Legal
Privacy
Last updated 29 September 2026.
Who is responsible
Each organisation on Beaver Book is responsible for the bookings made on its site; its own notice is at its booking site's /privacy. Beaver Byte runs the service for them, and is responsible for the admins' sign-in details. Beaver Byte is also responsible for messages sent through the contact form on this website.
What we hold
For visitors: what the organisation's booking form asks (name, email, phone, and the organisation's own questions) and the booking itself. For admins: name, email address and sign-in records. From the contact form: your name, organisation, email, phone if you give it, the number of rooms and your message. No analytics, advertising or tracking cookies.
Where it's kept
On servers rented from Hetzner Online, with encrypted backups kept separately. Emails are sent through MXroute. The "are you human" check on forms is Cloudflare Turnstile.
How it's protected
Email addresses, phone numbers and notes are encrypted in the database. Only the organisation's admins see contact details, and who opened them is logged. Everything travels over HTTPS.
How long
Visitors' details are erased automatically after the period each organisation sets (12 months after the booking unless it chose otherwise). Admin accounts are kept while they're in use. Contact form messages are kept for up to 24 months, then deleted automatically; ask us and we delete them sooner.
Your rights
You can ask to see or delete your details. For a booking, ask the organisation (or delete them yourself from your booking's link once it's over). For anything else, write to us.
Contact
Beaver Byte, through www.beaverbyte.ca. Security issues: security@beaverbook.ca.