Privacy Policy

Effective date: 14 Mar 2026

This Privacy Policy explains how Bookky collects, holds, uses and discloses personal information when you use the Bookky website, platform, booking pages, software and related services.

In this Privacy Policy, Bookky, we, us and our refer to the Bookky business.

We are committed to handling personal information in accordance with applicable Australian privacy law, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles, to the extent they apply.

1. What This Policy Covers

This Privacy Policy applies to personal information we collect from:

• business users who sign up for and use Bookky;
• customers who make bookings through Bookky-hosted booking pages; and
• visitors to our website and pages that interact with Bookky services.

By using Bookky, you acknowledge that your personal information will be handled in accordance with this Privacy Policy and, where applicable, our Terms and Conditions.

2. What Personal Information We Collect

The personal information we collect depends on how Bookky is used.

We aim to collect only the minimum personal information reasonably necessary to operate, secure and support the Bookky services. We do not intentionally collect additional personal information from business users or their customers unless it is needed for the functions of the services or the relevant booking workflow.

Business user information

We may collect information from business users such as:

• business name;
• ABN;
• email address;
• phone number;
• business schedule, booking availability and service details;
• account identifiers, authentication-related information provided through Auth0 as our identity provider, and account settings, although we do not store passwords directly; and
• payment and subscription-related information, although card payment details are generally handled by our payment provider rather than stored directly by us.

Customer booking information

When a customer makes a booking through a Bookky-powered booking page, we may collect:

• name;
• phone number where provided;
• email address where provided;
• appointment and booking details;
• notes or other information requested by the relevant business; and
• any custom booking information that a business chooses to collect through its booking form.

Website and usage information

We may also collect technical and usage information such as:

• IP address;
• browser type and device information;
• pages viewed and actions taken on our website or booking pages;
• dates and times of access; and
• analytics and performance data collected through cookies, tags and similar technologies.

Sensitive information

We do not intentionally require individuals to provide sensitive information through the website or standard account sign-up process.

Depending on how a business user configures its booking form, booking information submitted through Bookky may include information that could be regarded as sensitive information under applicable law. Business users are responsible for ensuring they only collect sensitive information where reasonably necessary and permitted by law, and for providing any required notices and obtaining any required consents.

Where a business user can customise the information requested through a booking form, Bookky does not require unnecessary fields by default and does not intentionally seek additional customer data beyond what the business user chooses to request for its booking process.

3. How We Collect Personal Information

We collect personal information in a number of ways, including when:

• a business user creates or updates a Bookky account;
• a business user signs in or authenticates through Auth0;
• a business user configures booking pages, schedules or services;
• a customer submits a booking request or otherwise interacts with a Bookky booking page;
• you contact us with an enquiry, support request or complaint;
• you use our website, platform or booking pages; and
• information is provided to us through integrated third-party services.

We generally collect personal information directly from the individual concerned, or from the business using Bookky on whose behalf the booking data is submitted. We may also receive account and authentication-related information from Auth0, and technical or usage information from our service providers and analytics providers.

4. If You Do Not Provide Personal Information

If you do not provide the personal information we request, we may not be able to:

• create or maintain your account;
• authenticate you and provide secure access to the platform;
• process bookings or make booking pages function as intended;
• provide customer support or respond to enquiries properly; or
• deliver some website or platform features.

You can choose not to provide optional information, but doing so may limit your use of some features or reduce the information available to the relevant business user.

5. Why We Collect, Hold and Use Personal Information

We collect, hold and use personal information for purposes including:

• create and manage Bookky accounts;
• authenticate users and secure access to Bookky;
• provide the Bookky platform and booking functionality;
• publish and operate booking pages for business users;
• manage appointments, schedules and customer booking records;
• process subscription payments and administer billing;
• provide support, troubleshoot issues and maintain service performance;
• improve the functionality, reliability and security of Bookky;
• analyse website and platform usage;
• detect, prevent and investigate fraud, misuse and security incidents;
• comply with legal obligations; and
• enforce our terms, policies and legal rights.

6. Booking Data and Business Users

Where customer booking information is collected through a Bookky booking page, that information is collected so the relevant business can manage appointments and communicate with its customers.

In many cases, Bookky handles customer booking information on behalf of the business that uses our platform. That business is generally responsible for how it uses customer information in its own operations, including giving any notices and obtaining any consents required under applicable privacy laws. As described in our Terms and Conditions, Bookky acts as a software platform provider and is generally not a party to the underlying service arrangement between a business user and its customer.

