Privacy Policy — Rosenama

1. Who we are

Rosenama operates a marketplace that helps customers discover and book local businesses, and helps businesses manage listings and bookings. You can reach us at [email protected].

2. Who this Policy covers

This Policy applies to customers, business applicants and members, and visitors who use the Service. It does not cover websites or services of third parties that we do not control (for example, a business’s own site linked from a listing).

3. Information we collect

Account and profile

Email address, full name, and optional phone number.
Password (stored as a secure hash; we do not store plaintext passwords).
Email verification and password-reset related tokens or codes.
Role information (for example customer, business member, or platform admin).

Bookings

Booking details such as business, services, staff, schedule, notes, status, currency, and timezone.
Customer name, email, and phone snapshots associated with a booking so the business can fulfill it. These snapshots may remain with the booking record even if you later change or delete your account.

Reviews

Ratings, review text, display name, related service names, and your user identifier.

Business onboarding and portal

Business identity and contact details (name, address, phone, contact email, website, social links).
Location data (coordinates, suburb, country), currency, timezone, hours, services, and media (logo, cover, gallery, application photos).
Staff or member details you submit (such as name, email, phone, title, specialties) and membership roles.
Audit logs of certain business profile changes (who changed what and when).

Technical and security data

Session information via essential cookies used to keep you signed in.
IP address used for rate limiting and abuse prevention.
In-app notifications related to your account or business activity (typically retained for about 180 days).

4. How we use information

We use personal information to:

Provide, operate, and improve the Service (accounts, listings, bookings, reviews, media).
Communicate with you about verification, password resets, booking or application status, and support.
Share necessary booking details with the business you booked.
Secure the Service, prevent fraud and abuse, and enforce our Terms.
Comply with legal obligations and respond to lawful requests.

5. How we share information

We share information in these situations:

With the business involved in your booking or review, as needed to provide the Service.
With service providers (processors) that help us run the Service, under appropriate controls.
With professional advisors or authorities when required by law or to protect rights and safety.
In connection with a reorganization, merger, or sale of assets, subject to appropriate safeguards.

Processors we use today

We do not currently use advertising pixels or product analytics SDKs on the Service. If that changes, we will update this Policy.

Site fonts are self-hosted with our application and are not loaded from Google Fonts or other third-party font CDNs in your browser.

Amazon SES — transactional email (for example verification and password reset).
Cloudflare (including R2) — content delivery and media storage.
OpenStreetMap Nominatim and map tile providers — geocoding and map display for business locations.

6. Cookies

We use essential cookies, including a sealed session cookie, to authenticate you and keep you signed in across Rosenama domains. These cookies are necessary for the Service to function.

We do not currently set non-essential analytics or advertising cookies. Your browser may still request resources from third parties named above (such as map tiles) when you use those features.

7. Retention and deletion

We retain personal information for as long as needed to provide the Service, comply with law, resolve disputes, and maintain security and business records.

You may request account deletion where the product supports it, or by contacting [email protected]. Deletion may be limited if you have an active business membership. Booking snapshots and certain records may be retained so businesses and Rosenama can maintain accurate historical booking information.

Media assets may be soft-deleted and later purged according to our operational retention practices. Notifications are generally retained for about 180 days.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, update, or delete certain personal information, or to object to or restrict certain processing. To make a request, email [email protected]. We may need to verify your identity before fulfilling a request.

You can update some account details in the product. You can also control cookies through your browser settings; blocking essential cookies may prevent sign-in or other core features from working.

9. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from anyone under 16. If you believe we have collected such information, contact [email protected] and we will take appropriate steps to delete it.

10. International transfers

Rosenama and its processors may process information in countries other than where you live. For example, email may be sent via Amazon SES in the EU (eu-north-1), and media may be stored or delivered via Cloudflare’s global network. Where required, we take steps to protect information transferred internationally.

11. Security

We use technical and organizational measures designed to protect personal information, such as hashed passwords, encrypted session cookies in production, and access controls. No method of transmission or storage is completely secure; please use a strong unique password and protect your devices.

12. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date on this page. Continued use of the Service after an update means you acknowledge the revised Policy.

13. Contact

Privacy questions or requests: [email protected].