Legal
Privacy Policy
This notice explains what we collect on flexibookwp.com, why, and your rights under the GDPR.
Last updated 24 September 2026. Operator: TourCierge s. r. o. · IČO 57383898 · https://www.flexibookwp.com
1. Controller
The controller for this website and the license dashboard is TourCierge s. r. o..
TourCierge s. r. o.
Registration ID (IČO): 57383898
Tax ID (DIČ): 2122693199
Registered address: Karpatské námestie 10A, 831 06 Bratislava - mestská časť Rača, Slovakia
Email: hello@flexibookwp.com
See the Imprint for the same identity details.
Your WordPress site is a separate processing operation. When visitors book with you, you are the controller of that data. The plugin runs on your server.
2. What we process
- Account: email, password hash (handled by our auth provider), user id.
- License: customer email, plan type, expiry, locked domain, Stripe identifiers, key status.
- Checkout: payment confirmation via Stripe. We do not store full card numbers.
- Support: whatever you send us by email.
- Technical: server logs (IP, user agent, time) for security, and cookies described in the Cookie policy.
3. Purposes and legal bases (GDPR Art. 6)
- Contract (Art. 6(1)(b)): creating your account, issuing keys, verifying a domain, delivering the plugin, billing.
- Legitimate interests (Art. 6(1)(f)): securing the API, preventing fraud, basic product analytics if you opted in.
- Consent (Art. 6(1)(a)): optional analytics cookies. You can withdraw it from the cookie banner.
- Legal obligation (Art. 6(1)(c)): invoices and tax records where required.
4. Processors and transfers
We use:
- Supabase — authentication and database hosting.
- Stripe — payments and customer billing objects.
- Vercel — website hosting and, if you allow it, Analytics.
These providers may process data in the EU and other countries with appropriate safeguards (including Standard Contractual Clauses). We do not sell your personal data.
5. Retention
Account and license records are kept while the account is open and as long as needed for disputes, chargebacks, and tax. Server logs are rotated on a short cycle. You may ask us to delete an account; we may keep a minimal record of a revoked key to stop reuse.
6. Your rights
If GDPR or UK GDPR applies, you may request access, correction, erasure, restriction, portability, and objection, and you may withdraw consent. You may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (ÚOOÚ SR) or your local supervisory authority.
Write to hello@flexibookwp.com to exercise rights. We may need to verify the account email.
7. Children
The product is for business operators. We do not knowingly create accounts for children under 16.
These pages are the operational terms of FlexiBook. They are not a substitute for advice from a lawyer licensed in your country. If your company details change, update the Imprint.