Placeholder: replace with a privacy policy reviewed by a qualified professional before launch.
It should describe what data is collected (contact details, booking details, payment status), why, retention periods, processors (for example Stripe and email providers), and how to exercise access and deletion rights.