Privacy Policy

Who this applies to and who is responsible for what

Grammateas is booking software used by independent businesses ("shops") to take appointments from their own customers. For the personal data you submit when booking an appointment (your name, email, and phone number), the shop you are booking with is the data controller - they decide why that data is collected and how they use it to run their business. Grammateas acts as the data processor: we provide the platform the shop uses to store and manage that data on their behalf, following their instructions.

For account data used to run the platform itself (business owner and staff logins), the controller is Nelisol Trading Ltd, which trades as Grammateas.

What we collect

Depending on how you use the site, this can include:

• Name, email, and phone number, when you book an appointment as a guest or create a customer account.
• Appointment details: which service, staff member, shop, date/time, and status (confirmed, cancelled, etc.).
• Account details for business owners and staff: name, email, and a securely hashed password (never the plain password).
• If a staff member connects Google Calendar, we store an encrypted OAuth token that lets the app read their calendar's busy times and create/delete events for their own bookings. We never see the content of unrelated calendar events.
• Payment status and amounts for paid appointments (once real payment processing is enabled, this is handled by Stripe directly - we do not store card details ourselves).

Why we collect it

To let you book, and the shop fulfil, an appointment; to let the shop contact you about that appointment; and to let the shop and Grammateas operate the booking system (availability, reminders, billing).

Who your data is shared with

• The specific shop you booked with (and the staff member assigned to your appointment).
• Google, if the staff member you booked with has connected their calendar (for that staff member's own calendar sync only).
• Our email delivery provider, to send booking confirmations and reminders.
• Stripe, to handle card payments and refunds.

We do not sell personal data, and we do not share it with any other shop on the platform.

How long we keep it

See our data retention policy for specifics. In short: booking records are kept for as long as the shop's account is active (they're the shop's own business records), and you can request removal of your personal details from past bookings at any time (below) - the booking record itself may be kept in anonymized form for the shop's accounting purposes.

Your rights

You can, at any time:

• Ask what personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your personal data - use the delete my data page, or contact the shop directly.

Contact

For a specific booking, contact the shop directly through the details on their booking page. For platform-level questions, email support@grammateas.com.cy.