Provider Documents

Provider Privacy Policy

Version 1.0 – April 2026

This Provider Privacy Policy explains how Katanbooking Ltd. (“Katanbooking”, “we”, “us” or “our”) processes Personal Data relating to activity providers, rental providers, tour operators, service providers, prospective providers, and other individuals, legal entities, or representatives that offer, intend to offer, or support the provision of services through the Katanbooking Platform, including users of the Provider Dashboard (collectively, “Providers” or “you”).

“Personal Data” means any information relating to an identified or identifiable natural person. This may include information that you provide to us directly, information generated through your use of the Katanbooking Platform, or information collected from third parties in connection with onboarding, verification, compliance, payments, fraud prevention, support, and platform operation.

Please note that information relating solely to a legal entity is not considered Personal Data unless it also identifies, or can reasonably be linked to, an individual, such as a director, owner, beneficial owner, authorised representative, employee, guide, instructor, contractor, or contact person.

This Privacy Policy has been drafted in the English language. Any translation is provided for convenience only. In the event of any inconsistency between the English version and any translated version, the English version shall prevail.

This Provider Privacy Policy should be read together with the Katanbooking Provider Terms and Conditions and any other policies, guidelines, schedules, or notices applicable to Providers from time to time.

1. Controller Details

The controller responsible for the processing of Personal Data described in this Provider Privacy Policy is:

Katanbooking Ltd. Akropoleos 82, 2nd Floor, Akropoli, 2012, Nicosia, Cyprus Company registration number: HE 435484

For privacy-related matters, data protection requests, or questions regarding this Provider Privacy Policy, you may contact us at: support@katanbooking.com

2. Data Processing Activities

The Personal Data that Katanbooking collects and processes depends on your relationship with us, your onboarding stage, the services you offer, the features you use, and applicable legal or operational requirements. Accordingly, different categories of Personal Data may be processed depending on the context.

In particular, Katanbooking processes Personal Data in connection with Provider onboarding, account creation, use of the Provider Dashboard, booking management, payments and payouts, communication with Customers, support services, verification and compliance processes, fraud prevention, analytics, and platform improvement. Such processing may involve both Personal Data provided directly by Providers and Personal Data generated through the use of the Platform.

Provider Onboarding

In the course of our cooperation with prospective or existing Providers, we may process Personal Data relating to you or to your designated contacts, representatives, employees, contractors, guides, instructors, managers, directors, owners, or other persons acting on your behalf. The purposes of this processing include communicating with you about the Katanbooking Platform, responding to inquiries, assessing potential cooperation, supporting onboarding, preparing and administering contractual arrangements, handling support matters, carrying out compliance checks, and maintaining the business relationship.

Where you personally enter into or intend to enter into a relationship with Katanbooking, this processing is generally necessary for taking steps prior to entering into a contract or for performing a contract with you, in accordance with Article 6(1)(b) GDPR. Where we process Personal Data of persons acting on behalf of a Provider, we rely on our legitimate interest in communicating with Provider personnel and administering the business relationship, in accordance with Article 6(1)(f) GDPR.

Registration and Provider Account Creation

In order to use the Provider Dashboard and offer services through the Katanbooking Platform, Providers may be required to create and maintain a Provider Account. During registration and account setup, Katanbooking may collect information that may contain Personal Data, including login information such as email address and password, contact information such as name, email address and telephone number, business role and authority to act for the Provider, financial and payout information such as bank details or other payment-related information, and business information such as public business name, legal business name, registered address, company registration number, VAT number, tax identification number, insurance details, licence or permit information, names of directors, owners, managers or authorised representatives, and other information reasonably required for onboarding, verification, compliance, and platform administration.

We use this information to create and manage your Provider Account, verify your eligibility to use the Platform, enable access to the Provider Dashboard, allow you to create and manage listings, and administer the contractual relationship between you and Katanbooking. The legal basis for this processing is Article 6(1)(b) GDPR. Where we are required to collect or retain certain information for tax, accounting, regulatory, reporting, anti-fraud, or compliance purposes, the legal basis is Article 6(1)(c) GDPR.

Where the information relates to a person acting on behalf of a Provider rather than to the Provider personally, we process that Personal Data based on our legitimate interest in managing access to the Platform and communicating with the Provider’s personnel, in accordance with Article 6(1)(f) GDPR.

Provider Dashboard and Platform Use

When you use the Provider Dashboard, Katanbooking may process information generated through your activity on the Platform. This may include account activity, login history, service listings, availability, pricing, booking settings, booking requests, confirmations, cancellations, refunds, payout status, messages, uploaded documents, support interactions, and other information connected with your use of the Platform.

