Back to legal documents

Provider legal document

Provider Privacy Notice

Beta privacy notice for provider owners, managers, staff, and business users of the FoundBookings web dashboard.

Version 2026.06.08-betaEffective date 2026-06-08

1. Controller identity and contact

FoundBookings is the controller for personal data it collects about provider owners, managers, staff, admins, and other web dashboard users for account, platform, security, billing, legal, analytics, support, and operational purposes.

For privacy questions or rights requests, provider users can contact privacy@foundbookings.com or use the available support channels. Final controller entity details, registered address, and jurisdiction-specific contact wording may be updated before production finalization.

2. Provider personal data collected

  • Account, login, profile, role, phone, email, password credential, and authentication data.
  • Company, location, staff, service, product, stock, policy, branding, review, message, coupon, gift-card, loyalty, and setup data submitted or managed by provider users.
  • Marketing form configuration and customer campaign form submissions or answers that provider users create, view, or manage as provider-controlled customer data.
  • Staff or provider-user details supplied by company owners, managers, or authorised users, including staff profiles, role details, location assignments, contact details, and schedule information.
  • Stripe Connect onboarding status, payout readiness, account identifiers, capability status, transfer/payment/refund identifiers, and related payment-status records.
  • Subscription plan, trial, access status, upgrade/contact, and billing-adjacent records.
  • Support, complaint, provider-visible updates, internal administrative review information, security logs, device/browser data, IP address, diagnostics, and audit records.
  • Cookie consent preference and optional analytics information where analytics consent is given or otherwise lawfully enabled.

3. Purposes and legal bases

FoundBookings uses provider personal data to create and secure accounts, operate the dashboard, manage company and location access, support customer mobile bookings, process provider support requests, administer complaints, maintain security, prevent misuse, debug and improve the product, manage subscription access, support Stripe Connect onboarding, and comply with legal obligations.

Legal bases may include contract performance, legitimate interests in operating and securing the platform, legal obligations, consent for optional analytics where required, and establishment, exercise, or defence of legal claims.

4. Sharing, retention, transfers, and security

Provider data may be shared with Stripe, hosting providers, database and cache providers, email and notification providers, analytics providers where consented, storage providers, support/security tools, professional advisers, regulators, courts, or law enforcement where required or permitted.

Some provider-created company, location, service, staff, review, policy, product, and availability information may be visible to customers where needed for booking, checkout, messages, reviews, support, or customer transparency.

FoundBookings keeps provider personal data only as long as needed for account operation, provider records, customer booking support, payment records, legal compliance, disputes, security, fraud prevention, support, complaints, analytics where applicable, and legitimate platform needs.

International transfers use appropriate safeguards where required. FoundBookings uses technical and organisational security measures appropriate to the platform, but no service can guarantee absolute security.

5. Rights and contact

Depending on location and applicable law, provider users may have rights to access, correct, delete, restrict, object to processing, withdraw consent, or receive a copy of personal data. Some records may need to be retained for legal, accounting, payment, fraud-prevention, dispute, or security reasons.

Provider users may also have the right to lodge a complaint with a relevant data protection supervisory authority.

FoundBookings does not currently use solely automated decision-making with legal or similarly significant effects for provider users unless a later notice explains otherwise.

Provider users can contact privacy@foundbookings.com or the available support channels for privacy questions and rights requests.