Privacy Policy

01Introduction

CalNative Booking is a WordPress plugin vendor. We develop and sell a plugin that allows website owners to embed a Google Calendar booking widget on their own websites. This website — calnative-booking.com — is our sales and support site.

Data controller: CalNative Booking is the data controller responsible for personal information collected on this website. Our contact details are listed in the Contact us section below.

By using this website or purchasing a license, you agree to the collection and use of information in accordance with this policy. If you have any questions, please contact us.

02Scope of this policy

This Privacy Policy applies exclusively to personal data collected by CalNative Booking on this website — specifically from people who purchase a license, contact our support team, or browse calnative-booking.com.

What we do not collect

CalNative Booking does not collect, receive, or have access to any booking data submitted by visitors to our customers' websites through the plugin. This includes:

• Names, email addresses, or contact details of booking end-users.
• Appointment dates, times, or notes entered into the booking form.
• Google Calendar events created by the plugin.

When the plugin is installed on a customer's WordPress site, all booking data is stored directly in that customer's WordPress database and written to their own Google Calendar. It never passes through our servers.

Note for plugin customers

If you use CalNative Booking on your own website, you are the data controller for any personal data collected from your site visitors through the plugin. You are responsible for ensuring your own website's privacy policy accurately describes how you collect, use, and store your visitors' booking data and for complying with all applicable data-protection laws in your jurisdiction.

03Information we collect

CalNative Booking collects the following categories of personal data from people who interact with this website:

• Account & license information — when you purchase a license, we store your name, email address, billing details, and the license key associated with your purchase.
• Contact form submissions — name, email address, subject, and message when you contact us through this website.
• Technical data — IP address (used only for rate limiting on this website), browser type, and approximate location derived from your IP.
• Usage data — how the site is used: pages visited, navigation paths, and interaction events, collected through Google Analytics and Microsoft Clarity, which also records anonymised session replays. This data is pseudonymous rather than anonymous — it is tied to a randomly generated identifier rather than to your name — and is only collected where you have consented to analytics cookies.

We do not collect any data from end-users of the plugin on our customers' websites. See the Scope of this policy section above for details.

04How we use information

We use the information we collect for the following purposes:

• To process your purchase and manage your license.
• To send transactional emails — purchase confirmations, license keys, renewal reminders, and support replies.
• To provide customer support and respond to inquiries.
• To detect, prevent, and address abuse, fraud, and technical issues on this website.
• To comply with legal obligations and enforce our terms of service.

We do not use your personal data for advertising or sell it to third parties.

Legal basis for processing

We rely on the following legal bases under the UK GDPR and EU GDPR:

• Contract performance — processing your account and license information is necessary to deliver the service you purchased.
• Legal obligation — retaining billing and transaction records to comply with applicable financial and tax regulations.
• Legitimate interests — using technical data such as IP addresses to detect abuse, prevent fraud, and maintain the security of this website. We have assessed that these interests are not overridden by your rights and freedoms.

05Sharing & disclosure

We do not sell, rent, or trade personal information. We share data only with the limited categories of recipients described below.

Payment processor & license platform — Freemius

License purchases, billing, and license management are handled by Freemius, our third-party payment and licensing platform. When you complete a purchase, your name, email address, billing country, and payment details are collected and stored by Freemius — payment card information is handled directly by Freemius and is never stored on our servers. Please review the Freemius Privacy Policy and Freemius Terms of Service for full details of how they process your data.

Plugin telemetry (Freemius opt-in)

When you activate the Plugin on your WordPress site, Freemius may request your permission to collect non-sensitive technical data about your WordPress environment — such as WordPress and PHP versions, plugin activation status, and your site URL. This data is used solely to improve plugin compatibility and support. You will be shown a clear opt-in prompt at the time of activation and may opt out at any time through the plugin's admin settings. If you decline or opt out, no diagnostic data is transmitted beyond what is strictly required to activate and validate your license — the Plugin must periodically verify your license key and site URL with Freemius for the license to function. See the Freemius Privacy Policy for details.

Analytics providers

Where you have consented to analytics cookies, usage data is processed on our behalf by Google Analytics and Microsoft Clarity. Both may process data outside the UK and EEA, under the safeguards set out in their own privacy notices. If you do not consent, neither service is loaded and no data reaches them.

Consent management — CookieYes

Your cookie preferences are recorded and managed by CookieYes, which stores a record of the choices you make so we can demonstrate that consent was properly obtained.

Hosting and infrastructure

We use third-party hosting providers to operate this website. These providers process data only on our behalf and are contractually bound not to use it for any other purpose.

Legal requirements

We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

06Data storage

Personal data collected on this website — account details, billing records, and license information — is stored on servers located within the European Economic Area (EEA) or in countries that provide an adequate level of data protection. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place.

We do not store any booking or appointment data. Booking data submitted through the plugin on a customer's website is stored exclusively on that customer's own server and in their Google Calendar. We have no access to it.

07Data retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law:

• License and billing records — retained for a minimum of 7 years to comply with UK financial record-keeping requirements, then securely deleted.
• Account data — retained for as long as your account remains active. Following a verified deletion request, your data will be removed within 30 days, except where retention is required by law.
• Contact form submissions — retained for up to 2 years to allow follow-up on support matters, then deleted.
• Technical data (IP addresses) — retained for a maximum of 30 days for rate limiting and abuse prevention, then deleted automatically.

You may request early deletion of your personal data at any time by contacting us.

08Cookies

We use cookies on this website for several distinct purposes. Our Cookie Policy lists every cookie individually — what it does, who sets it, and how long it lasts — and is kept up to date automatically by regular scans of the site.

• Strictly necessary — keep you signed in, hold your session together during checkout, and remember your cookie choices. These cannot be switched off, as the site will not function without them.
• Functional — remember choices you make, such as a preferred display language.
• Analytics — help us understand how the site is used, which pages are useful, and where visitors run into difficulty. We use Google Analytics and Microsoft Clarity for this.
• Advertising and performance — set by Microsoft Advertising to measure how our campaigns perform.

Only strictly necessary cookies are set automatically. Everything else loads only if you agree to it through the cookie banner shown on your first visit, and refusing has no effect on your access to the site or to anything you have purchased.

You can review or change your choices at any time using the Cookie Settings link, or through your browser settings. Disabling strictly necessary cookies may affect checkout functionality.

09Your rights

Under applicable data-protection laws (including the UK GDPR and EU GDPR), you may have the following rights regarding the personal data we hold about you:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — request that we delete your personal information.
• Objection — object to certain processing of your information, including processing based on legitimate interests.
• Restriction — ask us to restrict the processing of your information in certain circumstances.
• Portability — receive your information in a structured, machine-readable format.
• Withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Complaint — if you are based in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. If you are based in the EU, you may contact your local supervisory authority.

To exercise any of these rights, please contact us using the details below. We will respond within 30 days. We may need to verify your identity before processing your request.

Please note: these rights apply to data we hold about you as a license purchaser on this website. For rights relating to booking data on a customer's website, you must contact that website's operator directly — CalNative Booking does not hold that data.

10Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify active license holders by email.

Continued use of this website or the Plugin after changes are posted constitutes your acceptance of the updated policy.

11Contact us

If you have any questions about this Privacy Policy, our data practices, or would like to exercise your privacy rights, please get in touch using the details below.