Privacy Policy
LaneBooker ("we", "us") provides booking software to bowling centres ("operators"). This policy describes how we collect, use, retain, and disclose personal information in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Information we collect
- Operator account data: name, business email, business name, billing address, and Stripe payment tokens for our subscription.
- End-customer booking data (collected on behalf of operators): name, email, phone (optional), booking time, party size, and payment tokens via Stripe Connect. We do not store full card numbers — Stripe handles all card data.
- Technical data: IP address, browser/user-agent, and timestamps for security and abuse prevention.
2. How we use it
- To operate the booking platform and process payments.
- To send transactional email (booking confirmations, password resets, invoices).
- To detect, prevent, and investigate fraud, abuse, or security incidents.
- We do not sell personal information, and we do not use end-customer data for advertising.
3. Retention
- Active operator accounts: data retained for the life of the account.
- Cancelled accounts: data retained for 90 days to allow reactivation, then deleted or anonymized.
- Booking records: retained for 7 years to meet Canadian tax/recordkeeping rules, then deleted.
- Server access logs: 30 days.
4. Cookies
We use a small number of strictly necessary cookies for authentication (session token) and CSRF protection. We do not use third-party advertising or tracking cookies. Stripe checkout pages may set their own cookies governed by Stripe's policy.
5. Data storage and security
Data is stored on Cloudflare infrastructure (Workers, D1, R2, KV) in Cloudflare's North American regions, encrypted in transit (TLS 1.2+) and at rest. Access is restricted to authorized LaneBooker personnel.
6. Your rights (PIPEDA)
You may request access to, correction of, or deletion of your personal information at any time. Operators can self-serve from the staff portal; end customers should contact the operator who took their booking, or email us and we will route the request.
7. Disclosure
We disclose data only to: (a) Stripe (for payments), (b) Resend or our transactional email provider (for receipts), (c) Cloudflare (our hosting provider), and (d) law enforcement when legally required.
8. Contact
Privacy questions, access requests, or complaints: [email protected]. If we cannot resolve a complaint, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.