored by us.
• Device, browser, security, diagnostic, and usage information needed to operate and protect the service.
• Cookies and similar technologies. Necessary cookies support login, security, preferences, and booking flow; optional analytics cookies require a separate choice.

3. Why we use information

• Create and manage appointments, payments, reminders, confirmations, and customer support.
• Authenticate users, prevent fraud, keep the service secure, resolve incidents, and enforce these terms.
• Maintain, measure, and improve reliability and usability. Optional analytics are used only after the relevant cookie choice.
• Meet accounting, tax, legal, and regulatory obligations and respond to lawful requests.

4. Legal bases (GDPR / PDPA)

Where GDPR applies, processing is based on performance of a contract, legitimate interests such as security and service improvement, compliance with a legal obligation, or consent where consent is required (for example optional analytics or marketing). Under Thailand’s PDPA, the applicable basis may include contract, legal obligation, legitimate interest, or consent. The exact basis can depend on the business and the transaction.

5. Sharing and international transfers

We share only what is needed with the business you book with, hosting and storage providers, email and notification providers, payment processors such as Mollie or Stripe, security and support providers, and authorities where legally required. We do not sell personal data. Some providers may process data outside your country; we use the safeguards required by applicable law and record the relevant providers in our processing documentation.

6. How long we keep data

We keep data only for as long as needed for the stated purpose. Booking, payment, accounting, and consent records may be retained for the period required by tax, consumer, limitation, or other legal rules. Account and support data are removed or anonymised when no longer needed. Optional analytics data is kept according to the cookie settings. Each business should configure and publish its exact retention schedule; backups are deleted or overwritten on a controlled cycle.

7. Your rights and choices

Depending on where you live, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent at any time without affecting earlier lawful processing. For a booking, contact the business first when it is the controller; you can also contact the controller listed below. We may verify your identity and retain information that the law requires us to keep. You may complain to your local data protection authority.

8. Cookies

Strictly necessary cookies are used for security, authentication, preferences, and the booking process. Optional analytics or advertising cookies are off until you choose them and can be withdrawn through the cookie settings. Blocking necessary cookies may prevent the service from working.

9. Security and children

We use access controls, encryption where appropriate, monitoring, and organisational safeguards, but no transmission or storage system is completely risk-free. The service is not intended for children under the minimum age required by local law; a parent or guardian should contact us if a child submitted data.

10. Changes and contact

We may update this notice when the service or law changes. We publish the new version and effective date. Questions or rights requests can be sent to the privacy contact below.