Privacy Policy

Last updated: 30 September 2026

Who we are

myBooking is operated by Daeb Corp Pvt. Ltd. ("we", "us" or "our"). This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit https://mybooking.software/, use our booking platform, register a business or contact us.

It also explains how you can request access to or correction of your information and raise a privacy concern. We handle personal information in accordance with the privacy laws that apply to our activities, including the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles where applicable.

Information we collect

The information we collect depends on how you use myBooking. It may include:

• Account and contact information: your name, email address, telephone number, account credentials and communication preferences.
• Booking information: the business and service selected, appointment date and time, booking history, cancellations and information you provide in connection with a booking.
• Business information: business names, contact people, service listings, staff details relevant to appointments and information needed to administer a business account.
• Payment and billing information: billing details, amounts, transaction references, payment status, refunds and information needed to investigate payment issues. Payment handling is explained below.
• Communications: enquiries, support requests, feedback, reviews and messages you submit to our chat features.
• Technical and usage information: IP address, browser and device information, activity logs, pages visited and country or location preferences. If a feature requests precise device location, you can choose whether to grant the relevant permission.

Only provide information about another person, including a child, if you have authority to do so and any required consent. Please avoid entering unnecessary sensitive information, such as medical details, into booking notes or general chat. If a feature requires sensitive information, we will explain why it is needed and obtain consent where required by law.

How we collect information

We collect information directly when you create an account, make a booking, register a business, complete a form, submit a review or contact us. We also collect technical information through the operation of the website and the technologies described below.

We may receive information from a participating business that manages your booking, someone authorised to act for you, or a payment or technical service provider supporting your use of the platform.

You can make a general enquiry without identifying yourself where practical. We need sufficient contact and booking information to provide an account, arrange an appointment or investigate an account-specific issue. If required information is not provided, we may be unable to supply that service.

Why we use information

We use personal information to:

• create and administer customer and business accounts;
• arrange and manage bookings and communicate with the selected business;
• send confirmations, reminders, service updates and responses to enquiries;
• support payments, refunds, billing and payment disputes;
• operate, maintain and improve the platform and resolve technical issues;
• investigate misuse, manage security and prevent fraud;
• send marketing communications where permitted by law and consistent with your choices; and
• maintain necessary business records and comply with applicable legal obligations.

Sharing information

When you book or enquire about a service, we share the information reasonably needed for that interaction with the relevant business. This can include your name, contact details, appointment details and booking notes.

We also disclose information where reasonably necessary to providers that support our hosting, communications, payments, customer support and other platform operations. Other recipients may include professional advisers and authorities where disclosure is required or authorised by law. Information may be disclosed as part of a proposed business sale or restructure, subject to applicable law and appropriate confidentiality arrangements.

Participating businesses are responsible for their own handling of personal information. Their privacy policies may apply to information they collect or retain about your appointment. This policy describes Daeb Corp Pvt. Ltd.'s handling of information, including information processed through myBooking.

Payments

Where online payments are available, payment information is processed through the payment provider used for the relevant transaction. We use transaction information to administer bookings, reconcile payments, handle refunds and investigate payment disputes.

Payment provider and privacy notice: Online payments on myBooking are processed through certified, PCI-DSS compliant payment gateways depending on your region and booking currency, including Stripe, Razorpay (see their respective privacy policies linked).

Payment information held by myBooking: myBooking does not collect, receive, or store your full credit or debit card numbers, expiration dates, or CVV/CVC security codes. All payment card information is submitted directly to our PCI-DSS compliant payment partners via tokenized encryption. myBooking only stores non-sensitive transaction tokens, masked card identifiers (such as the card brand and last 4 digits for customer receipts and booking verification), transaction timestamps, amounts, and settlement statuses necessary to manage bookings, confirm appointments, and process authorized refunds.

Do not send full payment-card details or card security codes through general email, booking notes or chat.

Cookies and similar technologies

We use cookies and similar technologies to support website functions such as account sessions, language or country preferences and security. Depending on the technologies enabled, other tools may measure website use or support advertising.

