Privacy Policy

01Introduction

CalNative Booking is a WordPress plugin vendor. We develop and sell a plugin that allows website owners to embed a Google Calendar booking widget on their own websites. This website — calnative-booking.com — is our sales and support site.

Data controller: CalNative Booking is the data controller responsible for personal information collected on this website. Our contact details are listed in the Contact us section below.

By using this website or purchasing a license, you agree to the collection and use of information in accordance with this policy. If you have any questions, please contact us.

02Scope of this policy

This Privacy Policy applies exclusively to personal data collected by CalNative Booking on this website — specifically from people who purchase a license, contact our support team, or browse calnative-booking.com.

What we do not collect

CalNative Booking does not collect, receive, or have access to any booking data submitted by visitors to our customers' websites through the plugin. This includes:

• Names, email addresses, or contact details of booking end-users.
• Appointment dates, times, or notes entered into the booking form.
• Google Calendar events created by the plugin.

When the plugin is installed on a customer's WordPress site, all booking data is stored directly in that customer's WordPress database and written to their own Google Calendar. It never passes through our servers.

Note for plugin customers

If you use CalNative Booking on your own website, you are the data controller for any personal data collected from your site visitors through the plugin. You are responsible for ensuring your own website's privacy policy accurately describes how you collect, use, and store your visitors' booking data and for complying with all applicable data-protection laws in your jurisdiction.

03Information we collect

CalNative Booking collects the following categories of personal data from people who interact with this website:

• Account & license information — when you purchase a license, we store your name, email address, billing details, and the license key associated with your purchase.
• Contact form submissions — name, email address, subject, and message when you contact us through this website.
• Technical data — IP address (used only for rate limiting on this website), browser type, and approximate location derived from your IP.
• Usage data — anonymous interaction events such as pages visited and how the site is navigated. This data is not linked to any individual and does not constitute personal data under applicable data-protection law.

We do not collect any data from end-users of the plugin on our customers' websites. See the Scope of this policy section above for details.

04How we use information

We use the information we collect for the following purposes:

• To process your purchase and manage your license.
• To send transactional emails — purchase confirmations, license keys, renewal reminders, and support replies.
• To provide customer support and respond to enquiries.
• To detect, prevent, and address abuse, fraud, and technical issues on this website.
• To comply with legal obligations and enforce our terms of service.

We do not use your personal data for advertising or sell it to third parties.

Legal basis for processing

We rely on the following legal bases under the UK GDPR and EU GDPR:

• Contract performance — processing your account and license information is necessary to deliver the service you purchased.
• Legal obligation — retaining billing and transaction records to comply with applicable financial and tax regulations.
• Legitimate interests — using technical data such as IP addresses to detect abuse, prevent fraud, and maintain the security of this website. We have assessed that these interests are not overridden by your rights and freedoms.

05Sharing & disclosure

We do not sell, rent, or trade personal information. We share data only with the limited categories of recipients described below.

Payment processor & license platform — Freemius

License purchases, billing, and license management are handled by Freemius, our third-party payment and licensing platform. When you complete a purchase, your name, email address, billing country, and payment details are collected and stored by Freemius — payment card information is handled directly by Freemius and is never stored on our servers. Please review the Freemius Privacy Policy and Freemius Terms of Service for full details of how they process your data.

Plugin telemetry (Freemius opt-in)

When you activate the Plugin on your WordPress site, Freemius may request your permission to collect non-sensitive technical data about your WordPress environment — such as WordPress and PHP versions, plugin activation status, and your site URL. This data is used solely to improve plugin compatibility and support. You will be shown a clear opt-in prompt at the time of activation and may opt out at any time through the plugin's admin settings. If you decline or opt out, no technical data is transmitted to Freemius. See the Freemius Privacy Policy for details.

Hosting and infrastructure

We use third-party hosting providers to operate this website. These providers process data only on our behalf and are contractually bound not to use it for any other purpose.

Legal requirements

We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

06Data storage

Personal data collected on this website — account details, billing records, and license information — is stored on servers located within the European Economic Area (EEA) or in countries that provide an adequate level of data protection. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place.

We do not store any booking or appointment data. Booking data submitted through the plugin on a customer's website is stored exclusively on that customer's own server and in their Google Calendar. We have no access to it.

07Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law:

• License and billing records — retained for a minimum of 7 years to comply with UK financial record-keeping requirements, then securely deleted.
• Account data — retained for as long as your account remains active. Following a verified deletion request, your data will be removed within 30 days, except where retention is required by law.
• Contact form submissions — retained for up to 2 years to allow follow-up on support matters, then deleted.
• Technical data (IP addresses) — retained for a maximum of 30 days for rate limiting and abuse prevention, then deleted automatically.

You may request early deletion of your personal data at any time by contacting us.

08Cookies

We use a small number of strictly necessary cookies on this website:

• Session cookie — used to maintain your logged-in state and shopping session during checkout.
• Preference cookie — remembers your preferred display language if you have set one.

We do not use analytics, advertising, or tracking cookies. You can control cookies through your browser settings, though disabling strictly necessary cookies may affect checkout functionality.

09Your rights

Under applicable data-protection laws (including the UK GDPR and EU GDPR), you may have the following rights regarding the personal data we hold about you:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — request that we delete your personal information.
• Objection — object to certain processing of your information, including processing based on legitimate interests.
• Restriction — ask us to restrict the processing of your information in certain circumstances.
• Portability — receive your information in a structured, machine-readable format.
• Withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Complaint — if you are based in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. If you are based in the EU, you may contact your local supervisory authority.

To exercise any of these rights, please contact us using the details below. We will respond within 30 days. We may need to verify your identity before processing your request.

Please note: these rights apply to data we hold about you as a license purchaser on this website. For rights relating to booking data on a customer's website, you must contact that website's operator directly — CalNative Booking does not hold that data.

10Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify active license holders by email.

Continued use of this website or the Plugin after changes are posted constitutes your acceptance of the updated policy.

11Contact us

If you have any questions about this Privacy Policy, our data practices, or would like to exercise your privacy rights, please get in touch using the details below.