This information is processed to operate the Platform, administer bookings, enable Provider–Customer transactions, support Customers and Providers, manage disputes, ensure platform integrity, and enforce applicable platform rules and contractual obligations. The legal basis is generally Article 6(1)(b) GDPR where processing is necessary for the performance of our agreement with you, and Article 6(1)(f) GDPR where processing is necessary for our legitimate interests in operating a secure, reliable, and commercially sustainable marketplace.

Communication via the Katanbooking Platform

Katanbooking may provide communication tools that allow Providers and Customers to exchange messages before or after a booking. Communications sent or received through the Katanbooking Platform may contain Personal Data and may be accessed, stored, reviewed, or analysed by Katanbooking where necessary for customer support, operational assistance, dispute resolution, fraud prevention, safety, compliance, or enforcement of platform rules.

This processing is necessary to support bookings and provide the services available through the Platform in accordance with Article 6(1)(b) GDPR. We may also process communications based on our legitimate interest in preventing misuse of the Platform, detecting attempts to circumvent the Platform, protecting Customers and Providers, investigating complaints, and maintaining the integrity of the marketplace, in accordance with Article 6(1)(f) GDPR.

Support Services

If you contact Katanbooking for support, or if we contact you in relation to your account, listings, bookings, payouts, disputes, verification, or compliance obligations, we may process the Personal Data included in support tickets, emails, phone calls, chat messages, documents, screenshots, or other communications.

This may include your name, contact details, role, account information, issue description, booking details, transaction details, technical information, and any other information you choose to provide. We process this information to respond to your request, investigate the issue, provide assistance, maintain accurate support records, and improve our services. The legal basis is Article 6(1)(b) GDPR where support relates to the performance of our agreement with you, and Article 6(1)(f) GDPR where processing is necessary for our legitimate interest in providing effective support and maintaining service quality.

Identity Verification, Business Verification and Fraud Prevention

To protect Customers, Providers, payment flows, and the integrity of the Katanbooking Platform, Providers may be required to complete identity, business, tax, payment, or compliance verification. Depending on your legal status, location, business model, and the services you offer, this may include verification of your legal business name, company registration number, VAT number, tax identification number, registered address, beneficial ownership information, bank account details, insurance documents, licences, permits, identity documents, and information relating to authorised representatives, directors, owners, or controlling persons.

Katanbooking may conduct such verification directly or through third-party verification, payment, compliance, or identity service providers. Where legally required, we may ask for your consent before processing certain categories of data. Where biometric verification or similar identity verification is used, we will apply the legal basis required under applicable law, which may include explicit consent under Article 6(1)(a) GDPR and, where applicable, Article 9 GDPR.

We may also process technical and device information, such as IP address, device type, browser, operating system, login activity, approximate location, and usage patterns, in order to detect fraud, prevent abuse, secure accounts, investigate suspicious activity, and protect the Platform. This processing is based on our legitimate interest in fraud prevention, platform security, and risk management, in accordance with Article 6(1)(f) GDPR.

Payment Processing and Payouts

In order to facilitate payments, refunds, chargebacks, commissions, payouts, and related financial operations, Katanbooking may process and share relevant Personal Data with third-party payment service providers, financial institutions, compliance providers, and other payment-related service providers. This may include business information, contact information, bank account details, payout information, transaction records, booking details, tax information, identity verification information, and information required by payment service providers for onboarding, compliance, fraud prevention, anti-money laundering checks, sanctions screening, and payout administration.

Katanbooking uses third-party payment infrastructure, including Stripe or any replacement or additional payment service provider used from time to time. The specific payment provider or payment flow may depend on your location, payout currency, payment method, technical requirements, compliance requirements, and the rules of the relevant payment service provider.

The legal basis for processing payment-related Personal Data is Article 6(1)(b) GDPR where processing is necessary to administer payments and payouts under our agreement with you. Where processing is required for tax, accounting, financial reporting, anti-money laundering, regulatory, or legal compliance purposes, the legal basis is Article 6(1)(c) GDPR. We may also process payment-related data based on our legitimate interest in fraud prevention, transaction security, chargeback management, and financial risk control, in accordance with Article 6(1)(f) GDPR.

Tax, Regulatory and DAC7 Reporting

Katanbooking may be required to collect, verify, retain, and report certain information about Providers and their activities on the Platform under applicable tax, reporting, and regulatory obligations, including DAC7 and its implementation into Cyprus law or other applicable laws.

