Privacy policy

1. Who is responsible

KurdBits is the controller for the personal data of Bitbooking account holders (the businesses that use Bitbooking) and of visitors to bitbooking.nl.

When clients book an appointment with a business through its Bitbooking booking page, that business is the controller of the client's data and KurdBits acts as its processor. Clients who want to exercise their rights should contact that business first; we help the business respond.

Contact for privacy matters: info@kurdbits.com.

2. Which data we process

Depending on how you use Bitbooking, we process:

• Account data: name, email address, password (stored only as a secure hash), business name, address and phone number.
• Billing data for paid plans: plan, invoices and payment status. Card details are handled by our payment provider; we never store card numbers.
• Booking data on behalf of businesses: client name, email address, phone number, appointment details, notes and answers to forms the business adds.
• Technical data: IP address, browser type and request times in server logs, used for security and to prevent abuse.

3. Purposes and legal basis

We process personal data only for these purposes:

• Providing the service: accounts, booking pages, appointments, confirmation and reminder messages (performance of a contract).
• Billing and bookkeeping (legal obligation).
• Securing the platform and preventing fraud and abuse (legitimate interest).
• Answering questions and support requests (performance of a contract or legitimate interest).

4. Retention

We keep personal data no longer than necessary for these purposes. Account and booking data are kept while the account exists and are deleted after the account is closed, unless the law requires otherwise. Invoices are kept for seven years, as required by Dutch tax law. Server logs are kept for a limited period for security reasons.

5. Who we share data with

We never sell personal data. We share it only with service providers that help us run Bitbooking, under a data processing agreement, or when the law requires it:

• Hosting: servers in the European Union.
• Email delivery: an email provider sends confirmation, reminder and account emails.
• SMS delivery: an SMS provider, only for businesses that switch on SMS reminders.
• Payments: a payment provider processes payments for paid plans.

6. Cookies

This website (bitbooking.nl) uses no analytics, tracking or advertising cookies and loads no third-party trackers. That is why there is no cookie banner. The Bitbooking dashboard uses only cookies that are strictly necessary to keep you logged in and remember your language.

7. Security

We protect personal data with appropriate technical and organisational measures, including encrypted connections (HTTPS), hashed passwords, strict access control, limited database permissions per application, and regular updates.

8. Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to processing, and to data portability. To exercise a right, email info@kurdbits.com from the address linked to your data and say which right you want to use. We respond within one month and may ask you to confirm your identity.

Booked at a business that uses Bitbooking? Contact that business: it decides about your booking data. If you can't reach them, write to us and we will forward your request.

9. Complaints

If you are not satisfied with how we handle your data, please contact us first at info@kurdbits.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your country.

10. Changes

We may update this policy. The date at the top always shows the latest version. We announce material changes to account holders by email.