Who we are
Direct Booking Page (directbookingpage.com) is a service that lets vacation rental hosts publish their own booking website and take direct bookings. It is operated by tiny apps maker OÜ, a limited company registered in Estonia (registry code 16928460), with its registered address at Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia. We are the data controller for the personal data described in this policy.
Questions? Contact us at gregory@directbookingpage.com.
What information we collect
Account holders (hosts). When you sign in with Google we receive your name, email address and profile picture. We also store your account and subscription details, your websites and their content (text, photos, prices, location, connected domain), your notification preferences, and technical log data such as IP address, browser type and session information.
Guests visiting a host's website. We do not require guests to create an account. When a guest sends a booking request, it is delivered to the host by email and the details you enter (such as name, email, dates and message) are passed to that host, who is responsible for how they use them. We do not sell guest data.
Information from Meta (Facebook and Instagram). If you choose to connect a Facebook or Instagram account, we receive only the information you authorize, such as your public profile and the permissions you grant. We use it solely to provide the feature you connected it for and never to sell, advertise or profile you.
How we use your information
- to provide and operate the service, including hosting your website;
- to authenticate you and keep your account secure;
- to process subscription payments and manage domains you request;
- to send service and transactional emails and, with your consent, product news;
- to understand usage and improve the product;
- to meet our legal obligations and prevent abuse.
We do not sell your data to third parties.
Legal basis (GDPR)
We process data to perform our contract with you, based on your consent (for example newsletters or connecting a social account), to pursue our legitimate interests in running and securing the service, and to comply with legal obligations.
Storage and security
Uploaded images and files are stored in encrypted S3-compatible cloud storage and transferred over TLS. Access to our systems is restricted and credentials are stored securely. No method of transmission or storage is perfectly secure, but we work to protect your data.
Data sharing and processors
We share data only with service providers that help us run the service, under appropriate agreements:
- Google, for sign-in (OAuth);
- Polar, for subscription billing and payments;
- Porkbun, for domain registration and DNS;
- our cloud hosting and object storage providers;
- our email delivery and newsletter tools;
- a privacy-friendly analytics tool (Umami) for aggregate usage statistics;
- Meta Platforms, only if you connect a Facebook or Instagram account.
We do not share your data with anyone else except where required by law. Some providers are located outside the EU/EEA; where so, transfers rely on safeguards such as the EU Standard Contractual Clauses.
Data retention
We keep account data while your account is active. You can delete your websites or your entire account at any time, after which we remove your personal data, except what we must keep for legal or accounting reasons (for example payment records).
Your rights
Under the GDPR you may request access to, correction of, deletion of, or a portable copy of your personal data, object to or restrict processing, and withdraw consent at any time. Email us at gregory@directbookingpage.com. You also have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).
Deleting your data
You can request deletion of your data, including any data received through Facebook or Instagram, by following the steps on our data deletion page.
Cookies
We use only strictly necessary cookies, such as the session cookie that keeps you signed in. Our analytics are cookie-free and we use no advertising or cross-site tracking cookies.
Children
The service is not directed to children under 16 and we do not knowingly collect their data.
Changes to this policy
We may update this policy from time to time. The date at the top shows the latest revision, and we will notify you by email of significant changes.
Contact
tiny apps maker OÜ
Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia
Registry code 16928460
gregory@directbookingpage.com