Back to Home

Privacy Policy

Last updated: January 11, 2026

1. Introduction

Welcome to TreatsMe ("we," "our," or "us"). We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our booking platform service (the "Service").

TreatsMe is operated by independent developers based in the European Union. For any privacy-related inquiries, please contact us at [email protected].

2. Data We Collect

We collect only the minimum data necessary to provide our booking service:

For Business Users (Service Providers):

  • First name and last name
  • Email address
  • Phone number
  • Business address
  • Profile avatar/image

For End Users (Customers booking appointments):

  • First name and last name
  • Email address
  • Phone number
  • Profile avatar/image (optional)

3. How We Use Your Data

We use your personal data exclusively for the following purposes:

  • Processing and managing appointment bookings
  • Sending booking confirmations and reminders via email
  • Enabling communication between businesses and their customers
  • Providing customer support when requested

We do NOT use your data for marketing, advertising, profiling, or selling to third parties.

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

  • Contract Performance: Processing is necessary to provide the booking service you requested
  • Legitimate Interests: For service improvement and security purposes
  • Consent: Where you have given explicit consent (e.g., for optional communications)

5. Third-Party Services

We use the following trusted third-party services to operate our platform:

Google Analytics

Used for website analytics to understand how users interact with our service. Google Privacy Policy

Brevo (Sendinblue)

Used for sending transactional emails (booking confirmations, reminders). Brevo Privacy Policy

Cloudflare

Used for content delivery and image storage. Cloudflare Privacy Policy

6. Data Storage and Retention

  • Location: All data is stored on servers located within the European Union
  • Retention: We retain your data for as long as your account is active
  • Deletion: Upon your request, we will permanently delete all your personal data within 30 days

7. Your Rights (GDPR)

Under GDPR and other applicable data protection laws, you have the following rights:

Right to Access

Request a copy of all personal data we hold about you

Right to Rectification

Request correction of inaccurate or incomplete data

Right to Erasure ("Right to be Forgotten")

Request deletion of all your personal data

Right to Data Portability

Receive your data in a structured, machine-readable format

Right to Object

Object to processing of your personal data

Right to Restrict Processing

Request limitation on how we use your data

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Encryption of data at rest
  • Regular security assessments
  • Access controls and authentication

9. Children's Privacy

Our Service is not intended for users under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately at [email protected].

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

TreatsMe
Email: [email protected]

You also have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.