Privacy Policy

At Tider AS ("Tider", "we", "us", or "our"), we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard information when you use our booking platform and related services.

Data Controller: Tider AS, Østensjøveien 43, 0667 Oslo, Norway

1. What Data We Collect

We collect the following categories of personal data:

• Account information: Name, email address, phone number, and password when you create an account.
• Booking data: Details of your bookings including dates, times, facilities, and payment information.
• Usage data: Information about how you interact with our platform, including pages visited, features used, and session duration.
• Device data: Browser type, operating system, IP address, and device identifiers.
• Communication data: Messages, support requests, and feedback you send to us.
• Venue operator data: Business name, address, VAT number, and bank details for venue administrators.

2. How We Use Your Data

We process your personal data for the following purposes:

• Providing and maintaining the Tider booking platform
• Processing bookings and payments
• Sending booking confirmations and reminders
• Improving our services and user experience
• Providing customer support
• Complying with legal obligations
• Sending marketing communications (with your consent)

3. Data Sharing

We do not sell your personal data. We may share your data with:

• Venue operators: When you make a booking, the relevant venue receives your booking details and contact information.
• Payment processors: We use Stripe for payment processing. Your payment data is handled directly by Stripe under their own privacy policy.
• Hosting providers: Our platform is hosted on infrastructure within the EU/EEA.
• Analytics providers: We use anonymized analytics to improve our services.
• Legal authorities: When required by law or to protect our legal rights.

4. Cookies

We use cookies and similar technologies to operate our platform, remember your preferences, and analyze usage. For detailed information about the cookies we use, please see our Cookie Policy.

5. Your Rights Under GDPR

As a data subject under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: Request limitation of how we process your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@tider.io. We will respond within 30 days.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

• Account data: Retained while your account is active, and for 12 months after account deletion.
• Booking data: Retained for 5 years for accounting and legal purposes.
• Usage data: Retained for 26 months in anonymized form.
• Marketing consent records: Retained for as long as consent is valid, plus 3 years.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, regular security assessments, and secure data centers within the EU/EEA.

8. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at dt@datatilsynet.dk.