This may include legal name, registered address, tax residence, tax identification number, VAT number, company registration number, date of birth for individual providers where required, bank account information, transaction amounts, payouts, commissions, booking volumes, and other data required by competent tax or governmental authorities.

The legal basis for this processing is compliance with legal obligations under Article 6(1)(c) GDPR. Where we verify or review information to ensure accuracy and reduce regulatory or financial risk, we may also rely on our legitimate interest under Article 6(1)(f) GDPR.

Surveys, Platform Updates and Marketing Communications

Katanbooking may use Provider contact information to send operational updates, platform notices, onboarding information, product updates, surveys, feedback requests, educational materials, and marketing communications relating to the Katanbooking Platform and related services.

We process such information based on our legitimate interest in developing the Platform, improving Provider engagement, promoting relevant services, understanding Provider needs, and improving the functionality and commercial performance of the marketplace, in accordance with Article 6(1)(f) GDPR. Where consent is required by applicable law for certain marketing communications, we will rely on your consent. You may opt out of marketing communications at any time by using the unsubscribe link, account settings, or by contacting us.

3. Recipients of Personal Data

Katanbooking may share Personal Data with third parties where this is necessary for the purposes described in this Policy, where required by law, or where we have another lawful basis for doing so.

We may share Personal Data with service providers that support the operation of the Katanbooking Platform, including hosting providers, cloud infrastructure providers, IT support providers, software providers, communication tools, customer support tools, analytics providers, security providers, marketing tools, verification providers, and other technical or operational service providers. These providers are required to process Personal Data only for the purposes specified by Katanbooking and in accordance with appropriate contractual safeguards.

Where relevant, we may also share Personal Data with banks, financial institutions, payment processors, or compliance providers specifically for payment-related, anti-money laundering, sanctions screening, fraud prevention, tax, accounting, or other legal and regulatory purposes.

We may share limited Provider information with Customers where necessary to facilitate bookings and service delivery. This may include the Provider’s public business name, meeting location, contact information where required for the booking, operational instructions, and other information necessary for the Customer to participate in the booked service.

We may disclose Personal Data to tax authorities, regulators, courts, law enforcement agencies, governmental bodies, or other competent authorities where required by applicable law, lawful request, court order, regulatory obligation, tax reporting obligation, fraud investigation, safety concern, or legal claim.

We may also share Provider Content, business information, listing information, and aggregated data or limited Personal Data with distribution partners, technology partners, mapping services, search engines, digital assistants, marketing partners, or integration partners where reasonably necessary to promote, display, distribute, improve, or technically operate services made available through the Katanbooking Platform. Where such information includes Personal Data, the sharing will be limited to what is necessary and will be carried out subject to applicable law and relevant contractual safeguards.

4. Information Collected from Other Sources

Katanbooking may collect Personal Data from sources other than you where this is necessary or appropriate for onboarding, verification, compliance, fraud prevention, business development, or platform operation.

For example, we may collect or verify business information from public registers, company registries, VAT databases, sanctions lists, licensing databases, insurance documentation, publicly available websites, professional profiles, social media pages, or third-party business information providers.

We may also receive information from payment providers, verification providers, Customers, authorities, courts, tax authorities, insolvency administrators, law enforcement agencies, or other third parties where such information is relevant to compliance, fraud prevention, dispute resolution, regulatory reporting, claims handling, or risk management.

Where you interact with Katanbooking through social media platforms or third-party communication channels, we may receive information made available to us through those platforms in accordance with your privacy settings and the policies of the relevant platform.

5. Data Retention

Katanbooking retains Personal Data for as long as necessary to manage the business relationship with the Provider, operate the Platform, facilitate services for Customers, comply with legal, tax, accounting, regulatory, and reporting obligations, prevent fraud, resolve disputes, handle claims, enforce contractual rights, and maintain appropriate business records.

The applicable retention period may vary depending on the type of data and the purpose of processing. Account and onboarding data will generally be retained for the duration of the Provider’s relationship with Katanbooking and for a reasonable period afterwards. Financial, tax, accounting, transaction, payout, and regulatory reporting data may be retained for the period required under applicable law, which may be up to seven years or longer where required by legal, tax, regulatory, dispute, or enforcement considerations.

Where Personal Data is no longer required, Katanbooking will delete it, anonymise it, or restrict its processing in accordance with applicable law.

