Privacy Policy

1. Who we are

Zolsu is a booking platform for yoga, wellness, workshop, class, event and retreat organisers. Our website is https://zolsu.com.

For privacy questions, contact us at hello@zolsu.com.

2. Information we collect

We collect information that is needed to create booking pages, process bookings, send emails, manage payments and keep the service working.

If you are an organiser, we may collect:

• your name;
• your email address;
• your Instagram handle or other contact details if you provide them;
• event information, including title, description, date, location, price and capacity;
• Stripe connected account status and payment related identifiers;
• support messages and technical information linked to your use of Zolsu.

If you are a customer booking an event, we may collect:

• your first name and last name;
• your email address;
• your phone number if you provide it;
• booking notes you choose to leave for the organiser;
• booking details, including the event, price, payment plan and booking status;
• Stripe payment identifiers and payment status.

We do not store full card numbers. Card payments are handled by Stripe.

3. How we use your information

We use personal information to:

• create and display booking pages;
• record bookings and booking status;
• send booking page, confirmation and booking notification emails;
• connect organisers to Stripe so they can receive payments;
• process payment status updates from Stripe;
• show organisers their booking dashboard;
• provide support and respond to messages;
• protect the service from misuse, fraud and technical problems;
• meet legal, tax, accounting and compliance requirements.

4. Our lawful bases

We use personal information under one or more lawful bases, depending on the situation.

• Contract: to provide booking pages, bookings, payment related features and organiser dashboards.
• Legitimate interests: to run, secure and improve Zolsu, support users, prevent misuse and keep records.
• Legal obligation: where we need to keep records or respond to lawful requests.
• Consent: where we ask for consent for a specific use, such as optional marketing.

5. Who we share information with

We only share information where needed to provide the service, process payments, send emails, host the platform, comply with law, or protect Zolsu and its users.

We may share information with:

• Stripe: for payment processing, checkout, connected account onboarding, fraud prevention and payout related services.
• Resend: for sending transactional emails.
• Supabase: for database hosting.
• Render: for website and application hosting.
• Organisers: when a customer books their event, the organiser can see the booking details needed to manage the event.
• Professional advisers or authorities: where required for legal, tax, compliance, safety or fraud prevention reasons.

6. Payments and Stripe

Payments are handled by Stripe. When you pay or connect a Stripe account, Stripe may collect and process personal information according to its own terms and privacy policy.

Zolsu stores payment status, Stripe identifiers and booking records, but does not store full card details.

7. Emails

We send service emails such as booking page links, booking confirmations, organiser notifications, payment status messages and support replies.

We may send marketing emails only where allowed by law. You can opt out of marketing emails, but we may still send service emails needed to provide Zolsu.

8. Cookies and analytics

Zolsu may use essential cookies or similar technologies to keep the website working and secure. If we add analytics, advertising or non essential cookies in the future, we will update this policy and provide any required choices.

9. How long we keep information

We keep personal information only for as long as needed for the purposes described in this policy.

Booking and payment records may be kept for as long as needed for customer support, organiser records, accounting, fraud prevention, tax, dispute handling and legal compliance. Support messages may be kept while needed to manage the issue and maintain accurate records.

If you ask us to delete information, we will do so where we can, unless we need to keep it for legal, accounting, security, dispute or legitimate business reasons.

10. International transfers

Some of our service providers may process information outside the United Kingdom. Where this happens, we rely on appropriate safeguards or lawful transfer mechanisms required by data protection law.

11. Security

We use reasonable technical and organisational measures to protect personal information. No online service can be guaranteed to be completely secure, but we work to reduce risk and limit access to information where possible.

12. Your rights

Depending on your location and the circumstances, you may have rights to:

• access your personal information;
• correct inaccurate information;
• ask for deletion;
• restrict or object to certain processing;
• receive a copy of your information;
• withdraw consent where we rely on consent;
• complain to a data protection authority.

To make a request, email hello@zolsu.com. We may need to verify your identity before acting on a request.

13. Complaints

If you are in the United Kingdom and are unhappy with how we handle your personal information, you can contact the Information Commissioner's Office. We would appreciate the chance to deal with your concern first, so please contact us at hello@zolsu.com.

14. Children

Zolsu is not intended for children to use without appropriate adult involvement. Organisers are responsible for setting age rules for their own events where needed.

15. Changes to this policy

We may update this policy from time to time. The latest version will be posted on this page.

Last updated: 30 May 2026