1. Who we are
Wunderbook Limited is the controller of the personal data described in this policy. We decide why and how it is used.
Company | Wunderbook Limited, registered in Ireland, company number 764728 |
Registered office | 33 Springfield Road, Terenure, Dublin 6W, Ireland |
Privacy contact | info@wunderbook.ie |
This policy covers you when you:
- visit wunderbook.app or use the Wunderbook apps
- create an account to book classes, events and memberships (a user)
- register a business to take bookings through Wunderbook (a service provider)
- contact us by email, phone, WhatsApp or social media
Service providers decide for themselves how they use the details you give them when you book. They are responsible for their own privacy notices.
What we collect depends on how you use Wunderbook. We do not buy marketing lists.
When | What we collect |
|---|
You create a user account or make a booking | Name, email address, phone number, login details, booking details (event, date, time, location), gift card and voucher details, and messages you send us or a service provider through the app |
You register a business | First and last name, business name and type, email address, phone number, business address with postcode and country, the currency you trade in and a password. Later you may add your role, website and social links, business description, branding, images, locations, schedules, prices, booking rules and the bank details we need to pay you |
You visit the website or use the apps | IP address, device and operating system, browser, language and region, pages or screens viewed, dates and times of visits, app version and performance data |
You arrive from one of our ads and accept marketing cookies | The click reference Google or Meta adds to the link, campaign tags (such as utm_source), the page you landed on and Meta’s browser identifiers |
You click to email, call or WhatsApp us, or to visit our Instagram | Which link you clicked and the page you were on, if you accepted statistics or marketing cookies. Then anything you send us |
Other people send it to us | Service providers (attendance and no-shows), Stripe (payment status, the last four digits and type of card) and analytics and advertising providers such as Google |
We do not store full card details. Stripe processes card payments.
You need to give the details marked as required on the sign-up forms to open an account. Without them we cannot set one up.
3. How we use it and our legal basis
We only use personal data where the law gives us a basis to do so. The table shows which basis applies to each use.
What we use it for | Legal basis |
|---|
Open and run your account, take bookings, process payments through Stripe and give support | Contract |
Set up your business account after you register | Steps you ask us to take before a contract, then contract |
Contact a newly registered business to help it start taking bookings | Legitimate interests: helping new customers get set up |
Send booking confirmations, reminders, account notices and security messages | Contract and legitimate interests |
Send marketing emails and push notifications | Consent, or legitimate interests where the law allows, for example news about services similar to ones you already use |
Count visits and see how the website is used (Google Analytics) | Consent, given through our cookie banner |
Measure our ads and link each sign-up to the ad that led to it | Consent, given through our cookie banner |
Fix bugs, monitor performance and improve the apps | Legitimate interests: running and improving our service |
Protect our systems and users, prevent fraud, meet legal duties and deal with legal claims | Legal obligation and legitimate interests |
Transfer the business as part of a merger or sale | Legitimate interests |
Where we rely on legitimate interests, we have weighed them against your rights. You can object at any time (section 8). You can withdraw consent at any time without affecting what happened before.
4. Cookies, consent and how we measure our ads
Our cookie banner asks for your choice before we use statistics or marketing cookies. Functional cookies are always on because the site needs them to work.
You can change your choice at any time through the Manage consent link [confirm where it shows on the site]. We keep your choice for 12 months, then ask again. Our [cookie policy] lists each cookie we use.
Before you choose, and if you decline, Google’s tags run in a limited mode. They set no analytics or advertising cookies. They may send Google basic signals without cookies, such as a page loading, which Google uses to estimate totals across many visitors.
Our tagging server
Most of our measurement runs through our own tagging server at wunderful.wunderbook.app, which Stape runs for us. Your browser sends events there first. The server passes them on to Google and Meta in line with your choices. With marketing events it also passes on your IP address and browser details, which helps Meta match them.
When a business signs up after clicking one of our ads
- If you accepted marketing cookies, we keep the ad’s click reference and campaign tags in your browser for up to 90 days.
- When you register, we add them to your sign-up so our records show which ad you came from.
- We send your email address, phone number, name, postcode and country to Google and Meta in hashed form. Hashing turns them into a code that cannot be read back. Google and Meta compare the code with details they already hold to link your sign-up to the ad you clicked.
