Privacy policy

Last updated: 3 November 2026

BookBaltic is a booking connector between Baltic businesses (spas, saunas, studios, workshops, restaurants) and marketplaces such as GetYourGuide and Viator. This policy explains what personal data we process on bookbaltic.com and in the connector, why, and what your rights are.

Who is responsible

The controller is IT Hospitality SIA, Reg. No. 40203196322. Legal address: Katrīnas iela 5, Rīga, LV-1045, Latvia. Contact for any privacy question: hello@bookbaltic.com.

What data we process

Connection request. When you send the "Connect your business" form, we receive the business name, city, type of business, what you would sell with its duration, price and number of guests, where you keep bookings now, your email address and the language of the page.

Google Calendar, after you connect it. If you choose to connect your Google Calendar, we ask Google only for:

• free/busy information of the calendars you select - when you are busy, not what the events are;
• a separate BookBaltic calendar that we create in your account, where we add bookings from marketplaces.

We do not read the titles, descriptions, guests or attachments of your other events, and we do not change or delete them. You can disconnect at any time in your Google Account settings or by writing to us.

Bookings from marketplaces. To place a booking in your calendar we pass on what the marketplace gives us for that booking: the guest's name, the time, the number of guests and, if the marketplace provides them, contact details. We use them only for that booking.

Technical logs. Our hosting provider records standard server logs (time, requested address, IP address) to keep the service secure. The site uses no advertising cookies. Analytics cookies are used only with your consent, see "Analytics (Google Analytics 4)" below.

Analytics (Google Analytics 4)

If you allow analytics in the cookie banner (Accept all, or Analytics in Settings), we use Google Analytics 4 to see how the site is used: pages viewed, how you came to the site (for example, from a search engine or a link), approximate location (country, city), device, browser and screen size. GA4 stores cookies (_ga, _ga_<ID>) in your browser to tell visits apart.

Without your consent Google Analytics is not loaded and receives nothing. We do not use it for advertising: advertising signals stay off. In GA4, IP addresses are not logged or stored by default. GA4 data is kept for 14 months.

The basis is your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time: open Cookie settings (also at the bottom of every page) and choose Reject. You can also delete the cookies in your browser.

Why and on what basis

• to reply to your request and plan the connection - steps taken at your request before a contract (GDPR Art. 6(1)(b));
• to publish your free slots on marketplaces and add bookings to your calendar - performance of our agreement with you (Art. 6(1)(b)) and your consent given to Google (Art. 6(1)(a));
• to keep the service secure - our legitimate interest (Art. 6(1)(f)).

Google user data

BookBaltic's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to show your availability on marketplaces and to add bookings to your BookBaltic calendar. We do not sell it, do not use it for advertising and do not use it to train AI models. People at BookBaltic do not read it, except with your permission, for security reasons or where the law requires it.

Who else receives data

• our hosting and database providers, who process data on our behalf;
• the marketplace a guest booked through, for that booking only;
• Google, if you connect Google Calendar;
• Google, for site analytics, if you accept analytics cookies.

We do not sell personal data.

How long we keep it

• connection requests: while we discuss the connection, and no longer than 12 months after our last contact if you do not connect;
• free/busy information: refreshed every few minutes and kept only as current availability; deleted when you disconnect;
• booking records: as long as accounting law requires for the related invoices;
• server logs: as long as our hosting provider keeps them, normally a few days;
• Google Analytics 4 data: 14 months.

Your rights

You can ask us for access to your data, its correction or deletion, to restrict or object to processing, and for a copy in a portable format. Where processing is based on consent, you can withdraw it at any time. Write to hello@bookbaltic.com. You can also complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija, www.dvi.gov.lv).

Changes

When this policy changes, we update it on this page and change the date above.