Privacy Policy

1. Scope

This policy explains how MyBookingApp handles personal information, consistent with the Australian Privacy Principles.

It covers merchants who use the platform, staff invited to a workspace, and consumers who book or buy through a merchant using the platform.

2. What we collect

Merchant details: business name, ABN, contact details, users and their roles.

Operational data you enter: clients, appointments, sales, invoices, stock and messages.

Technical data: log records, device and browser information, and security events.

We do not store raw payment card numbers. Card data is handled by regulated payment providers.

3. Why we collect it

To provide the service, process transactions, deliver notifications you request, provide support, meet legal and tax record-keeping obligations, and protect the platform from misuse.

We do not sell personal information, and we do not use your customer lists for our own marketing.

4. Merchants and their customers

Where a merchant uses the platform, the merchant is the entity responsible for their customers' personal information and we process it on their behalf.

Consumers who want their information corrected or deleted should contact the merchant directly. We will assist the merchant to action it.

5. Storage, location and security

Each business is pinned to a deployment region at sign-up, and Australian businesses are pinned to an Australian region.

Access is protected by row-level database isolation, role-based permissions enforced on the server, encryption in transit, and audit logging of sensitive access.

6. Disclosure

We disclose personal information only to service providers who help us run the platform (such as hosting, payment and messaging providers) under confidentiality obligations, or where required by law.

7. Marketing and consent

Marketing messages sent through the platform require recorded consent, honour unsubscribe requests immediately, and respect quiet hours.

Merchants are responsible for having consent before sending to their own customers.

8. Retention

Financial records are retained for the period Australian law requires. Other personal information is retained while your account is active and deleted after closure, subject to those legal retention periods.

9. Access, correction and complaints

Contact support@mybookingapp.au to access or correct your personal information, or to make a privacy complaint. We aim to acknowledge within five business days.

If you are not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner.

10. Changes

We will notify you in the app or by email before any material change to this policy takes effect.