Effective date: 20th August 2025
Last updated: 2nd September 2025
These Terms of Service (the Terms) set out the agreement between CST Group Limited (we, us, our) and you, the person or organisation using BookingCalendar (the Service).
The Service lets you authorise us to add bookings automatically to a nominated Google Calendar that you control. Please read these Terms carefully. By using the Service you agree to them.
If you are a consumer, nothing in these Terms affects your legal rights. If you use the Service for business purposes, you confirm you have authority to bind the organisation you represent.
1. What the Service does
- You connect your Google Account and nominate one or more calendars to receive bookings.
- We then create calendar events that correspond to bookings you (or your systems) submit to the Service.
- We do not use your Google Calendar for any other purpose, and we aim to request the minimum Google permissions (scopes) needed.
- Shopify integration: If you install our Shopify app and connect your shop, you authorise us to read the minimum Shopify data needed to create bookings from qualifying orders. This may include order number/ID, line items (product/variant IDs, titles, quantities), booking-related options or metafields (such as the selected date/time/slot), and customer contact details you elect to include in the calendar event (e.g. name, email, phone). We do not edit your products or orders and we never use Shopify data for advertising or resale.
2. Your Google permissions and data
2.1 Scopes (permissions)
To function, the Service will request Google OAuth scopes that allow it to:
- view the list of calendars you’re subscribed to (to let you choose a calendar) – e.g. Calendar list (read only); and
- create and update events in the calendar(s) you nominate – e.g. Calendar events (write).
2.2 Limited Use and Google’s policies
We handle Google user data in line with Google’s API Services User Data Policy (Limited Use). In particular, we:
- use Google data only to provide or improve user‑facing features in the Service;
- do not sell Google user data;
- do not use Google user data for ads or marketing;
- do not allow people to read Google user data unless you ask us to, it’s necessary for security or compliance, or it’s required by law; and
- only transfer Google user data as permitted by Google’s policies and these Terms.
2.3 Tokens and storage
- We store OAuth tokens (and, if applicable, refresh tokens) to make authorised calls to the Google Calendar API.
- Tokens are stored securely and encrypted at rest.
- We keep only the minimum data needed to create and manage your booking events (for example: event IDs we created, calendar IDs you nominated, and operational logs).
2.4 Revoking access
You can remove the Service’s access to your Google Account at any time in your Google Account settings (Third‑party access). If you revoke access, the Service will stop functioning for that account.
2.5 Data deletion
If you disconnect the Service or ask us to delete your account, we will promptly delete stored tokens and any cached Google data. Records we must keep for legal, tax, or audit purposes may be retained as required by law.
2.6 Shopify data and permissions
To support bookings from your Shopify shop, the Service may request Shopify API scopes limited to reading orders and products, and (if needed) customers. We use them only to identify booking purchases and create the corresponding calendar events.
Data used: Order number/ID, order creation time, line items (product/variant IDs, titles, quantities), booking options or metafields (e.g. slot/date/party size), and—if you configure it—customer contact details to populate the event. We may read product titles, variant attributes, and booking-rule metafields to construct the event title, duration, or resource.
Storage: We keep minimal identifiers and mappings (shop domain, selected calendar, product/variant ↔ booking rule, order ID ↔ calendar event ID) and operational logs. We do not persist full order payloads unless you explicitly ask us during support.
Uninstall & deletion: When your shop uninstalls the app, we receive Shopify’s app/uninstalled webhook and promptly delete tokens and cached Shopify data within 7 days. Events already created in your Google Calendar remain until you remove them or ask the Service to do so.
No ads/no sale: We do not sell Shopify data, and we do not use it for advertising or marketing.
3. Your responsibilities
You must:
- use the Service lawfully and fairly;
- nominate calendars you control or have permission to use;
- ensure the booking details you submit are accurate;
- keep your account credentials secure and tell us promptly about any unauthorised use;
- if you use the Shopify integration, ensure you have a lawful basis to process your customers’ personal data in Shopify and to share relevant fields with the Service for booking purposes, and that your use complies with Shopify’s terms and policies.
You must not:
- misuse the Service (for example, by creating spam events);
- try to access data you’re not authorised to access;
- interfere with or disrupt our systems;
- attempt to reverse engineer or resell the Service.
4. Service availability and support
We provide the Service with reasonable skill and care. We don’t guarantee uninterrupted or error‑free operation. Planned maintenance and internet or provider outages may affect availability. Google may also change or limit its APIs, which can impact the Service.
Shopify API limits, policy changes, or outages may also affect availability of the Shopify features of the Service.
Support is available by contacting us.
5. Intellectual property
We (and our licensors) own all intellectual property rights in the Service. You own your data and the booking information you supply. You grant us a non‑exclusive licence to process your data only as needed to provide the Service.
6. Privacy
Our BookingCalendar - Privacy Policy explains how we collect and use personal data. It forms part of these Terms. Please read it carefully. Where these Terms say we will do something with personal data, the BookingCalendar - Privacy Policy explains the details.
7. Suspension and termination
We may suspend or end your access if:
- you breach these Terms;
- your use risks the security or integrity of the Service;
- we are required to do so by law or by Google; or
- the Google APIs we rely on are withdrawn or materially changed.
You can end your subscription or close your account at any time using the Delete Account option available under your Account Settings, or by contacting us. On termination we will stop providing the Service and delete tokens and cached Google data as described in section 2.5.
8. Liability
Nothing in these Terms limits liability that cannot be limited by law (including liability for death or personal injury caused by negligence, or for fraud).
If you use the Service for business purposes:
- we exclude all implied terms to the fullest extent permitted by law;
- we are not liable for loss of profits, revenue, goodwill, data, or for indirect or consequential loss; and
- our total liability for all claims in any 12‑month period is limited to the fees you paid for the Service in that period (or £100 if you use a free plan).
If you use the Service as a consumer, we are responsible for foreseeable loss and damage caused by us, but we are not responsible for loss that is not foreseeable. We only supply the Service for domestic and private use.
9. Changes to the Service or these Terms
We may update the Service and these Terms to reflect changes in law, regulation, security, or Google’s requirements, or to add or improve features. We will give you reasonable notice of any material changes. If you do not agree to the updated Terms, you should stop using the Service.
10. Third‑party services
The Service uses Google Calendar and related Google APIs. Google is not responsible for the Service. Your use of Google products remains subject to Google’s terms and policies.
11. Governing law
These Terms are governed by the laws of England and Wales. The courts of England and Wales will have exclusive jurisdiction, except that consumers resident in Scotland or Northern Ireland may bring proceedings in their local courts.
12. Contact and complaints
If you have questions or complaints, please contact us.
13. Definitions
- Google user data: data from your Google Account accessed via Google’s APIs using scopes you approved.
- Booking: an appointment, reservation, or similar entry that the Service turns into a Calendar event.
- Tokens: OAuth credentials (including refresh tokens) issued by Google to authorise the Service to call Google APIs on your behalf.