Business users are responsible for configuring their booking forms and workflows in a way that is lawful and appropriate for their services, including only collecting personal information that is reasonably necessary for their business purposes.

We expect business users to apply a similar data-minimisation approach when configuring Bookky, so customers are only asked to provide information reasonably needed to arrange, manage or communicate about a booking.

7. Disclosure of Personal Information

We may disclose personal information to third parties where reasonably necessary to operate Bookky, including to:

• identity and authentication providers, including Auth0;
• payment service providers, including Stripe;
• cloud and hosting providers, including Microsoft Azure;
• database and infrastructure providers, including MongoDB Atlas;
• analytics and tag management providers, including Google Analytics and Google Tag Manager;
• IT, security, support and professional advisers;
• regulatory authorities, law enforcement agencies, courts or government bodies where required or authorised by law; and
• a buyer, investor or successor in connection with a business sale, restructure, merger or asset transfer.

We do not sell personal information.

8. Overseas Disclosure and Storage

Bookky uses cloud and technology providers that may store or process personal information outside Australia.

This means personal information may be disclosed to or stored in countries outside Australia, including countries where our service providers operate data centres, support teams or infrastructure. These countries are likely to include the United States and may include other jurisdictions used by providers such as Auth0, Azure, MongoDB Atlas, Stripe and Google.

Where overseas disclosure occurs, we take reasonable steps to ensure our service providers are engaged on appropriate privacy and security terms, but the privacy laws of those countries may differ from Australian privacy laws.

Where login and authentication services are provided through Auth0, relevant account and authentication-related information may also be processed in jurisdictions where Auth0 and its sub-processors operate.

9. Cookies, Analytics and Tracking Technologies

Bookky uses cookies, tags and similar technologies to operate and improve the website and platform.

We currently use website analytics tools including Google Analytics and Google Tag Manager. These tools help us understand website traffic, user behaviour, page performance and overall service use.

These technologies may collect information such as:

• IP address;
• device and browser information;
• pages viewed;
• session activity; and
• referral and interaction data.

You can usually control cookies through your browser settings. However, disabling some cookies may affect website functionality. Where required, we will rely on applicable consent settings or other lawful mechanisms for the use of non-essential tracking technologies.

10. Security of Personal Information

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

Those steps may include:

• restricted access controls;
• password and authentication protections;
• use of reputable cloud infrastructure providers;
• monitoring and logging for security and fraud prevention; and
• administrative and technical safeguards appropriate to the nature of the information we hold.

No system is completely secure, and we cannot guarantee the absolute security of personal information transmitted over the internet or stored in digital systems.

11. Retention of Personal Information

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• provide the Bookky services;
• maintain business and booking records;
• resolve disputes;
• enforce our agreements; and
• comply with legal, accounting and regulatory obligations.

When personal information is no longer reasonably required, we may delete, destroy, de-identify or anonymise it, subject to any legal or operational retention requirements. Backup copies and archived records may be retained for a limited period as part of ordinary business continuity, security and record-keeping processes.

12. Access and Correction

You may request access to personal information we hold about you, and you may request correction of information that is inaccurate, out of date, incomplete, irrelevant or misleading.

We may require verification of identity before responding to a request.

In some cases, we may refuse access or correction where permitted by law. If we do, we will provide reasons where required.

To request access or correction, contact us using the details below. We will respond within a reasonable period and in accordance with applicable law.

13. Complaints

If you believe we have mishandled your personal information, you may make a privacy complaint by contacting us.

Please provide enough detail for us to understand and investigate the issue. We will review the complaint and respond within a reasonable time.

If you are not satisfied with our response, you may be able to lodge a complaint with the Office of the Australian Information Commissioner.

14. Third-Party Sites and Services

Bookky may contain links to third-party websites or rely on third-party services. We are not responsible for the privacy practices, content, availability or security of those third-party websites or services. You should review their terms and privacy policies separately.

15. Children

Bookky is intended for business and booking use and is not directed to children as a primary audience. We do not knowingly collect personal information from children except where it is provided as part of a booking or related business interaction by a parent, guardian or business user.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published on this page with a revised effective date.

Your continued use of Bookky after an updated Privacy Policy is published indicates your acceptance of the updated policy.

17. Contact Us

If you have questions, requests or complaints about this Privacy Policy or how we handle personal information, please contact us at:

• Email: bookky.business@gmail.com
• Web: https://bookky.com.au/feedback