Privacy Policy – xmas.cy

1. Information We Collect

When you use xmas.cy, we may collect:

• Your name and email address
• Booking details (date, time, selected photographer or location)
• Calendar-related data when you connect Google Calendar
• Technical data such as IP address and browser type

2. Use of Google Calendar Data

If you choose to connect your Google Calendar:

• We access calendar data only to create, update, or display booking events
• We do not read unrelated calendar events
• We do not store Google Calendar data permanently
• We do not share Google Calendar data with third parties

xmas.cy's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Your Data

We use your data solely to:

• Process bookings and reservations
• Synchronize events with your calendar
• Send booking confirmations and system notifications
• Improve system reliability and user experience

4. Data Sharing

We do not sell or rent your personal data. Data may only be shared when strictly required for system functionality (e.g. Google Calendar integration, payment processing via Stripe, email delivery via SendGrid, or SMS notifications).

5. Data Security

We apply appropriate technical and organizational measures to protect your data from unauthorized access, alteration, or loss. These include encrypted data transmission (HTTPS/TLS), secure session management, and PCI-compliant payment processing through Stripe.

6. Data Retention

We retain personal data only for as long as necessary to provide our services or comply with legal obligations.

7. Your Rights

You may request access, correction, or deletion of your personal data by contacting us.

8. Contact

For privacy-related questions, contact: