Privacy and cookies

Draft for review, 11 September 2026. Not approved for production. The outstanding items below must be resolved before publication or enabling production analytics.

Who is responsible?

Behrouz Hosseini, operating Bookora, is responsible for the marketing website processing described here. For privacy questions and requests, email info@bookora.dk.

This draft covers the marketing website and its request form. It is not a notice for tenant records, clinical journals, or customer bookings in the Bookora app.

Visits and optional analytics

With your consent, Google Analytics measures visits and interactions on the marketing homepage. The intended legal basis for optional analytics is consent (GDPR Article 6(1)(a)). Google Tag Manager loads the Analytics tags only after analytics consent. Rejecting analytics does not prevent submitting a request or using an account.

The measured actions are a page view, a pricing click, opening the app, starting the request form, and a successfully submitted request. Analytics includes browser and device information, language, location information, and cookie-based client and session identifiers. This information is not fully anonymous.

Bookora sends a fixed page title, the marketing origin instead of a detailed page address, and an empty referrer. Form contents, email addresses, phone numbers and clinical records are not included in Bookora's analytics events. App and embedded booking pages do not load this tracking. Homepage visits containing query parameters are excluded.

Google signals and user-provided data collection are disabled. No Bookora account User-ID is sent. Ads personalization is disallowed in every region, advertising consent remains denied, and this release contains no Google Ads conversion or remarketing tags. Granular location and device collection remains enabled in Analytics.

Storage and retention

Consent preference: bookora.consent.v1

Necessary local storage on this website records your choice and its timestamp for 180 days. Choices are not shared across subdomains. If storage is unavailable, the choice lasts only for the current page.

Google Analytics cookies: _ga and _ga_*

Optional first-party cookies distinguish browsers and maintain session state. Their default lifetime can be up to two years and may be renewed on activity. Browser restrictions may shorten this. Cookie lifetime is separate from Analytics data retention and must be checked against the final deployed tag settings.

Analytics event data

The configured event-data retention period is 2 months.

Analytics user data

The configured user-data retention period is 14 months. Reset on new activity is enabled, so later activity can extend the retention period for that user's identifier. These controls do not affect most standard aggregated reports.

Your choices

Use Cookie Settings on the marketing homepage to accept analytics, reject optional storage, or withdraw consent. Withdrawal stops future Bookora analytics collection and removes accessible Analytics cookies; it does not itself delete data already received by Google. Advertising cookies accessible to this site are removed in this analytics-only release. Cookies on other domains or inaccessible to scripts cannot be removed by this page.

Return to Bookora to change Cookie Settings. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

Requests sent to Bookora

The request form stores the business name, contact name, email address and any optional details you supply in Bookora's database for review by platform administrators. Form submissions are not delivered to an internal email inbox. This is separate from optional Analytics. Do not include patient information, health data or other sensitive information in the form.

For enquiries that do not become customers, our policy is to delete the enquiry and related emails no later than six calendar months after the last meaningful contact, and sooner when they are no longer needed. Automated reminders or internal activity do not restart that period. A specific legal obligation or dispute may require limited longer retention, with the reason and review date documented. This is Bookora's policy, not a universal EU maximum.

Pending rollout and review: the database deletion job must be verified and enabled before publication. It excludes documented legal holds and converted customer records, which require a separate retention policy. Confirm backup and restore handling, deletion of any older related emails, legal basis, hosting recipients, transfers and operational-log retention. Approval alone does not create a customer account; account activation messages belong to the separate onboarding process.

Recipients and international processing

Google receives Analytics requests when you consent. Google processing may take place outside the EEA. The applicable Google contracting entity, processing terms, account sharing settings and transfer safeguards must be confirmed before production activation; this draft does not claim that an agreement or transfer review has been completed.

See Google's privacy information and Google's retention explanation. These do not replace Bookora's own disclosures.

Your rights

Depending on the processing and applicable conditions, you may request access, correction, erasure, restriction or portability of your data, and object to processing. You may withdraw consent at any time. Contact info@bookora.dk to exercise your rights. You may complain to Datatilsynet or your competent data protection authority.

Before this draft is approved

Confirm any additional controller contact/address disclosures, enquiry and log handling, processors and transfers, final cookie settings, and the separate app privacy information. Complete owner and appropriate legal review. Production analytics remains disabled until release approval.