Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Bookboost is a hospitality Customer Data Platform (CDP) and unified inbox for hotels, used to centralise guest data, send marketing messages and operate live chat and chatbot interactions.
Bookboost is a hospitality first Customer Data Platform that gives hotels a unified inbox, marketing automation, and a chatbot. It connects to Property Management Systems and booking engines to centralise guest data, then deploys a JavaScript widget on the hotel website to chat with prospects, capture booking intent, and trigger personalised follow up messages. Because Bookboost handles guest identity and behavioural signals, the GDPR fully applies.
Bookboost sets first party cookies including bb_visitor (twelve months) and bb_session (session) to recognise returning visitors and link chat conversations to guest profiles. It also reads UTM parameters into bb_utm (thirty days). When integrated with marketing automation, the widget may set additional cookies tied to email and SMS campaigns.
For booking related communications and reservation management, the legal basis is contract performance (Art. 6(1)(b)). For marketing automation, personalisation, and behavioural tracking, the basis is consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy). Marketing emails or SMS to past guests require a separate Art. 13 ePrivacy consent or fall under the soft opt in for similar services.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Bookboost is headquartered in Sweden and hosts production data in EU regions (typically AWS Stockholm). Some sub processors used for support tooling may be outside the EEA; Standard Contractual Clauses cover those transfers. Confirm the up to date sub processor list with your account manager.
Sign a DPA with Bookboost, block marketing cookies until consent is captured, configure data retention in line with hospitality industry rules (typically two to seven years for reservation records), and use the segmentation features only on lawful audiences. Document consent for each marketing channel separately.
European hospitality CDPs include Hotelchamp, Revinate (with EU instances), and Salesforce Marketing Cloud Hospitality. Open source guest CRMs and direct email tools (Brevo, GetResponse) offer more granular control at the cost of integration depth.
Websites using Bookboost must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended when Bookboost is connected to a Property Management System, marketing automation, and analytics, because guest profiles are enriched at scale.
Sample consent text
We use Bookboost to manage messaging and guest communications. With your consent, Bookboost may set cookies to recognise you and send personalised marketing.
Third-party domains contacted
bookboost.ioapp.bookboost.iowidget.bookboost.ioCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| bb_visitor | first_party | 12 months | Pseudonymous visitor identifier for guest recognition |
| bb_session | first_party | Session | Session identifier for chat conversations |
| bb_utm | first_party | 30 days | Captures UTM parameters and attribution sources |
| bb_chat_state | first_party | 30 days | Stores chat widget state and conversation reference |
Bookboost places tracking cookies for advertising — comply with GDPR using FlowConsent.
First party cookies bb_visitor (twelve months), bb_session (session), bb_utm (thirty days), and bb_chat_state (thirty days).
Consent is required for marketing automation and tracking cookies. The booking related communications run on contract performance.
Contract for reservation related processing, consent for marketing and tracking, separate ePrivacy consent for marketing emails and SMS.
Primarily no. Data is hosted in the EU (Sweden, AWS Stockholm). Some sub processors may be outside the EEA under SCCs.
A DPIA is recommended when integrating Bookboost with PMS, marketing automation, and analytics at scale.
Sign a DPA, block marketing cookies until consent, configure retention, document each consent and channel separately.
Hotelchamp, Revinate (EU instances), Salesforce Marketing Cloud Hospitality, Brevo or GetResponse for direct email.
List the bb_ cookies with names, purpose, and duration. Mention bookboost.io and the related sub domains.