Legal information
Privacy policy
This policy explains how personal data is processed when PartyBookIt is used to manage bookings for indoor playgrounds.
This English version is provided for information only. If it differs from the Spanish version, the Spanish version prevails.
Data controller
The data controller is [RAZÓN SOCIAL / NIF / DOMICILIO / EMAIL DPD]. These identification and contact details must be completed before this service is published.
Purpose and legal basis
We process data to create, confirm, manage, change or cancel bookings, send necessary communications about them and handle related enquiries. The legal basis is the performance of a contract or steps taken at the user's request before entering into a contract, under Article 6(1)(b) GDPR.
Data processed and children
We may process contact and booking details for the responsible adult, including name, email, phone number, date, time, park, booked services and notes needed for the booking. The booking may expressly include the child's name and age. A responsible adult must provide children's data, confirms they are authorised to do so and is responsible for ensuring the data is accurate and necessary.
Recipients and processors
Data is shared with the park providing the booked service so it can manage the booking. It may also be processed by providers acting on the controller's behalf: Supabase (infrastructure and database), Vercel (hosting), Resend (transactional email), Stripe (payments and billing where applicable), Sentry (security and error diagnostics) and Cloudflare (security and application delivery). These providers only process data under the applicable instructions and safeguards.
Retention
Personal booking data is retained for three years after the booking is completed, in line with the limitation period for contractual claims. It is then deleted or anonymised unless a legal obligation requires longer retention.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by sending a request to [RAZÓN SOCIAL / NIF / DOMICILIO / EMAIL DPD]. If you believe the processing does not comply with the law, you may complain to the Spanish Data Protection Agency.