forboka
Forboka Your data
How Forboka and businesses using it process personal data.
Privacy
For data relating to platform operations, business accounts, messages sent to Forboka, security and aggregated statistics, the controller is João Pedro Jesus Ferreira, sole trader, Portuguese tax number (NIF) 238677095, Rua de São Pedro, no. 17, 4405-785 Madalena, Portugal. Privacy contact: [email protected]. Each business receiving bookings is separately the controller for customer data processed to provide and manage its services.
Depending on how you use the service, we process names, email addresses, phone numbers, passwords stored in protected form, business name, Portuguese NIF associated with the business, account details, roles and access, services, staff, locations, booking and waitlist details, messages sent to our team, subscription identifiers and status, language, preferences and technical records needed for security. The NIF is required at registration, used to identify the business and prevent duplicate accounts, and remains linked to the account while it exists. Public pages may show business information selected for publication by the business. We do not request card details: subscription payments are made directly with Stripe. Avoid including sensitive data in text fields or contact requests. This also includes the accepted subscription Terms and Conditions version and acceptance date.
We use data to create and manage accounts, provide business pages and bookings, offer support, process subscriptions, protect the platform against fraud and abuse, and comply with legal duties. Processing is necessary to perform the contract or take steps requested before subscribing; security and service improvement rely on legitimate interests balanced against data subjects rights; where applicable, processing is based on consent, which can be withdrawn. Tax and accounting data are processed to meet legal obligations.
When you book a service, the selected business receives the data needed to manage the request and provide the service. That business determines how booking data is used and must provide its own privacy information and respond to requests about processing it controls. Forboka provides the system and processes those data on the business's behalf. For booking matters, first contact the business named in your confirmation; you can also contact [email protected] for forwarding or questions about platform operations.
Data may be processed by technical providers needed to operate the service, including OVHcloud hosting and email, Stripe payments, and Google reCAPTCHA and Google Maps only after permission. DM Sans and Fraunces are served locally and do not make requests to Google Fonts. Providers receive only data needed for their roles and may process information outside the European Economic Area subject to applicable legal safeguards.
We also keep the accepted Terms and Conditions version and acceptance date while the account is active and, after closure, only for as long as needed to handle subscription-related claims or meet legal duties, after which they are deleted or anonymised. We keep account data while the account is active and for as long as needed to manage closure, resolve claims and meet legal obligations. Booking data are kept by the responsible business for as long as needed for its customer relationship, history and legal obligations; the business can export, anonymise or delete data through the available tools. Contact messages are kept for as long as needed to reply and handle related matters. Internal statistics are aggregated by day, do not include IP addresses, and detailed records are deleted after 180 days. Statutory retention periods apply where relevant.
You may request access, rectification, erasure, restriction or portability, object to processing based on legitimate interests and, where processing is based on consent, withdraw it. Send requests to [email protected]; for booking data, contact the business that controls those data. You may also complain to the Portuguese Data Protection Authority (CNPD) at cnpd.pt. We will respond within statutory time limits and may request information to verify your identity.
We apply appropriate technical and organisational measures, including access controls, protected passwords, secure connections and backups. No internet-connected system can guarantee zero risk. Pages may contain links or services from third parties, subject to their own policies. This policy may be updated; the date below identifies the current version. For rights requests or questions: [email protected].
Last updated: 5 November 2026. Privacy policy version: privacy-v2.
We're available
The Forboka team can help with questions about the platform.