Privacy Policy
Last updated 8 June 2026
Your privacy matters to us. This policy describes what personal information Book My Chair collects across our website and mobile app, how we use, share and protect it, and the choices and rights you have.
1. About this policy
Book My Chair is a two-sided booking marketplace for personal-care services in Australia. We connect customers with independent personal-care businesses ("centers") and the staff who work at them.
This Privacy Policy explains how we collect, use, disclose, store and protect your personal information, and the choices and rights you have. It applies to everyone who uses Book My Chair — customers, center owners and their staff, and customer-service users.
It covers all of the ways you interact with us, including our website at bookmychair.com.au, our mobile applications for iOS and Android, and any emails, SMS messages or other communications we send. Our website and mobile app share the same backend, so this single policy governs both.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). In this policy, "we", "us" and "our" refer to Book My Chair Australia, and "you" refers to the individual whose personal information we handle.
2. Information we collect
The personal information we collect depends on how you use the platform and whether you are a customer, a center owner, or a member of staff. We collect the following categories of information:
- Account and profile information — your name, email address, phone number and password. Customers may optionally add a date of birth, profile photo, and a service address for at-home bookings.
- Identity and verification information (centers and staff) — business name, ABN, business address, and the documents and details you provide so we can verify a center before it goes live.
- Booking information — the services you book, appointment times, the centers and staff you book with, notes you add for a provider, your booking and attendance history, and any loyalty rewards you earn or redeem.
- Payment information — we never store raw card numbers. Card details are tokenised and held by our payment processor, Stripe. We retain only the Stripe identifiers, transaction records and payout details (for centers) needed to process payments, deposits, balances and refunds.
- Location information — when you allow it, the location of your device or a location you enter, so we can show centers and availability near you. See "Location information" below.
- Images and uploads — photos you upload, such as a profile picture, or (for centers) business logos, venue photos, and staff or resource images.
- Communications — messages, enquiries, reviews, support requests and other content you send through the platform or to our team.
- Device and technical information — IP address, device identifiers, push-notification tokens, app version, operating system, browser type, and similar information collected automatically when you use the website or mobile app.
- Usage and analytics information — pages and screens you view, features you use, and interactions with the platform, collected to keep it secure and to improve it.
3. How we collect your information
We collect information in three main ways:
- Directly from you — when you create an account, complete your profile, make or manage a booking, contact us, write a review, or otherwise use the website or app.
- Automatically — when you use the website or app, through cookies, mobile SDKs, server logs and analytics tools, as described in "Cookies, analytics and similar technologies".
- From third parties — for example, when you sign in with Google we receive basic profile details (such as your name, email address and profile picture) from Google in accordance with the permissions you grant; and centers may provide information about a booking you made with them.
4. Cookies, analytics and similar technologies
On the website we use cookies and similar technologies to keep you signed in, remember your preferences, secure the service, and understand how the platform is used. In the mobile app we use equivalent technologies, such as device identifiers and software development kits (SDKs).
We use a privacy-focused product-analytics provider to measure and improve how the platform performs. This information is used in aggregate to understand usage trends; we do not use it to build advertising profiles, and we do not sell it.
You can control cookies through your browser settings, and you can reset or limit advertising identifiers and analytics through your device settings. Disabling some cookies or technologies may affect how parts of the platform work.
5. How we use your information
We use your personal information to:
- Create and manage your account, verify centers, and keep the platform secure.
- Process bookings, deposits, payments, balances, refunds and payouts, and send booking confirmations, reminders, receipts and other service messages.
- Operate the marketplace — for example, sharing your name and booking details with a center so it can deliver the service you booked, and enabling reviews and loyalty rewards.
- Provide customer support, resolve disputes, investigate and prevent fraud, and enforce our terms.
- Personalise your experience, including showing relevant centers and availability based on your location.
- Send marketing or promotional communications where you have consented, consistent with the Spam Act 2003 (Cth). You can withdraw consent at any time from your notification preferences or by using the unsubscribe option in the message.
