Privacy Policy

BookingHost sp. z o.o., ul. Nakielska 3, 01-106 Warszawa, Poland, KRS 0000606096, NIP 7010556748, REGON 363905731, is the data controller. Contact for privacy questions: maplegrit@polsia.app.

- Contact details (name, email, phone number) — from you, when you sign up or contact us.

- Business details (business name, address, opening hours, menu or services, prices, photos, logo) — from you, and public sources such as your Google Business Profile.

- Payment details (billing name, billing address, payment status) — from you, through our payment provider. We never see or store your full card number.

- Messages (emails and change requests you send us) — from you.

- Website usage (pages visited on Maplegrit sites, device type) — from your browser, only if analytics are used.

- Build, host and update your website; handle your account and payments — performing our contract with you (Art. 6(1)(b) GDPR).

- Keep invoices and accounting records — legal obligation (Art. 6(1)(c) GDPR).

- Send you information about our own services, keep our systems secure — our legitimate interests (Art. 6(1)(f) GDPR). You can object at any time.

- Marketing emails beyond our own service updates — your consent, which you can withdraw at any time (Art. 6(1)(a) GDPR).

We use AI tools to process your business information when building and updating your website. These tools do not make decisions about you that have legal or similarly significant effects.

We share data only with service providers who help us run Maplegrit, under contracts that require them to protect it:

- Polsia — builds, hosts and updates websites; runs our email.

- Stripe — payments.

- Polsia's sub-processors, including AI providers — AI processing to build and update websites. Polsia publishes its current list at polsia.com/subprocessors.

We do not sell your data.

Some providers are based in the United States. When data leaves the European Economic Area, we rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

- Account and business data: while you use Maplegrit, then up to 30 days so we can send you an export.

- Invoices and payment records: 5 years from the end of the year the payment was made, as required by Polish tax law.

- Marketing consent: until you withdraw it.

You have the right to access your data, correct it, delete it, restrict its use, receive it in a portable format, and object to processing based on our legitimate interests. To use any of these rights, email maplegrit@polsia.app. We reply within one month.

You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl), or the authority in your own country.

Maplegrit's own website uses only cookies needed for it to work. If we add analytics or advertising cookies, we will ask for your consent first.

We will post any update here and email customers about important changes.