Accept elastudio's agreements and publish your privacy notice

Where to find it

Open Settings (the cog at the bottom of the menu) and, under What members see, select Privacy and legal. The owner and admins can open it.

The page has two tabs:

• Documents for your members opens first: the privacy notice, booking terms, waiver and team notice, and their editor.
• Agreements with elastudio: elastudio’s agreements and the acceptance record, Who signs for the studio and the privacy contacts.

When elastudio’s agreements need the owner (the first acceptance or a new version), a notice shows above the tabs on Documents for your members too, with Go to Agreements with elastudio.

Who does what with members’ data

Your studio decides how members’ data is used: it is the controller. elastudio stores and handles the data for you: it is the processor (operador under Brazil’s LGPD, the Brazilian data protection law). The agreements set those rules.

Accept elastudio’s agreements

Open the Agreements with elastudio tab. Under Your agreements with elastudio you find the Terms of Service, the Data Processing Agreement (DPA), the Sub-processor list and, for studios in Brazil, DPA Annex 3: ANPD standard contractual clauses (in Portuguese). Select Read to open each one.

1. Under Who signs for the studio, fill in the Legal name of the business and the address, which must be in the studio’s country. In Brazil, CNPJ or CPF is required and checked; elsewhere a Business number is optional. Select Save studio details.
2. The owner ticks “I have read these documents and accept them on behalf of” the studio and selects Accept the agreements.

Only the owner can accept. Admins can fill in the details. Each acceptance is kept in the Acceptance record with the versions, date and who accepted; select Download record for a copy. When a document has a New version, the owner accepts again. elastudio does not take studios in the European Union, the United Kingdom or Quebec for now.

Sub-processor changes

At least 30 days before a new sub-processor takes effect, the owner gets an e-mail with what changes and when, and the Agreements with elastudio tab shows the notice (with a link to it from the other tab). To object, reply to that e-mail or write to privacidade@elastudio.app before that date.

Documents for your members

Open the Documents for your members tab (the one that opens first). You are responsible for telling members how you use their data. There are three documents for members: Privacy notice, Terms of booking and Liability waiver, plus the Privacy notice for your team.

1. Select Edit next to a document.
2. For the privacy notice and terms, select Start from elastudio’s template. It fills every language, with your studio’s name, legal name, tax number, address and studio e-mail (from About the studio) already in. The legal name, tax number and address come from Who signs for the studio on the Agreements with elastudio tab, so fill that in first; while it is incomplete the tab shows a note with a link to it. The waiver has no template.
3. Fill in or delete every item in square brackets, such as [STUDIO: …]. The editor counts what is left per language, and Publish stays off until nothing is left. Studios in Brazil must publish the privacy notice in Portuguese.
4. Use Preview, then Save draft or Publish.

Members read the privacy notice at your studio address followed by /privacy, without signing in, and the terms at /terms. They accept the terms and the waiver before their first booking. On a new version of either, tick Members accept this version again at their next booking when the change matters to them. Publish a privacy notice before members start booking.

Cookies on your booking pages

Your booking pages, the booking embed and the admin use only the cookies and browser storage they need to work, such as keeping someone signed in and remembering their language. There are no analytics or advertising cookies, so members are not shown a cookie banner. When a member pays, Stripe sets its own fraud prevention cookies. The full list is in elastudio’s cookie notice.

If you put the booking embed on your own website, your website’s cookie notice covers your site. You can say there that the booking embed keeps the member signed in with browser storage for up to 30 days and sets no analytics cookies.