A booking confirmation template should capture, at minimum, a unique reference number, the customer’s legal name, a specific description of what was booked with dates and times, an itemized price and payment status, the cancellation and refund policy, arrival or access instructions, and a contact line for questions. Federal rules shape a handful of those fields for certain industries, and how you deliver and store the document matters as much as what it says.
Identification and Service Details
Start with a unique booking reference number. Most reservation systems generate a six-character alphanumeric code, though longer strings work fine. What matters is that the code is unique and easy to read over the phone or paste into an email search.
Show the customer’s full legal name exactly as entered at checkout. A misspelled name or a nickname can cause real problems at check-in, especially where government-issued ID is required. If the booking was made for someone else, include both the purchaser and the guest.
Describe the reserved service with enough specificity that nothing is ambiguous. “Deluxe King Room, 2 nights” is useful. “Hotel stay” is not. Give exact dates and times for arrival, departure, or the start and end of the service. If the reservation includes add-ons, put each one on its own line so the customer can verify the details.
Pricing and Payment Breakdown
The financial section is where most disputes originate. Show the base price, then itemize each additional charge on its own line: taxes, service fees, resort fees, processing charges, and any other mandatory costs. A single lump sum invites suspicion; a labeled breakdown reduces chargebacks.
If you took a deposit at booking, show the amount paid and the method used. On the next line, show the remaining balance and when it is due. That two-line structure gives the customer a clear picture of what they still owe without making them do the math.
Total Price Rules for Lodging and Live Events
If you sell short-term lodging or live-event tickets, the FTC’s Rule on Unfair or Deceptive Fees requires that the total price you display include all mandatory fees, and that total must be the most prominent price the customer sees.1Federal Register. Trade Regulation Rule on Unfair or Deceptive Fees You can still itemize beneath it, but the all-in number comes first and stands out more than any subtotal. Shipping and government taxes may be excluded from the headline price, but they still must be disclosed clearly before the customer enters payment information.2Federal Trade Commission. Federal Trade Commission Announces Bipartisan Rule Banning Junk Ticket Hotel Fees Even if your industry falls outside the rule, drip-pricing the customer through checkout and springing fees on the confirmation reliably produces chargebacks.
Masking the Payment Card
Show the last four digits of the card so the customer can match the charge to their statement. Show no more. PCI Data Security Standards allow at most the first six and last four digits to be displayed, and even that fuller display is reserved for people with a legitimate business need.3PCI Security Standards Council. PCI DSS Quick Reference Guide On a customer-facing confirmation, last four is the safe choice.
Cancellation, Refund, and Change Terms
Put the cancellation policy in the confirmation itself, not buried in linked terms. State the deadline in plain language: “Cancel by 6:00 PM on March 10 for a full refund. After that, you forfeit 50% of the booking total.” Phrases like “cancellations subject to fees” invite arguments because each side can read them differently.
If you offer partial refunds, a credit toward a future booking, or no refund past a certain point, say so directly. Chargeback reviewers look for whether the cancellation terms were clearly communicated before payment, and a confirmation email carrying the policy in plain text is strong evidence.
One boundary worth flagging: the FTC’s Cooling-Off Rule gives buyers three business days to cancel without penalty on purchases over $25, but only for certain in-person sales made at the customer’s home or away from the seller’s normal place of business.4Federal Trade Commission. Cooling-off Period for Sales Made at Home or Other Locations It does not apply to most online or in-store bookings. If you sell vacation packages or event services at trade shows or home visits, the rule kicks in and you must provide a cancellation form at the time of sale.
Force Majeure
A force majeure clause releases either party when something genuinely uncontrollable makes the booking impossible to fulfill. Courts read these clauses narrowly and generally require the specific type of event to be named rather than left to a vague catch-all. A clause that says only “events beyond either party’s control” is weaker than one that names categories: natural disasters, government orders, pandemics, labor strikes, and infrastructure failures. Since 2020, most well-drafted clauses explicitly mention epidemics and public health emergencies.
Keep the clause short on the confirmation itself. One or two sentences naming the covered events and stating that either party may cancel or reschedule without penalty is enough. Link to full terms for notice requirements and documentation.
What the Customer Needs to Show Up
A confirmation that only covers money misses half its purpose. The customer also needs to know how to actually use what they booked.
Include the physical address with any details GPS may miss, such as a specific building entrance or a gate code. For virtual services, provide the access link along with any required software or login credentials. Give a specific check-in time. If check-in is at 3:00 PM, write “3:00 PM,” not “afternoon.”
List anything the customer must bring. Government-issued photo ID is the most common, but depending on the service you may need proof of insurance, signed waivers, specific clothing, or printed vouchers. Putting these requirements in the confirmation prevents the frustrating cycle of turning someone away at the door because they didn’t read a buried FAQ. Close with a direct phone number or email for pre-arrival questions.
Sending the Confirmation Electronically
Most confirmations go out by email within seconds of a completed transaction. If your system sends electronic-only confirmations with no paper option, the federal E-SIGN Act sets specific consent requirements. The customer must affirmatively agree to receive records electronically, and before they consent you must tell them they can request a paper copy, explain how to withdraw consent, and describe the hardware and software needed to access the record.5Office of the Law Revision Counsel. 15 USC 7001 – General Rule of Validity Most booking platforms handle this with a checkbox during checkout; if you built your own system, make sure that checkbox and its disclosures exist.
Attach a PDF version of the confirmation to the email. HTML email renders differently across devices and clients, and a PDF preserves the layout so the customer can print it or open it on their phone at check-in. An SMS with a short link to the same record works well as a backup, especially for day-of reminders.
Keeping the Email Transactional Under CAN-SPAM
A booking confirmation that only confirms the transaction counts as a transactional or relationship message under the CAN-SPAM Act and is exempt from most of the law’s requirements, including the unsubscribe link and physical postal address that commercial emails must carry.6Federal Trade Commission. CAN-SPAM Act: A Compliance Guide for Business The exemption holds only as long as the email’s primary purpose is to facilitate or confirm the transaction. Load the confirmation with promotional offers, discount codes for future bookings, or referral incentives, and the “primary purpose” test can shift toward commercial content, at which point the full CAN-SPAM requirements apply. Keep the confirmation purely transactional and send marketing in a separate message.
How Long to Keep the Records
Store every confirmation and its transmission record. If a customer disputes a charge eighteen months later, the confirmation email with its timestamp and attached PDF is your first line of defense.
The IRS does not set a single universal retention period. The baseline is three years for most business records, stretching to six years if there is a chance of underreported income and seven years if you have claimed a bad debt deduction. Employment tax records must be kept at least four years.7Internal Revenue Service. How Long Should I Keep Records For booking confirmations, three years from the transaction date covers the IRS baseline and most credit card chargeback windows. If you handle high-dollar reservations or operate in travel or hospitality, seven years is the safer choice.
Encrypt stored records that contain personal data or payment information. A breach exposing customer names, email addresses, and partial card numbers creates liability that far outweighs the cost of basic encryption on your storage system.