Legal

Privacy policy

Last updated: 8 October 2026

Who we are

This policy is issued by Pragmatict SRL, a Belgian company. We operate RDV24 at rdv24.be: mini-sites for Belgian businesses (for example restaurants, garages, and similar local trades), with a public showcase, optional online booking, and optional connection of the merchant’s Google Calendar.

We do not publish a company number, VAT number, or postal address on this website. For privacy requests, contact Pragmatict SRL, Belgium, through rdv24.be.

What this policy covers

It applies to rdv24.be, RDV24 mini-sites we host on dedicated rdv24.be subdomains, merchant admin access, and related booking or calendar features. Each merchant remains responsible for the content they publish on their own mini-site and for any legal notices they display to their visitors. This policy describes how we process data as the operator of the platform.

We are not ISO-certified, GDPR-certified, or otherwise independently certified for privacy or information security. This page is our description of current practice, not a certification claim.

What we collect

Depending on how the service is used, we may process:

• Account data for RDV24 administration: email address, name if provided, authentication details, and access status.
• Site content that a merchant stores for their mini-site: texts, photos, opening hours, services, menus, and similar material they choose to publish or keep in the admin area.
• Bookings made on an RDV24 site: typically the guest’s first and last name, phone number, email address, requested time, party size or service type, and any note they submit.
• Google Calendar tokens if a merchant connects Google: OAuth tokens, the Google account email and name shown at consent, and the identifier of the calendar they select. See the section below.
• Cookies and similar storage on vitrines (public RDV24 mini-sites): a necessary cookie and local storage so the page can work and remember the visitor’s cookie choice. Optional Google Fonts load only if the visitor accepts them. Optional audience measurement uses Google Analytics 4 (Google Ireland Limited) only after a separate consent; it is off by default and the Google tag is not loaded until that consent. Advertising storage stays denied. The visitor can withdraw consent at any time through the Cookies link on the mini-site.

We also process technical logs that hosting and our backend generate in the ordinary course of operating the service (for example request times and error messages), for security and to keep the product working.

Google Calendar

Google Calendar access is optional. A merchant connects it only if they choose to, by signing in with Google and granting access. We then store tokens so we can act on their behalf until they disconnect.

We access only the calendar the merchant chooses (or their primary calendar until they pick another). We use that access to create, update, and delete calendar events that correspond to their RDV24 reservations, and to list upcoming events so they can check that the connection works. Booking details such as guest name, phone, and email may appear in the event description so the merchant can see the reservation in Google Calendar.

We do not sell Calendar data or any other personal data. We do not use Google Calendar, Google user data, or booking data to serve advertisements, to build advertising profiles, or to train unrelated advertising models. We do not use Calendar access to read or copy a merchant’s calendar for any purpose other than operating and supporting that booking sync.

Pragmatict’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Why we process data

We process this information to provide the service the merchant or account holder asked for (contract), to operate, secure, and improve the platform (legitimate interests), and, for optional cookies such as Google Fonts and Google Analytics 4 audience measurement on vitrines, on the basis of consent. Booking confirmations are sent so the guest and the merchant can follow the reservation they made.

Processors

We use the following processors to run the service:

• Convex — application backend and database, including accounts, mini-site content, bookings, and stored Google tokens.
• Cloudflare — hosting, content delivery, and DNS for this website and RDV24 mini-sites.
• Google — OAuth consent and the Google Calendar API when a merchant connects Calendar.
• Google Ireland Limited — Google Analytics 4 audience measurement on a public mini-site, only after the visitor consents. Google may process the IP address to provide the connection; Google Analytics 4 does not store it. We do not enable advertising features (ad storage, ad user data, ad personalisation).
• Resend — email, including booking confirmations when email confirmation is enabled.
• Twilio — SMS booking confirmations when the merchant enables SMS confirmation and a phone number is provided.

These providers process data on our instructions to deliver the functions above. They are not a permission for us, or for them, to sell the data or to use Calendar data for advertising.

Retention

We keep account and mini-site data while the account or site remains active, and for a reasonable period afterwards if we must resolve a dispute, meet a legal duty, or restore a site the merchant still uses. Booking records are kept while they are needed to run the agenda and any linked calendar events, then deleted or anonymised when no longer required for those purposes.

Google tokens are kept until the merchant disconnects Google, the connection fails permanently, or the site is removed. Cookie choices on vitrines are stored for up to 180 days. You can change that choice through the Cookies link on the mini-site. Google Analytics 4 measurement data, when the visitor has consented, is kept for about 14 months.

Your rights (GDPR)

If we process your personal data, you may request access, rectification, erasure, restriction of processing, and data portability, and you may object to processing based on legitimate interests, in each case to the extent provided by the EU General Data Protection Regulation and Belgian law. Where processing is based on consent, you may withdraw consent without affecting the lawfulness of processing before the withdrawal.

You may also lodge a complaint with the Belgian Data Protection Authority (autoriteprotectiondonnees.be).

Guests who booked through a merchant’s RDV24 site may contact that merchant first using the details on the mini-site; we can also help if you write to us through rdv24.be.

Contact

Controller: Pragmatict SRL, Belgium, operating RDV24. Contact us through https://rdv24.be. Related terms of use: cgu.html.

Changes

We may update this policy when the product or the law changes. The date at the top of this page will change when we do. Continued use of the service after an update means the new text applies from that date.