Privacy Policy

Information we collect

The information we collect depends on how you use the Service.

• • Business owners: name, email address, phone number, business name and details, and account settings.
• • Guests: the name, email address, and optional phone number they provide at checkout, along with the booking details and any optional intake fields the business has configured.
• • Payment information: collected and processed by our payment provider, Stripe. We do not store full card numbers.
• • Technical data: device and browser information, IP address, and usage logs, primarily through Cloudflare, for security and to keep the Service working.

How we use your information

We use personal data to provide and operate the Service, including:

• • Creating and managing business owner accounts.
• • Creating bookings, sending confirmations and reminders by email or WhatsApp, and supporting reschedules and cancellations.
• • Processing payments and deposits through Stripe.
• • Providing support, detecting and preventing fraud or abuse, and improving the Service.

Payments

Payments are processed by Stripe. When you pay or collect payment, Stripe handles the transaction and your card details on its own systems. We never see or store full card numbers. Stripe’s use of your data is governed by its own privacy policy, available at stripe.com/privacy.

Third-party processors

We share limited data with trusted providers who help us run the Service:

• • Stripe — payment processing and subscription billing.
• • Our email provider — sending booking confirmations and notifications.
• • Cloudflare — hosting, content delivery, and security.

Data retention

We keep account information for as long as your account is active, and booking records for as long as needed to operate the Service, comply with legal or tax obligations, resolve disputes, and enforce our agreements. When you delete your account, we remove your account data in line with applicable law and backups may persist for a limited period.

Your rights

Under Malaysia’s Personal Data Protection Act 2010 (PDPA) you have rights to access, correct, and (where applicable) delete your personal data, and to withdraw consent where consent is the basis of processing. To exercise any of these rights, contact us using the details below. We will respond within the timeframes required by law.

Cookies and analytics

The Service uses essential cookies and similar technology for functionality and security. Our analytics are privacy-respecting and do not rely on cross-site advertising profiles.

Security

We use industry-standard safeguards including encryption in transit, access controls, and secure infrastructure provided by Cloudflare and our hosting providers. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

International transfers

Our infrastructure and third-party processors may store or process data outside Malaysia. Where this happens we rely on appropriate safeguards, and by using the Service you consent to such transfers to the extent permitted by law.

Changes to this policy

We may update this policy from time to time. We will post any changes on this page with a revised “Last updated” date. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Contact us

If you have questions or requests about this policy or your personal data, contact us at the address below.