Privacy policy
Last updated: 12 October 2026
It describes how data is actually handled, but it is no substitute for legal review before being used with real customers.
1. Roles
- The Business is the controller of its end customers' data.
- ritmo is the processor, and handles that data only on the Business's instructions.
- Stripe is an independent controller with regard to payment data.
2. What data we process
Of end customers: name, email, phone (if provided), purchases, subscriptions, session balance and consents. We do not receive or store card data — it goes directly to Stripe.
3. Health data
The service does not ask for or require health data. We expressly recommend that plan and product names do not reveal diagnoses or treatments, so that the catalogue does not become, in practice, a record of Article 9 GDPR data. The dashboard always warns you when that recommendation applies.
4. Sub-processors
We use providers for hosting, database, email delivery and error monitoring. The current list is provided with the data processing agreement and notified before any change.
5. Transfers outside the EEA
Where they occur, they are made under the Standard Contractual Clauses approved by the European Commission.
6. Retention
Data is kept for as long as the relationship with the Business lasts and for twelve months after it ends, after which it is anonymised or deleted. Records required by tax law are kept for the legal period.
7. Cookies
The site only uses the cookies it needs to work. The full list is in the cookie policy.
8. Rights
End customers should exercise their rights with the Business, which is the controller. We help the Business respond. For questions about our own processing: info@bookpyng.com.