Where copy appears
Booking widget, QR, and channel forms show a notice link and required service consent checkbox.
A second opt-in covers marketing; without it, no promotional SMS or email sends.
Updating copy
Notice and consent text pull from legal documents in CMS. When legal updates content, forms refresh automatically.
Fill controller name, contact address, and retention periods under Settings → Privacy → Compliance.
Consent records
Each booking logs which boxes were checked with timestamps. Guest CRM shows consent history.
On marketing withdrawal, disable the marketing flag; operational reminders may continue as part of the booking service.
How do retention and deletion requests work?
Default profile retention anonymizes twenty-four months after last visit. You can shorten this in Privacy settings. Use Operations → Guests export for data download requests.
Process erasure via Operations → Guests → Privacy Request, irreversible with anonymized stats. Admin access logs are kept for twelve months.
Pre-launch check
Test widget and QR links before go-live. Empty or placeholder text fails compliance review.
Enterprise customers complete cross-border processing via DPA addendum, open a support ticket for the latest DPA.