- Comply with our legal, tax and regulatory obligations, and to establish, exercise or defend legal claims.
6. Communications and notifications
We may contact you by email, SMS and (on the mobile app) push notification. Service or transactional messages — such as booking confirmations, reminders, changes, receipts and security alerts — are part of providing the platform and cannot be opted out of while you hold an account, though you can turn off push notifications in your device settings.
Marketing communications are only sent where permitted, and every marketing message includes a simple way to opt out. Turning off push notifications or unsubscribing from marketing does not stop essential service messages.
7. Location information
To help you find centers and availability near you, the platform can use location information. On the website this may be derived from a location you type in or, with your permission, your approximate location. In the mobile app, precise location is only accessed when you grant the relevant permission.
You can change or withdraw location permission at any time through your browser or device settings. If you do, you can still use the platform by entering a suburb, postcode or address manually.
8. Messaging
Where in-app messaging between customers and centers is available, messages are transmitted over encrypted connections. During the current phase, message content may be accessible to Book My Chair for safety, moderation and dispute resolution. We are working toward end-to-end encryption in a future release.
9. When we disclose your information
We disclose personal information only as needed to run the platform, and never sell it. We may share it:
- With centers and their staff, so they can fulfil and manage your bookings and communicate with you about them.
- With service providers who help us operate the platform under contracts that require them to protect your information — including Stripe (payments and payouts), Google (sign-in and mapping), and our email, SMS, hosting and analytics providers.
- Where required or authorised by law, or to protect the rights, safety and property of Book My Chair, our users, or the public.
- In connection with a business sale, merger or restructure, in which case we will require the recipient to handle your information consistently with this policy.
10. Overseas disclosure
Some of our service providers store or process data outside Australia, including in the United States and other countries where they or their sub-processors operate. Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.
11. Data security
We protect personal information using technical and organisational measures. Information is encrypted in transit and at rest, access is restricted to staff and providers who need it to do their job, and our database enforces row-level security so users can only reach data they are permitted to see.
No method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security, and you are responsible for keeping your account credentials confidential.
12. Data retention
We keep your personal information for as long as your account is active and for a reasonable period afterwards to meet our legal, tax, accounting and dispute-resolution obligations, after which it is deleted or de-identified.
Some records — such as transaction and payment records — may be retained for longer where the law requires it.
13. Data breaches
We maintain procedures to detect, assess and respond to data breaches. If a breach involving your personal information is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.
14. Accessing and correcting your information
You can view and update most of your information directly from your account settings on the website or in the mobile app. You may also request access to, or correction of, the personal information we hold about you by contacting us.
We will respond within a reasonable time. If we decline a request, we will explain why and how you can seek a review, except where the law allows us not to.
15. Your choices and rights
You can:
- Update your profile, notification preferences and (where available) privacy settings at any time.
- Opt out of marketing communications while continuing to receive essential service messages.
- Control location, camera and notification permissions through your browser or device settings.
- Request deletion of your account. Some information may be retained where the law requires it, or where it is needed to complete a transaction or resolve a dispute.
16. Children's privacy
Book My Chair is intended for people aged 18 and over and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.
17. Third-party links and services
The platform may link to or rely on third-party services, such as Stripe, Google and the Apple App Store and Google Play. Their handling of your information is governed by their own privacy policies, which we encourage you to read. We are not responsible for the privacy practices of third parties.
18. App stores
When you download or use our mobile app, the relevant app store (Apple App Store or Google Play) may collect information about you in accordance with its own terms and privacy policy. That collection is outside our control and is not covered by this policy.
19. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you through the platform. Your continued use after a change means you accept the updated policy.
20. How to contact us and make a complaint
If you have a question about your privacy, want to exercise a right, or wish to make a complaint, contact us at info@bookmychair.com.au. We will acknowledge your complaint and aim to resolve it within a reasonable time.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, by phone on 1300 363 992, or by writing to GPO Box 5288, Sydney NSW 2001.
Questions about this document? Contact us at info@bookmychair.com.au.