Privacy Policy

Welcome to Kleise Rantevou.

Kleise Rantevou is a Software-as-a-Service (SaaS) booking and business management platform operated by Andreou Innovations LTD. Our platform helps businesses create online booking pages, manage appointments, staff, services, business hours, notifications, and subscription access.

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use kleise-rantevou.com, related dashboard services, mobile applications, public booking pages, and associated business subdomains such as business-name.kleise-rantevou.com.

This policy applies to Business Owners, Staff Members, and Customers who book appointments through businesses using our platform.

In this Privacy Policy, "Business" means the business account using Kleise Rantevou, including the Business Owner and any authorized Staff Members acting on behalf of that business.

Under the General Data Protection Regulation (GDPR), our role depends on how the platform is used.

We collect different types of information depending on whether you are a Business Owner, Staff Member, Customer, or visitor using our website, dashboard, mobile app, or public booking pages.

We use personal data to provide, secure, operate, and improve Kleise Rantevou. Specifically, we may use personal data to:

Where GDPR applies, we rely on one or more legal bases depending on the context:

When a Business uses Kleise Rantevou to manage Customer bookings, client profiles, private notes, appointment notes, or Customer communications, the Business is usually responsible for having a lawful basis to collect, access, use, store, and manage that Customer or client data.

If a Business records identity-document information, health-related information, medical information, clinical information, treatment notes, or other special-category/sensitive information, the Business is responsible for identifying and documenting the appropriate lawful basis and any additional GDPR Article 9 condition, consent, professional duty, secrecy obligation, or legal requirement that applies to its own services.

Kleise Rantevou provides general client-management tools that Businesses can use for appointment management, customer service, and business administration.

Businesses are responsible for the content they and their authorized Staff Members enter into client profiles, booking comments, private client notes, private appointment notes, tags, custom fields, uploaded files, and similar areas of the platform.

Businesses must not use Kleise Rantevou to collect or store information that is unnecessary, excessive, unlawful, inaccurate, or unrelated to the services they provide.

Businesses should not enter government ID numbers, passport numbers, national identification numbers, health information, medical information, clinical information, treatment information, biometric data, criminal-offence data, or other sensitive/special-category information unless they have determined that it is necessary for their services and they have an appropriate lawful basis, transparency notice, consent where required, professional authority, retention rule, and security measures.

If a Business is a healthcare, physiotherapy, wellness, beauty, therapy, or similar provider and uses the platform to record health-related or treatment-related information, that Business is responsible for complying with all professional, ethical, medical, health-sector, confidentiality, retention, and data-protection obligations that apply to it in Cyprus, Greece, the EU, or any other relevant jurisdiction.

Kleise Rantevou may provide warnings, field labels, access controls, technical safeguards, and platform tools to support responsible use, but the Business remains responsible for deciding what client information is collected, why it is collected, who may access it, how long it is retained, and whether the Business has the required lawful basis and notices.

We may restrict, remove, suspend, or delete content or account access where we reasonably believe that the platform is being used unlawfully, abusively, insecurely, or in a way that creates unacceptable privacy, security, legal, or operational risk.

Each registered Business may receive a public booking page under a subdomain such as business-tag.kleise-rantevou.com.

Information displayed publicly may include the business name, description, services, prices, staff names, staff photos, location, contact details, social media links, website links, branding images, opening hours, and booking availability.

Each Business is responsible for ensuring that the information published on its booking page is accurate, lawful, and does not infringe the privacy rights, image rights, intellectual property rights, or other rights of Staff Members, Customers, or third parties.

If a Business displays Staff Member names, photos, schedules, or services, the Business is responsible for ensuring it has the appropriate permission or legal basis to do so.

Business Owner subscriptions are handled using third-party payment provider Stripe.

We do not store full card numbers or complete payment card details on our own servers. Stripe processes payment details securely. We may store billing-related identifiers and subscription metadata such as Stripe customer ID, Stripe subscription ID, plan type, subscription status, trial end date, current period end date, cancellation status, and payment status.

Customer appointment payments are not processed by Kleise Rantevou. Customers normally pay the Business directly during or after their appointment, depending on the Business's own payment policy.

If we later introduce additional paid features, plan limits, or billing options, we may process related subscription and billing metadata as needed to provide and manage those services.

Our platform may allow Businesses to send booking confirmations, reminders, service notifications, push notifications, email messages, and SMS messages to Customers.

Where a Business uses communication or marketing tools, the Business is responsible for ensuring that messages are lawful, accurate, and sent with the appropriate consent or legal basis where required.

Authorized Staff Members may be able to send or manage communications on behalf of the Business. The Business is responsible for ensuring that Staff Members use these tools lawfully and only for authorized business purposes.

