Privacy
How booking information is used.
This operational draft identifies the data used by the booking module. The controller identity, retention periods, legal bases, data-subject request process and cookie list require final business/legal approval.
Booking data
The booking system collects names, email address, telephone number, party size, session details, optional notes and consent choices so that Tiny Forest can administer the reservation.
Payments
Payment details are entered into Stripe-hosted payment fields. Tiny Forest stores the payment reference and status, but not full card or Google Pay credentials.
Marketing choices
Email and SMS marketing consent are optional and disabled by default. They are stored separately from acceptance of the booking terms.
Security and access
Administrative booking data is restricted to authorised WordPress users. Security monitoring is provided by Wordfence, and production access should use unique accounts and multi-factor authentication.
Contact
Questions about personal data can be sent to info@tinyforestplaycafe.com.