Privacy & cookies

Contact hello@bookingtrail.co.uk about your information or this notice.

Account and service information

We use your business name, email address, password hash, subscription status and service activity to provide your account, authenticate access, administer payments and respond to support requests. We process account data to perform our contract with you; security and abuse-prevention records support our legitimate interest in protecting the service. Payment and accounting records may also be retained to meet legal obligations.

If you register using a campaign-tagged link, we store its campaign source, medium, name, content, term and ID with your account to understand which campaigns lead to signups. These details come from the signup link, are visible only to our administrators and remain with your account while it is retained. This account record is separate from optional Google Analytics: saving it does not load Google Analytics or set additional tracking cookies.

Your customers’ enquiries

You decide what customer information to enter and why. You are responsible for giving those customers appropriate privacy information and having a lawful basis to process their details. We store enquiry records on your behalf to provide BookingTrail. If you submit an embedded enquiry form, the business named on that form receives your submission and decides how to respond.

Do not enter payment-card details, passwords, health information or other sensitive personal information into enquiry notes. To request access to or deletion of an enquiry you submitted to another business, contact that business first.

Service providers and payments

We use service providers to store data and deliver account emails. Stripe processes subscriptions and card details on its payment pages. BookingTrail stores customer and subscription references and payment status, not your full card number. See Stripe’s privacy notice for its processing and international-transfer arrangements. We do not sell personal information.

Storage and retention

Your account and enquiry records are protected with restricted access. Records remain available while your account is open, including during read-only access. You can export your enquiries and request account closure in Business tools. Closure involving a subscription is reviewed to ensure billing is dealt with. Private backup copies expire within 14 days; payment records may be retained separately where required for accounting or legal purposes. Authentication rate-limit records, email delivery logs and maintenance records have shorter operational retention periods.

Your choices and rights

You can update business details, export your records, disable the daily summary and request account closure. Depending on the circumstances, UK data-protection law gives you rights to access, correct, erase, restrict or object to processing, and to data portability. Email support to make a request. We may need to verify your identity. You can also complain to the Information Commissioner’s Office.

Anonymous campaign totals

To improve the public website, we count arrivals from registered, shared campaign links using campaign source, medium and name. We keep only daily totals in Europe/London time for up to 90 days, with private backup copies expiring within 14 days. We do not store visitor identifiers, IP addresses, device details, page histories or full URLs in these statistics, and do not link them to accounts, payments, Google Analytics or Meta. We do not use these totals for advertising audiences, profiling or measuring an individual person’s response to an advert. Unknown campaign labels and unique recipient tags are not recorded.

Anonymous counts are independent of optional Google Analytics consent. To stop them, use Stop anonymous counts on this page. This free choice takes effect immediately for future count requests in this browser and is remembered for six months across the website and app using a preference cookie containing only on/off. We also respect Global Privacy Control and Do Not Track signals. Already aggregated totals cannot be linked back to you or individually removed. Ordinary hosting security logs are separate and may contain IP addresses; these are not used to identify visitors in campaign reporting.

Counts are arrivals, not unique people: repeated loads, bots, blocked scripts and opt-outs affect coverage. Campaign totals overlap consented visits, so we do not add them to Google totals or join anonymous arrivals to individual conversions. If you consent, Google receives the campaign details available for your subsequent activity under the separate Analytics choice below. Account-linked signup campaign details described above are not anonymous.

Cookies and browser storage

With your consent, BookingTrail uses Google Analytics on the public website, public demo and account signup pages to measure visits, campaign sources, trial-link clicks, completed email-verified signups and initial paid subscriptions. We send subscription value, currency and a pseudonymous transaction reference to avoid double-counting, plus device and browser information. We do not send names, email addresses, verification tokens or customer enquiry records. Private workspace activity and embedded enquiry forms are not tracked. Google processes this information and may process it outside the UK under its applicable safeguards. We use it to improve the website. Analytics cookies last up to six months. You can accept, reject or withdraw consent using Cookie settings on the website or app. We remember your choice for six months and share it between bookingtrail.co.uk and app.bookingtrail.co.uk. Google Analytics reporting only includes people who accept; subscription renewals and payments without a return visit are not included. See Google’s privacy policy. The app uses essential session cookies to keep you signed in and protect requests, and may remember interface preferences in browser storage. Stripe sets its own cookies on its checkout and portal pages.

Changes

We will update this page if the service or processing changes and provide additional notice where required.