Privacy Policy

Gobookka Pty Ltd ABN [pending] (“Gobookka”, “we”, “us”, “our”) operates the $Gobookka platform, a multi-tenant booking management service for Australian businesses and their customers. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Our Privacy Officer can be contacted at privacy@gobookka.com.

We collect the following categories of personal information:

• Business operators (tenants): business name, ABN, email address, business phone, billing and payout information (held by Stripe — we do not store card numbers).
• End-user customers:mobile phone number, name, email address (if provided), and any intake information collected by a business’s booking form (e.g., service address, vehicle registration, health or allergy notes).
• Technical data: IP address, browser type, and usage logs collected automatically for security and performance purposes.

We collect intake information on behalf of the business operator (the tenant). The tenant is responsible for informing their customers about the specific intake data they collect and why.

• To provide, operate, and improve the $Gobookka platform.
• To process and manage booking reservations.
• To send booking confirmations, reminders, and notifications via SMS and email.
• To process payments and calculate platform billing.
• To comply with Australian tax laws (GST, tax record retention).
• To detect, prevent, and respond to fraud, security incidents, or policy breaches.
• To contact you about product updates or relevant offers (you may opt out at any time).

All personal data is stored in AWS ap-southeast-2 (Sydney, Australia). We do not transfer personal data outside Australia without your consent or as required by law.

We use industry-standard technical controls including encryption in transit (TLS 1.3), encryption at rest (AES-256), access controls, and audit logging. Payment card data is processed exclusively by Stripe and never touches our servers (PCI-DSS SAQ-A compliant).

We retain booking and transaction records for 7 years to comply with the Income Tax Assessment Act and GST obligations. Other personal data is retained only as long as necessary for the purpose it was collected, or as required by law.

We do not sell personal information. We may share it with:

• Business operators (tenants): end-user personal information is visible to the business whose booking page you used.
• Stripe: payment processing and Stripe Connect. Stripe’s Privacy Policy applies.
• MessageMedia / Twilio: SMS delivery. Used only to send booking-related messages.
• Resend / AWS SES: transactional email delivery.
• Google (Firebase Analytics): usage analytics, only if you consentvia our cookie banner. Receives usage and device data (not your name, email, or phone). Governed by Google’s Privacy Policy. See our Cookie Policy to manage this.
• Law enforcement or regulators: where required by law, court order, or to protect the safety of individuals.

You have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or out-of-date information.
• Delete your account and personal information yourself, at any time — see section 7 below — or ask us to do it for you (subject to legal retention obligations).
• Opt out of direct marketing communications at any time.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you are not satisfied with our handling of your request.

To exercise any of these rights, email privacy@gobookka.com. We will respond within 30 days.

If you are in the European Union, EEA, or United Kingdom:we honour the rights granted by the GDPR and UK GDPR, including access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, and objection. The self-service deletion tools described in section 7 implement the right to erasure. Our legal bases for processing are the performance of our contract with you, our legitimate interests in operating and securing the platform, and — for analytics cookies only — your consent. To exercise any GDPR right, use the in-product tools or email privacy@gobookka.com.

Deletion is self-service — you do not need to contact us:

• Business operators:Settings → Delete business or account → “Delete this business”. Your booking page and API access go offline immediately, upcoming bookings are cancelled and your customers are notified. After a 7-day grace period (during which you can sign in and restore the business), all business data — bookings, customers, payments history, audit logs — is permanently and irreversibly erased.
• Team members:Settings → Delete business or account → “Delete my account” removes your login and team memberships immediately. If you are the only owner of an active business, you must delete the business (or add another owner) first.
• End-user customers: the business you booked with controls your booking records. Ask them to remove you, or email privacy@gobookka.com and we will coordinate the deletion.

Limited exceptions: records our payment processor (Stripe) must keep for financial compliance, and tax invoices already issued to customers, may be retained by those parties where the law requires it.

$Gobookka maintains a data breach response plan in accordance with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988. In the event of an eligible data breach, we will notify affected individuals and the OAIC as required by law.

We use session cookies strictly necessary for authentication and security. With your consent, we also use Firebase Analytics (Google Analytics for Firebase) to understand usage and improve the product — these load only after you accept our cookie banner and can be declined or withdrawn at any time. We do not use advertising trackers or sell behavioural data. Full details and controls are in our Cookie Policy.

We may update this Privacy Policy from time to time. We will notify tenant account holders of material changes via email. The current version is always available at gobookka.com/privacy.

Privacy Officer, Gobookka Pty Ltd
Email: privacy@gobookka.com
Address: Sydney, NSW, Australia