1. Scope and roles
This Policy applies to personal information handled by SleighBook. Professional Santas and organizations may enter information about their own customers. For that customer information, the Santa or organization generally decides why and how it is used, and SleighBook processes it to provide the requested tools. Customers should also review the relevant provider’s privacy practices.
2. Information we collect
Information you provide
- Account and identity information: legal name, display name, business name, email, phone number, password hash, role, and account status.
- Address and profile information: private mailing address, public city or service area, biography, experience, services, pricing, and photographs.
- Booking and client information: customer names and contact details, event addresses, dates, times, guest counts, notes, status, pricing, invoice information, and attendance records.
- Subscription and transaction information: plan, coupon use, payment status, Stripe customer or transaction identifiers, invoice balances, and offline payment records. Payment-card details submitted through Stripe are handled by Stripe rather than stored by SleighBook.
- Calendar information: calendar feed URLs, availability, busy times, and event information needed to detect scheduling conflicts.
- Communications: messages, support requests, and other information you send us.
Information collected automatically
When you use SleighBook, our servers and service providers may process IP address, device and browser information, requested pages, timestamps, session identifiers, error logs, and security events. We use essential session cookies to keep users signed in, protect forms, and maintain service security. We do not currently describe or use third-party advertising cookies.
3. How we use information
- Provide accounts, bookings, calendars, profiles, invoices, payments, subscription access, and customer portals.
- Authenticate users, prevent fraud and abuse, troubleshoot errors, and protect the service.
- Process requests, transactions, renewals, coupons, communications, and customer support.
- Display information users choose to make public, such as professional profiles, services, approximate city-level map locations, and pricing.
- Maintain, analyze, and improve performance, reliability, accessibility, and features.
- Comply with law, enforce agreements, resolve disputes, and protect rights and safety.
5. Stripe, Google Maps, and external services
Stripe processes subscription and invoice payments and may collect payment, identity, device, and transaction information under the Stripe Privacy Policy.
SleighBook uses Google Maps Platform to display approximate professional locations. Google may receive information such as IP address, device information, and map requests. Google’s handling of that information is governed by the Google Privacy Policy and applicable Google Maps terms.
Connected calendar providers and links to other sites have their own privacy practices. Review their policies before providing information.
6. Data retention
We retain information for as long as reasonably necessary to provide the service, maintain business and transaction records, meet legal obligations, resolve disputes, enforce agreements, and protect security. Retention periods vary by information type and context. We may retain limited records after account closure where legally required or necessary for these purposes. Backup copies may remain temporarily until overwritten through normal processes.
7. Security
We use administrative and technical measures designed to protect personal information, including password hashing, encrypted transport where available, access controls, CSRF protection, and encryption of connected payment credentials. No system is completely secure, and we cannot guarantee absolute security. Use a unique password and notify us promptly of suspected unauthorized access.
8. Your choices and privacy requests
You may review or update certain information through your account. You may request deletion of your SleighBook account and associated data, or request access, correction, or a copy of personal information by emailing [email protected]. We may need to verify your identity and may retain information where permitted or required by law.
Depending on where you live, you may have additional rights, such as the right to know, correct, delete, or obtain a portable copy of personal information, or to appeal a denied request. Authorized agents may submit requests where applicable. We will not discriminate against you for exercising applicable privacy rights.
You can restrict cookies through browser settings, but blocking essential cookies may prevent sign-in and other service functions.
9. Children’s privacy
SleighBook accounts and business tools are not directed to children under 13, and children may not create accounts. Providers and customers should avoid entering unnecessary sensitive information about children in booking notes. If you believe a child submitted personal information directly to SleighBook without appropriate authorization, contact us so we can investigate and delete it where required.
10. International use
SleighBook is operated from the United States. If you access the service from another country, information may be processed and stored in the United States and other locations used by our service providers, where privacy laws may differ from those in your location.
11. Changes to this Policy
We may update this Policy to reflect changes in the service, law, or our practices. We will post the revised date and provide additional notice when appropriate. Your continued use of the service is subject to the current Policy.
12. Contact us
For privacy questions or requests, contact SleighBook at [email protected] or 502-632-6784.