Booking Magician — Privacy Notice for California Residents (CPRA)

Last Updated: August 28, 2025

This Privacy Notice for California Residents supplements the Booking Magician Privacy Policy and applies solely to residents of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, “CPRA”). Capitalized terms not defined here have the meanings given in our Privacy Policy.

Contact: help@bookingmagician.com
Address: Booking Magician LLC, 3400 Cottage Way, Ste G2 #20396, Sacramento, CA 95825, USA
Do Not Sell or Share My Personal Information: /Do-Not-Sell-Or-Share

Note: Our Service is intended for adults 18 years or older.

1) Notice at Collection

We collect the following categories of personal information for the purposes listed below. We retain information only as long as reasonably necessary for the disclosed purposes (see “Retention”).

Categories Collected:
- Identifiers (e.g., name, email address, phone number, IP address, device identifiers, cookie IDs)
- Customer Records (e.g., account profile, subscription status, limited billing metadata from Stripe)
- Internet or Network Activity (e.g., page views, clicks, analytics events, referral data)
- Geolocation (coarse location from IP address only)
- Commercial Information (e.g., subscription plan, transaction metadata from Stripe)
- Inferences (limited personalization based on alert preferences/usage)
Sensitive Personal Information: We do not collect or use sensitive personal information for purposes that require offering a “Right to Limit.”

Purposes of Collection and Use:

Provide, maintain, and improve the Service (including reservation alerts)
Process payments and manage subscriptions via Stripe
Communicate with you (transactional emails/SMS; with consent, marketing emails/SMS)
Debugging, security, fraud prevention, and preventing abuse or violations
Analytics and advertising measurement (GA4, Google/Meta pixels; subject to your choices)
Compliance with law, enforcement of our Terms, and protection of rights

“Selling” or “Sharing”:

We do not “sell” personal information for money.
We may “share” identifiers (e.g., cookie IDs, IP address) with advertising/analytics partners for cross‑context behavioral advertising. You may opt out at /Do-Not-Sell-Or-Share or via a browser‑based Global Privacy Control (GPC) signal.

Retention (typical defaults):

Account/profile: for the life of the account and up to 24 months after closure
Alerts/logs/communications metadata: up to 24 months
Analytics data: per vendor defaults or our configured retention settings We may maintain de‑identified or aggregated data for analytics indefinitely.

2) Categories of Personal Information Collected (Past 12 Months)

Identifiers (name, email, phone, IP, cookie ID, device ID)
Customer Records (account profile, subscription metadata)
Commercial Information (plan type, transaction metadata)
Internet or Network Activity (browsing history on our Service, interactions, analytics)
Geolocation Data (coarse, from IP)
Inferences (limited)
Sensitive Personal Information: Not collected/used for additional purposes.

Sources:

Directly from you (account setup, preferences, communications)
Automatically from your device/browser (cookies, pixels, SDKs, logs, analytics)
Service providers (Stripe, Twilio, SendGrid) and affiliate/ads/analytics partners as described in our Privacy Policy

Business/Commercial Purposes:

Provide and operate the Service
Process payments and manage subscriptions
Communicate and provide support
Measure and improve performance and user experience
Marketing (email/SMS with consent), analytics, and advertising measurement
Security, fraud prevention, and legal compliance

Categories of Third Parties to Whom We Disclose:

Service providers/processors (e.g., Stripe, Twilio, SendGrid, DigitalOcean, Cloudflare)
Analytics/advertising partners (e.g., Google, Meta), subject to your consent/choices
Affiliate program manager and payout partners (PromoteKit, PayPal)
Governmental bodies or law enforcement when required by law
Successors in interest (in the event of a merger, acquisition, or asset transfer)

3) Selling or Sharing of Personal Information

Monetary Sale: We do not sell personal information for money.
Sharing for Cross‑Context Behavioral Advertising: We may “share” identifiers (such as cookie IDs, IP addresses, usage data) with advertising/analytics partners (e.g., Google, Meta) to measure performance or for advertising purposes, subject to your opt‑out.
Minors: We do not knowingly sell or share the personal information of consumers under 16 years of age. The Service is for 18+ only.

How to Opt Out:

Use our Do Not Sell or Share page at /Do-Not-Sell-Or-Share to manage your preferences.
Enable Global Privacy Control (GPC) in supported browsers; we honor GPC as a valid opt‑out signal.

4) Your CPRA Rights

Subject to certain exceptions, California residents have the following rights:

Right to Know/Access: Request the categories and specific pieces of personal information we collected about you; categories of sources; purposes; categories of third parties; and categories of personal information sold/shared or disclosed for a business purpose.
Right to Delete: Request deletion of personal information we collected from you.
Right to Correct: Request correction of inaccurate personal information.
Right to Opt Out of Sale/Sharing: Opt out of the “sale” or “sharing” of personal information (as defined by CPRA).
Right to Limit Use/Disclosure of Sensitive Personal Information: We do not use or disclose sensitive personal information for additional purposes requiring a right to limit.
Right to Non‑Discrimination: We will not discriminate against you for exercising your CPRA rights.

Verification and Authorized Agents:

We will verify your request by reasonably matching the information you provide with information we maintain (e.g., email verification or login).
You may designate an authorized agent to submit a request on your behalf. Agents must provide proof of authority and, in some cases, we may still require direct verification from you.

Requests, Appeals, and Timelines:

Submit requests to help@bookingmagician.com or via instructions on /Do-Not-Sell-Or-Share.
We generally respond within 45 days; if more time is needed, we will inform you in writing.
Opt‑out of sale/sharing requests will be honored within 15 business days.
If we deny your request, you may appeal by replying to our decision notice; we will respond within the timeframe required by law.

5) Data Retention

We retain personal information for the duration necessary to fulfill the purposes described in this Notice and our Privacy Policy, including providing the Service, meeting legal obligations, resolving disputes, and enforcing agreements. Typical retention periods are listed in “Notice at Collection.” Actual retention may vary based on account status, legal requirements, and operational needs.

6) Financial Incentives

We do not currently offer financial incentives, loyalty programs, or price differences in exchange for the retention or sale/share of personal information.

7) Changes to this Notice

We may update this Notice from time to time. When we do, we will revise the “Last Updated” date and may provide additional notice as required by law.

8) Contact Us

Booking Magician LLC
3400 Cottage Way, Ste G2 #20396
Sacramento, CA 95825, USA
help@bookingmagician.com