Privacy Policy

1. Two kinds of people

Operators — the businesses that license our software. We are the controller of their account data.

An operator's customers — people who book a tour, rental or charter on a site we host. For that booking data the operator is the controller and we are a processor acting on their instructions. If you booked something and want your data removed, contact the operator you booked with; we will action their request.

2. What we collect

From operators: business and contact details, login credentials, billing details, and the catalog, pricing and availability they configure.

From booking customers, on the operator's behalf: name, email, phone, the booking itself, the policy acknowledgements given at checkout, and payment status. Card numbers are entered directly into Stripe — we never see or store full card details.

From website visitors: pages viewed, approximate location from IP, device and browser, and advertising click identifiers where a visitor arrived from an ad. This is used to measure which advertising produces bookings.

3. Why we have it

• to provide the booking system and dashboard, and to take payment;
• to send booking confirmations, reminders and service messages;
• to send marketing where someone opted in, which they can stop at any time;
• to measure advertising performance and improve the product;
• to detect fraud and meet our legal and tax obligations.

4. Who processes it

We use these providers, and only for the purposes shown:

• Stripe — payment processing and payouts
• Vercel — website and application hosting
• Neon — database hosting
• Clerk — operator sign-in and account security
• Resend — transactional and marketing email delivery
• Twilio — SMS notifications
• Google — analytics and advertising measurement
• Meta — advertising measurement

We do not sell personal information, and we do not share it with anyone else except where the law requires it.

5. How long we keep it

Booking and payment records are kept while the operator's account is active and afterwards for as long as tax and accounting rules require. Marketing contacts are removed on unsubscribe. Analytics data is retained in aggregate.

6. Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email selmen@turbobookings.net and we will respond within 30 days. Depending on where you live you may also have the right to object to processing or to complain to a data protection regulator.

Where we act as a processor for an operator, we will pass your request to them and act on their instruction.

7. Cookies

Our sites use cookies to keep you signed in, to remember preferences, and to attribute bookings to the advertising that produced them. You can block cookies in your browser; sign-in and checkout will not work correctly without the essential ones.

8. Security

Data is encrypted in transit, access is limited to those who need it, and payment details are handled by Stripe rather than by us. No system is perfectly secure, and if a breach affects you we will tell you and the relevant regulator as the law requires.

9. Children

The platform is not directed at children under 13 and we do not knowingly collect their data. Where a booking includes a minor, the booking is made by an adult.

10. Changes

We will post updates here and change the date at the top. Material changes will be notified to operators by email.