Additional tracking technologies and controls: myBooking utilizes only strictly necessary first-party cookies to support core platform functionality, including authenticated sessions, security CSRF protection, country/currency discovery, and language preferences. We do not use third-party behavioral advertising or cross-site tracking cookies. You can manage or block cookies through your browser settings; however, disabling essential cookies may impact account sign-in or booking capabilities.

You can manage cookies through your browser settings. Blocking essential cookies may affect sign-in or booking functionality. Where consent is required for a technology, it will be requested before that technology is used. This policy does not itself provide consent for optional tracking.

Chat features

Messages you submit through a chat feature are processed to respond to your enquiry or help you find relevant services. Keep messages limited to what is needed for your enquiry.

Chat processing: Our customer assistance chat feature uses a dedicated AI service to help visitors discover salons and answer booking questions in real time. Messages are processed securely to provide immediate replies and are retained temporarily (up to 24 hours for guest users and up to 14 days for authenticated account holders) solely for customer service continuity. Chat interactions are never sold or used to train public third-party AI models.

Marketing choices

You can opt out of our marketing messages using the unsubscribe method in the message or by contacting us. Opting out of marketing does not stop essential messages about your bookings, account, security or transactions.

If a participating business sends you its own marketing, use its unsubscribe process or contact it directly. We can assist with enquiries about information shared through myBooking.

Storage and overseas recipients

Personal information is held electronically in the systems used to operate myBooking and by service providers supporting the platform. Service-provider arrangements may involve storage or access outside Australia, including technical support access.

Countries of overseas recipients: Our primary website hosting and databases are hosted on Amazon Web Services (AWS) in the Asia Pacific (Sydney, Australia) region. Service-provider arrangements supporting messaging, cloud infrastructure, maps, and payment services may involve storage or technical access in Australia, the United States (e.g. AWS, Stripe, Twilio, Google Maps), and India (e.g. Razorpay, Cashfree). All cross-border disclosures are governed by strict confidentiality agreements and privacy safeguards consistent with the Australian Privacy Principles.

Where Australian privacy law requires it, we take reasonable steps before disclosing personal information overseas to ensure that the recipient handles it consistently with the Australian Privacy Principles, unless a lawful exception applies.

Security and retention

We take reasonable steps to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure. We limit access to people who need it for their role and apply safeguards appropriate to the information and systems involved. No online service can guarantee absolute security.

We retain information for as long as reasonably needed for the purposes described in this policy, including managing bookings and accounts, resolving disputes and meeting legal recordkeeping requirements. When information is no longer needed, we take reasonable steps to destroy or de-identify it unless retention is required by law. Backup copies may remain until they are removed through the applicable backup cycle.

If a data breach occurs, we assess it and make any notifications required by applicable law.

Access correction and deletion requests

You can contact us to request access to personal information we hold about you, ask us to correct inaccurate or outdated information, request deletion, or withdraw consent where processing relies on consent.

We may need to verify your identity and clarify the request. We respond within a reasonable period and in accordance with applicable law. There may be lawful reasons to retain information or limit access. If we cannot fulfil a request, we will explain the reason where permitted and tell you how to raise a concern.

Deleting a myBooking account does not automatically delete records held independently by a business you booked with. We can help identify which organisation to contact. Withdrawing consent may affect features that depend on that consent, but does not affect prior lawful processing.

Privacy enquiries and complaints

Contact our Privacy Contact using the details below to ask a question, exercise a privacy right or make a complaint. Please describe the issue and the outcome you are seeking, without sending unnecessary identity documents or sensitive information.

We will acknowledge your complaint, investigate it and aim to provide a response within 30 days. If more time is needed, we will explain why and keep you informed.

If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner where the complaint falls within its jurisdiction. Information about making a privacy complaint is available at https://www.oaic.gov.au/privacy/privacy-complaints. Other privacy rights or complaint avenues may apply depending on your location and the applicable law.

Changes to this policy

We may update this policy when our services, information-handling practices or legal requirements change. The current version will be available on this page with its last-updated date. We will provide further notice or seek consent where required by law.