Privacy policy

Corotrips LLC, a company incorporated in Wyoming (United States), decides how and why the data in Kliday accounts is processed: it is the data controller. For any question about your data, write to [email protected].

Company

Corotrips LLC

Address

30 N Gould St #66258, Sheridan, WY 82801, United States

Privacy email

[email protected]

When you book with a business, it receives your data to serve you and keeps it in its client records. The business is the controller of those records; Kliday processes them on its behalf, only to provide the service and following its instructions.

To access, correct or delete what a business keeps about you, ask the business. You can also write to [email protected] and we will pass it on.

• Your account: name, email, phone, profile photo if you upload one, and language.
• Your appointments: business, services, professional, date and time, status and any notes you write when booking.
• Your record at each business: on top of the above, notes and tags added by the business, how many visits you have made and how many times you did not show up or cancelled late.
• Your favourites: without signing in they stay on your device; when signed in, in your account.
• Your location, only if you allow it, to show businesses nearby. It is used at that moment and not stored.
• If you run a business: business and location details, opening hours, services, photos and your team's names and contact details.
• Security log: which actions are taken in the business panel and in Kliday's administration, by whom and when.

• Managing your account and bookings, and emailing you confirmations, changes, cancellations and reminders. Legal basis: the contract you accept when using Kliday.
• Sending you the appointment reminder on WhatsApp when the business has it turned on. Legal basis: managing your booking.
• Helping businesses avoid appointments nobody attends, by counting no-shows and late cancellations. Legal basis: the business's legitimate interest in organising its schedule. You can object.
• Sending you news or offers from a business, only if you agree when booking. Legal basis: your consent, which you can withdraw at any time.
• Protecting the service and preventing abuse. Legal basis: legitimate interest.
• Charging businesses for their Kliday plan. Legal basis: the contract with the business.

We do not sell your data or use it for third-party advertising.

With the business you book with, and with these providers, which process data on our behalf and only to provide their service:

Supabase

Database, sign-in and photos. Servers in London (United Kingdom).

Resend

Sending emails.

Meta (WhatsApp Business)

WhatsApp reminders, when the business turns them on.

Stripe

Charging businesses for their plans. It receives no data about people who book.

OpenFreeMap

Business maps. It receives your IP address when the map loads.

We will also disclose data to the authorities when the law requires it.

Corotrips LLC is based in the United States, and some providers process data outside the European Economic Area. In those cases the data is protected by the GDPR safeguards: European Commission adequacy decisions (such as the one for the United Kingdom or the EU-US Data Privacy Framework) or standard contractual clauses.

• Your account data, for as long as your account is open.
• Appointments and client records, for as long as the business uses Kliday or until it asks for them to be deleted, and then for as long as the law requires.
• If you delete your account, we delete your profile and favourites. Your past appointments remain in the business's records, which the business manages.
• The security log, for as long as needed to resolve incidents and handle complaints.

You can ask to access, correct, delete or port your data, object to its processing or ask us to restrict it. If you gave us your consent for something, you can withdraw it at any time.

Write to [email protected] from your account's email address. We reply within one month at most.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD).

Write to [email protected] from the email address you use to sign in to Kliday, with the subject “Delete my account”. We delete it within 30 days at most and let you know when it is done.

If you also want a business to delete your record, ask the business or tell us in the same email.

Kliday does not use advertising or analytics cookies.

It only stores what it needs to work in your browser: your session, your favourites if you are not signed in, light or dark mode, a booking you have not finished and, in the business panel, the business you have open. As this is essential, it does not require your consent.

Fonts are loaded from Kliday's own servers, not from third parties.

Kliday is not intended for children under 14. If you are younger, ask a parent or guardian to book for you.

If we change anything important, we will publish it here with the new date and, if it affects your account, we will let you know by email.