For the Meta pixel and Meta’s Conversions API, we and Meta are joint controllers for collecting data on our website and sending it to Meta. We are responsible for telling you about it and asking for your consent. Meta is responsible for what it does with the data once it has it, and you can use your rights with Meta as well as with us. Meta explains its own use in the Meta Privacy Policy.
If you message us on WhatsApp or visit our Instagram page, Meta handles your data under its own terms.
5. Who we share it with
We do not sell your personal data. We share it only with the people and companies below, and only what each needs.
Who | Why |
|---|
Service providers you book with | To deliver the class, event or membership you booked. They receive your name, contact details and booking details |
Stripe | Card payments, refunds and payouts to service providers |
Google | Website statistics (Google Analytics), ad measurement (Google Ads) and address suggestions as you type on the business sign-up form (Google Maps) |
Meta | Ad measurement (Meta pixel and Conversions API) and WhatsApp messages |
Stape | Runs our tagging server |
HighLevel | Our customer relationship system, which holds business sign-ups and our contact with them |
Zapier | Passes new business sign-ups from our booking system to HighLevel |
Hosting, email, notification and support providers | Running the website, the apps and our messages to you |
Public authorities, courts and our professional advisers | Where the law requires it, or to protect the rights and safety of people and of Wunderbook |
A buyer or merger partner | If Wunderbook is sold or merged. We will tell you if a different privacy policy will apply |
Most of these companies act only on our instructions, under contract. Google and Meta also decide how to use some data for their own purposes, as their own privacy policies explain. Service providers are responsible for the booking details they receive.
6. Sending data outside Europe
Our main servers are in the European Union. Some providers, including Google, Meta, HighLevel and Zapier, also process data in the United States.
When data leaves the European Economic Area or the UK, we rely on one of these safeguards:
- an adequacy decision, including the EU-US Data Privacy Framework and its UK Extension, where the provider is certified under it
- standard contractual clauses approved by the European Commission, with the UK Addendum or the UK International Data Transfer Agreement for UK data
You can ask us for a copy of the safeguard that applies to your data.
7. How long we keep it
We keep personal data only as long as we need it for the uses in section 3.
Data | How long we keep it |
|---|
User and service provider accounts | While the account is open, then deleted or anonymised within 12 months of closing it |
Booking and payment records | 6 years after the end of the financial year they relate to, to meet tax and accounting law |
Business sign-ups that never go live | 24 months after our last contact |
Marketing contact details | Until you unsubscribe. We then keep your email address on a do-not-contact list so we do not message you again |
Messages and support requests | 2 years after the matter is closed |
Ad click reference and campaign tags in your browser | 90 days |
Google Analytics data | 14 months |
Your cookie choice | 12 months |
Anonymised or combined statistics | With no time limit, as they no longer identify you |
8. Your rights
You have the rights below over your personal data. Some depend on the legal basis we use.
Right | What it means |
|---|
Access | Get a copy of your data and details of how we use it |
Correction | Have data that is wrong or incomplete fixed |
Deletion | Ask us to delete your data in certain cases |
Restriction | Ask us to pause using your data in certain cases |
Portability | Get the data you gave us in a common format, or have it sent to another company where possible |
Objection | Object to any use based on legitimate interests. If you object to direct marketing, we stop straight away |
Withdraw consent | Change your cookie choice through Manage consent, or use the unsubscribe link in any marketing email |
We do not make decisions about you with legal or similar effects using automated processing alone.
To use any right, email info@wunderbook.ie. We reply within one month. For complex requests we may take up to two more months and will tell you why. We may need to check your identity first.
Complaints
If you are unhappy with how we handle your data, please tell us first at info@wunderbook.ie with “Privacy complaint” in the subject line. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay.
You can also complain to a regulator:
9. Security, children and changes
We protect personal data with encryption in transit, access controls and regular security updates. No system is completely secure, so we review these measures regularly.
Wunderbook is not meant for children under 16. We do not knowingly collect their data. If you think we have, contact us and we will delete it.
We may update this policy. We will post the new version on this page with a new date, and tell you by email or in the app about significant changes.
For questions about this policy or your data, email info@wunderbook.ie or write to Wunderbook Limited, 33 Springfield Road, Terenure, Dublin 6W, Ireland.
