Privacy Policy

Who we are

caralune is a booking platform and mobile app operated by Sant Limited (Christchurch, New Zealand) on behalf of the care centres you book with. The centre you book with is the data controller for your booking information; Sant Limited processes that data to run the platform. This policy covers the caralune website, booking forms and mobile app.

What we collect

• Account and contact details — your name, email address and phone number, used to create your account and sign you in with one-time codes.
• Booking details — the sessions you book, including details you choose to provide about the person attending (for example access or care needs), so the centre can deliver the session safely.
• Payment — payments are processed by Stripe. Card details are entered directly with Stripe; we never see or store your card number.
• Device identifiers — if you enable notifications in the app, a push token for your device; and technical identifiers needed to keep you signed in.

What we use it for

To take and manage bookings, process payments and refunds, send transactional messages (booking confirmations, reminders, invoices and sign-in codes), and give centre staff the information they need to run your sessions. We do not use your data for advertising, we do not track you across other apps or websites, and we never sell it. Push notifications are transactional only — no marketing.

Who we share it with

Your centre’s staff see the bookings you make with that centre. We use a small number of service providers to run the platform: Supabase (database and authentication, hosted in London, UK), Stripe (payments), Twilio (SMS sign-in codes) and Brevo (transactional email). Each processes data only on our instructions.

Your rights and choices

Under UK GDPR you can ask for a copy of your data, ask us to correct it, or ask for it to be deleted. You can delete your account yourself at any time in the app (Profile → Delete account) or from the customer portal — this runs a full erasure of your personal data, subject to records we must keep for legal or accounting reasons (for example invoices). Booking history needed by your centre for its own care records is retained under the centre’s policies.

Contact

Questions or requests: email jeewan@gmail.com or speak to your care centre directly. If you’re not satisfied with our response you can complain to the UK Information Commissioner’s Office (ico.org.uk).