Your Privacy Matters
We take the security of your studio information seriously. Our platform is built on Google Cloud infrastructure, and we work to keep your data safe and private so you can focus on teaching.
What Information We Collect
Account Information
- • Studio/business contact details
- • Account credentials
- • Billing and subscription information
- • Basic usage information to improve features
Operational Data
- • Bookings and class schedules
- • Student information (only what you choose to add)
- • Platform usage data to improve the service
- • Support requests and feedback
How We Use Your Information
Platform Development
Improving our booking platform based on your feedback and usage patterns.
Customer Support
Providing technical support and responding to your feedback and issues.
Feature Development
Understanding how studios use the platform to build the right features.
Service Updates
Communicating about new features, updates, and service improvements.
Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:
Contract Performance (Article 6(1)(b))
- • Providing access to the platform
- • Managing your account
- • Processing your booking data
- • Communicating about service updates
Legitimate Interests (Article 6(1)(f))
- • Improving and developing our platform
- • Analyzing usage patterns to enhance features
- • Preventing fraud and ensuring security
- • Responding to your inquiries
Consent (Article 6(1)(a))
- • Sending marketing communications (where applicable)
- • Using non-essential cookies (see Cookie Policy)
You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
How We Protect Your Data
Google Cloud Platform
Built on Google Cloud infrastructure with industry-standard security practices
Professional Data Security
Your studio and client data is kept secure and private
Security: Built on Google Cloud with strong security practices to help keep your business information safe and private.
International Data Transfers
Where Your Data is Stored
Your data is stored on Google Cloud servers. Google Cloud infrastructure spans multiple regions globally, including the United States, European Union, and Asia Pacific.
Transfer Mechanisms
For users in the European Economic Area (EEA), United Kingdom, or Switzerland, personal data may be transferred to countries outside these regions. When we transfer your data internationally, we rely on:
- Google Cloud's Standard Contractual Clauses (SCCs) for data transfers
- Google Cloud's compliance with applicable data protection frameworks
- Adequacy decisions where applicable
Regardless of where your data is processed, we maintain the same level of protection and your rights remain the same as described in this policy.
Data Sharing
We Don't Sell Your Data
Your data stays private and is never sold or shared for marketing. We only use it to deliver and improve our service.
Google Cloud Infrastructure
Your studio runs on Google Cloud's secure infrastructure.
Support Team
Our team may access limited data to resolve issues and improve features.
Sub-processors
We use carefully vetted third-party service providers to deliver our services. View our complete sub-processor list
Data Retention
- Account Data: Kept while your subscription is active, then deleted within a reasonable period after account closure
- Analytics: Anonymized usage data retained to improve the platform
- Financial Records: Retained for 7 years as required by tax and legal obligations
Your Data Rights
You have control over your personal information. Here are the rights you can exercise at any time:
Access Your Data
Request a copy of all personal data we hold about you
Correct Your Data
Update or correct any inaccurate information
Delete Your Data
Request deletion of your personal information
Export Your Data
Receive your data in a portable format
Object to Processing
Object to processing based on our legitimate interests, including direct marketing
Restrict Processing
Request that we limit how we use your data in certain circumstances
To exercise any of these rights, contact us at the email below. We will make reasonable efforts to respond promptly.
Automated Decision-Making
No Automated Decisions
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you, as described in GDPR Article 22.
If this changes in the future, we will update this policy and ensure appropriate safeguards are in place, including the right to obtain human intervention, express your point of view, and contest the decision.
Children's Privacy
Age Restrictions
Our service is designed for business use by adults. We do not knowingly collect personal information from children under 16 years of age (or 13 years of age in the United States).
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@pepperonibooking.com. We will promptly delete such information from our systems.
Note for Studio Owners: If you manage bookings for minors at your studio, please ensure you have obtained appropriate consent from parents or guardians before entering their information into the platform. You are responsible for complying with applicable laws regarding collection of minors' information.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
Right to Know
Request information about categories and specific pieces of personal information we've collected, sources, business purposes, and third parties we share it with.
Right to Delete
Request deletion of your personal information, subject to certain legal exceptions.
Right to Opt-Out
Opt-out of the "sale" or "sharing" of your personal information.Note: We do not sell your personal information.
Right to Non-Discrimination
We will not discriminate against you for exercising your privacy rights.
How to Exercise Your Rights: Contact us at privacy@pepperonibooking.com. We will make reasonable efforts to respond promptly.
Do Not Track Signals: Our website does not currently respond to "Do Not Track" browser signals.
Data Controller Information
For GDPR Purposes
Pepperoni Booking acts as the "data controller" for the personal information we collect directly from you (account information, feedback, usage data).
Your studio acts as the "data controller" for client information you input into the platform. Pepperoni Booking acts as a "data processor" for this data, processing it on your behalf according to your instructions.
Data Processing Agreement
A Data Processing Agreement (DPA) addressing GDPR Article 28 requirements is available upon request for business customers. Contact us at privacy@pepperonibooking.com to request a copy.
Data Controller
Company registration details will be published here once incorporation is complete.
Right to Lodge Complaint
If you are in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local supervisory authority (Data Protection Authority).
Data Breach Notification
Our Commitment
In the event of a personal data breach that may affect your data, we are committed to acting responsibly. Our approach includes:
- Notifying the relevant supervisory authority as required by applicable law
- Making reasonable efforts to notify affected customers promptly with relevant details
- Taking steps to contain and address the breach
- Documenting incidents and our response
As an early-stage company, we are continuously improving our security and incident response processes. We take data protection seriously and will handle any incident with appropriate care.
Provision of Personal Data
Is Providing Your Data Required?
Providing certain personal data (such as your name, email, and studio details) is a contractual requirement necessary to create your account and use the Pepperoni Booking platform. Without this information, we cannot provide the service to you.
Providing data for analytics cookies and marketing communications is not a contractual requirement and is based on your consent. You can use the platform without providing consent for these purposes.
Policy Updates
We may update this privacy policy from time to time. We will notify you of material changes via email or through the platform. Continued use of the service after changes constitutes acceptance of the updated policy.