Customers who no longer wish to receive marketing or non-essential messages from a Business should contact that Business directly. For platform-level messages from Kleise Rantevou, you may contact us at team@kleise-rantevou.com.

We do not sell personal data. We may share personal data with trusted third-party service providers only where necessary to operate, secure, and improve the platform.

These providers may include:

Service providers are expected to process data only as needed to provide their services and to apply appropriate security protections.

Some of our service providers may process or store data outside Cyprus or the European Economic Area (EEA).

Where personal data is transferred internationally, we rely on appropriate safeguards where required by law, such as adequacy decisions, Standard Contractual Clauses, contractual protections, or other lawful transfer mechanisms.

Because Kleise Rantevou uses cloud-based infrastructure and third-party service providers, data may be processed in countries where those providers operate, subject to applicable legal safeguards.

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include secure HTTPS connections, Firebase Authentication, token-based authentication, role-based access controls, restricted database rules, server-side authorization checks, access logging, rate limiting, and separation of sensitive subscription data from public business data.

However, no online service can guarantee absolute security. Users and Businesses are responsible for keeping login credentials secure and for controlling who has access to their business dashboard.

Business Owners are responsible for managing Staff Member access and removing access for Staff Members who should no longer use the business dashboard.

Depending on your location and the applicable law, you may have the right to:

You may request account deletion or data deletion at any time by visiting /delete-account or by contacting us at team@kleise-rantevou.com.

For security reasons, we may need to verify your identity, account ownership, business ownership, or booking details before completing a deletion, access, or correction request.

If you are a Customer who booked with a Business using Kleise Rantevou, the Business is usually the Data Controller for your booking data. You may still use /delete-account to contact us, but we may need to coordinate with or direct your request to the relevant Business where required. This may include the Business Owner or authorized Staff Members acting on behalf of the Business.

Kleise Rantevou is not designed for minors to independently create business accounts, manage dashboards, or enter into paid subscriptions.

Minors may be included in an appointment booking only where the booking is made or authorized by a parent, legal guardian, or responsible adult where required by law.

Where applicable law requires parental or guardian consent for the use of online services or the processing of a minor's personal data, the required consent must be obtained before the minor uses the platform or before personal data relating to the minor is submitted.

Businesses that provide services to minors are responsible for ensuring that their services, appointment process, customer communication, consent collection, and handling of minors' data comply with all laws that apply to their business and industry.

If we become aware that personal data relating to a minor has been submitted without appropriate permission where such permission is required, we may delete, restrict, or take other appropriate steps regarding that data.

We may use cookies, local storage, analytics technologies, and similar tools to operate the website, keep users signed in, remember preferences, secure the platform, measure usage, and improve performance.

Some cookies or similar technologies may be strictly necessary for the platform to function. Others, such as analytics or marketing-related technologies, may depend on your preferences or consent where required by law.

If we use non-essential analytics or marketing cookies, we may request consent or provide additional cookie controls where required by law.

You can request deletion of your Kleise Rantevou account or specific personal data at any time through our dedicated deletion page: /delete-account.

You may request:

Before completing a deletion request, we may ask for information needed to verify your identity, confirm account ownership, identify the relevant Business or booking, and prevent unauthorized deletion.

Once deletion is completed, access to the account, dashboard, booking page, business settings, staff records, services, availability, and related operational data may be permanently lost.

Customers who booked with a Business should also contact the relevant Business, because the Business is usually responsible for deciding how Customer booking data is handled. This may include the Business Owner or authorized Staff Members acting on behalf of the Business.

Some information may be retained where required or permitted by law, including billing records, invoices, tax records, subscription/payment history, fraud-prevention records, security logs, dispute records, or data needed to comply with legal obligations.

Data that has been anonymized or aggregated and can no longer identify you personally may be retained for analytics, reporting, security, or service improvement purposes.

If you have concerns about how your personal data is handled, please contact us first at team@kleise-rantevou.com so we can try to resolve the issue.

If you are located in Cyprus or the EEA, you may also have the right to lodge a complaint with your local data protection authority. In Cyprus, the supervisory authority is the Office of the Commissioner for Personal Data Protection.

Kleise Rantevou does not use automated decision-making or profiling that produces legal effects or similarly significant effects on users.

We may use analytics, security tools, rate limiting, usage statistics, fraud-prevention tools, and platform monitoring to protect, operate, and improve the platform, but these tools are not used to make legally significant automated decisions about users.

We may update this Privacy Policy from time to time to reflect changes in our platform, legal requirements, third-party services, or business operations.

When we make changes, we will update the "Last updated" date at the top of this page. If changes are material, we may provide additional notice where appropriate.

If you have any questions about this Privacy Policy or how we handle personal data, you can contact us using the details below.

Cyprus data protection authority: Office of the Commissioner for Personal Data Protection