When an approval notification is automatically sent to a customer, the email does NOT display the staff member’s address.
However, if the customer replies to that notification, their response is directed ONLY to the staff member, leaving the Admin completely out of the conversation.
If the customer selects Reply All, then both the staff member and the Admin are included.
Similarly, when a staff member receives an approval notification for a booking, replying sends the message directly to the customer, and the Admin is included only if the staff member chooses Reply All.
This creates a significant PRIVICY CONCERN, as staff members may gain access to sensitive information they should not see or use. This exposure could lead to inappropriate or unethical behaviour.