Effective date: August 1, 2026. Previous version: April 2026.
Operated by BookOrielle
This version adds Google to our list of third parties and describes the data held by features added since April 2026: the Orielle Points loyalty program, staff logins for business partners, and promotional codes.
This is our privacy policy. We wrote it in plain English because nobody reads legalese and you deserve to know what happens with your data.
When you create an account, we collect your name, email address, and phone number (optional). When you book a service, we store the booking details, payment information (processed through Stripe, we never see your full card number), and any notes you add. If you're a business partner, we also collect your business name, address, services, and pricing. We collect basic usage data like which pages you visit and how you use the app. This helps us make BookOrielle better. Since April 2026 we also store: your Orielle Points loyalty balance and the transactions behind it, which are keyed to your email address and exist whether or not you create an account; staff accounts created by a business partner, including the staff member's name, email, and the permissions their employer grants them; and records of promotional codes applied to a booking, including the discount amount. If you sign in with Google, we store the fact that your account is linked to a Google account, along with the name and email address Google gives us.
We use your info to run BookOrielle. That means creating your account, processing bookings, sending confirmations and reminders, handling payments, and showing your profile to potential clients (if you're a business). We also use aggregated, anonymous data to understand how people use the platform so we can improve it. We don't sell your data. We don't use it for advertising. If we ever want to use your information for something new, we'll ask first.
We use a few services to run BookOrielle. Stripe handles all payment processing and identity verification for business payouts. They have their own privacy policy at stripe.com/privacy. Postmark sends our transactional emails (booking confirmations, reminders, password resets). Amazon Web Services (AWS) hosts our infrastructure and stores uploaded images. Google provides two things: sign in with Google, where Google confirms your identity and shares your name and email address with us if you choose that option, and Google Maps Places, which powers the address search box. When you type an address into that box, what you type is sent to Google to return suggestions. Google's privacy policy is at policies.google.com/privacy. That's the full list. We don't share your data with advertisers, data brokers, or anyone else.
We use a session cookie to keep you logged in. That's a small file stored in your browser that remembers who you are so you don't have to sign in every time. If you book as a guest and verify your email with a one-time code, we also set a short-lived cookie recording that the verification succeeded, so you can view and spend your loyalty points without creating an account. We don't use tracking cookies or advertising cookies. If we ever add analytics cookies, we'll let you opt out.
You can see, update, or delete your personal information at any time from your account settings. If you want a copy of everything we have on you, email us at privacy@bookorielle.com and we'll send it over. If you want us to delete your account and all your data, we'll do that too. Just email us. Deletion is permanent. We can't undo it.
We take security seriously. All data is encrypted in transit (HTTPS everywhere) and at rest. Passwords are hashed and salted. We never store full credit card numbers. Access to production data is restricted and logged. If we ever discover a breach, we'll notify affected users within 72 hours.
BookOrielle is not designed for children under 13 and we do not knowingly collect data from children. If you believe a child has created an account, please contact us and we'll remove it immediately.
If we make significant changes to this policy, we'll email you and post a notice on the site. Small changes (like fixing typos or clarifying wording) may happen without notice. The "effective date" at the top always reflects the latest version.
Questions about your privacy? Contact us at our contact page