6. Improvement, Analytics and AI-Based Platform Development

Katanbooking may use information provided by Providers and information generated through use of the Platform for analytics, testing, troubleshooting, quality control, product development, search optimisation, customer experience improvement, fraud prevention, and marketplace performance improvement.

This may include analysing service listings, booking patterns, customer interactions, availability, pricing, reviews, conversion data, support requests, dispute trends, and platform usage. Katanbooking may use such information to improve the functionality and quality of the Platform, enhance search and recommendation tools, support better matching between Customers and services, improve Provider dashboards, develop insights, and create, test, or improve AI-powered tools and other automated platform features.

Where possible and appropriate, Katanbooking uses aggregated or anonymised data for analytics, AI development, and platform improvement. However, certain product, security, compliance, and support activities may require processing Personal Data. The legal basis for this processing is Katanbooking’s legitimate interest in developing, securing, improving, and operating the Platform, in accordance with Article 6(1)(f) GDPR, unless another legal basis applies.

7. Tracking Technologies

Katanbooking may use cookies, pixels, server-side tracking, analytics tools, and similar technologies in connection with the Provider Dashboard, public website, marketing pages, and other digital services. These technologies may be used to enable core functionality, secure accounts, remember preferences, analyse usage, improve performance, understand how Providers interact with the Platform, and support relevant marketing or communication activities.

Where required by law, we will request consent for non-essential cookies or similar tracking technologies. Further information about the tracking technologies used by Katanbooking, and the options available to manage your preferences, may be provided in our Cookie Policy, Cookies and Marketing Preferences, website footer, browser settings, or other tools made available by Katanbooking from time to time.

8. International Data Transfers

Some recipients of Personal Data may be located outside the European Union or European Economic Area. Where Personal Data is transferred to a country that has not been recognised by the European Commission as providing an adequate level of data protection, Katanbooking will take appropriate steps to protect the data in accordance with GDPR.

Such safeguards may include the use of Standard Contractual Clauses approved by the European Commission, additional technical and organisational measures, or other lawful transfer mechanisms. Where applicable, further information about these safeguards can be obtained by contacting us using the contact details provided in this Policy.

9. Your Data Protection Rights

Subject to the conditions and limitations set out in applicable law, you may have the following rights in relation to your Personal Data.

You may have the right to request confirmation as to whether Katanbooking processes Personal Data concerning you and, where that is the case, to request access to such data. You may request correction of inaccurate or incomplete Personal Data. You may request deletion of Personal Data in certain circumstances, for example where the data is no longer necessary for the purposes for which it was collected, subject to legal retention obligations and other lawful grounds for continued processing.

You may have the right to request restriction of processing in certain circumstances, to object to processing based on legitimate interests, and to object at any time to processing for direct marketing purposes. Where processing is based on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Where applicable, you may have the right to receive Personal Data that you provided to us in a structured, commonly used, and machine-readable format and to transmit such data to another controller. You also have the right to lodge a complaint with a competent data protection supervisory authority.

To exercise your rights or ask questions about this Policy, you may contact us using the contact details provided in Section 12 below.

10. Automated Decision-Making and Right to Human Review

Certain verification, fraud prevention, security, payment, or compliance processes may involve automated tools or automated assessments. For example, identity verification, document validation, fraud screening, sanctions checks, payment risk assessment, account security checks, or similar processes may be supported by automated systems. Such automated processes are designed to support, and not replace, human decision-making.

Where biometric verification or identity verification is used, automated systems may assist in determining whether the information submitted can be authenticated or whether further review is required. If a decision is made solely by automated means and produces legal effects concerning you or similarly significantly affects you, you may have the right to request human review, express your point of view, and contest the decision, subject to applicable law.

If your Provider Account, verification status, payout functionality, or access to the Katanbooking Platform is restricted or denied as a result of an automated process, you may contact Katanbooking using the contact details provided in this Policy and request that the matter be reviewed.

11. Changes to this Policy

Katanbooking may update this Provider Privacy Policy from time to time to reflect changes in law, technology, platform functionality, business operations, payment arrangements, verification processes, or data processing practices.

Where changes are material, we will take reasonable steps to notify Providers, for example through the Provider Dashboard, email, or another appropriate communication channel. The updated version will apply from the effective date stated in the Policy or otherwise communicated to you.

12. Contact

For questions, requests, or concerns relating to this Provider Privacy Policy or the processing of Personal Data by Katanbooking, please contact:

Katanbooking Ltd. Akropoleos 82, 2nd Floor, Akropoli, 2012, Nicosia, Cyprus

Company registration number: HE 435484

Email: support@katanbooking.com