Privacy and health information

You are the controller of your visitors' booking data; Fwdia processes it on your behalf (see the data processing agreement). You are also responsible for your offers, prices, cancellations and payments: your customers book with you, not with Fwdia.

A booking holds the name, email, phone (if you ask for it), the number of people, the answers to your questions and the terms accepted. Only ask for what you need. Visitors see a short line under the button: "[Your name] uses your details to handle your booking", with a link to your privacy page if you set one.

Retention

Bookings are deleted automatically a number of months after their date (12 by default; Bookings > Settings > Rules and confirmation > Delete bookings).

Health or allergy information

Allergies or medical notes are health data, a special category under the GDPR that needs explicit consent. Use the question type Health or allergy for them:

• the visitor ticks a separate consent box before sending;
• the answer is stored encrypted and is never put in emails, only shown in the app;
• it is deleted one month after the date of the booking.

Terms

What visitors accepted (each terms checkbox) is kept with the booking, with the date and time, as proof.