// Legal document

Privacy Policy

01Introduction

NRT Digital, as the provider of the BookSwift service, respects the privacy of its users and is committed to protecting personal data in accordance with applicable law.

This Privacy Policy explains what data we collect when you create and use a BookSwift account (whether you sign up yourself, through our iOS/Android app, or we help set an account up for you), and what we collect if you send us your details through a request form on one of our landing pages, how we use it, and what your rights are.

02What data we collect

When you create an account and use the service, we may collect:

• your business name and category/type
• your email address, used to log in and receive notifications
• your password, always stored encrypted - we never store or see it in plain text
• if you sign up or log in with Google or Apple, the name and email address they share with us - we never see or store your Google/Apple password
• your phone number, address and logo, if you choose to add them
• details about your business entered into the BookSwift system (services, team members' names and emails, working hours)
• details about clients you enter, or who book an appointment through your booking page (name, phone, email)
• if you send us a request through one of our landing pages: your name, phone number, email address, business name, type of business and the plan you're interested in
• optional details you choose to give us so we can build your page - links to your social media or website, your address or suburb, opening hours, services and prices, notes, and any logo or photos you upload
• if you give us links to your public social media, website or online listings, the public content on them (for example photos and descriptions) that we use to build your page
• if you connect Google Calendar, the calendar access needed to keep both calendars in sync
• if you connect your Google Business Profile, your public review data (rating and review count) shown on your booking page
• if you use our iOS or Android app, a device token used to deliver push notifications - see Section 5
• technical data (IP address, browser, device)
• website usage data (pages visited, general location, device type) collected via analytics tools - see Section 9

03How we use your data

We use your data to:

• create and maintain your BookSwift account and booking page
• contact you about your request, and build your booking page or website from the details, links, logo and photos you give us
• send you a private link where you can add or change those details, and a confirmation email
• send booking notifications (to you and, if they sign up, your team) - including push notifications on our mobile app
• send appointment reminders to your clients by email or SMS, on your behalf
• provide customer support
• bill for the service

04Payments

All payments are processed through a third party - Stripe. NRT Digital does not store payment card details.

By using the service, you agree that Stripe processes your data in accordance with its own privacy policy.

05Sharing data

We do not sell your data. Data is shared only to the extent necessary to run the service, with providers we use for:

• hosting the website and database
• sending email notifications
• sending SMS reminders, if enabled on your plan
• delivering push notifications to our iOS/Android app (Google's Firebase Cloud Messaging), only if you install and log into the app
• signing in with Google or Apple, only if you choose to use it
• syncing your calendar, only if you choose to connect Google Calendar
• syncing your Google Business Profile reviews, only if you choose to connect it
• notifying the NRT Digital team by email and push notification when someone signs up or sends us a request
• processing payments (Stripe)
• website analytics (Google Analytics, and our own internal analytics tool) - see Section 9
• measuring our online advertising (the Meta/Facebook Pixel on our advertising landing pages, which tells Meta that a visit or sign-up happened so we can see which ads work) - see Section 9

Some of these providers (for example Stripe, Google, Meta and our email provider) may store or process data outside Australia, including in the United States and Europe.

06Data retention

We retain your data for as long as your account is active, or as long as needed to provide the service. After you stop using the service, we may retain certain data for a reasonable period for technical or legal reasons.

If you send us a request but don't go ahead, we may keep your details, and anything you uploaded, for a reasonable period so we can follow up. You can ask us to delete them at any time.

07Data security

We take reasonable technical and organizational measures to protect your data (including password encryption and restricted access). However, no system is 100% secure, and we cannot guarantee absolute security.

The private link we send you to add or change your details is meant for you only. Anyone who has it can see and change what you submitted, so please don't share it.

08Your rights

You have the right to:

• request access to your data
• request correction or deletion of your data
• restrict the processing of your data
• object to the processing of your data

To exercise these rights, contact us by email.

09Cookies

Our website uses cookies for basic functionality (e.g. logging in to your account) and for analytics. We use Google Analytics and our own internal analytics tool (run by NRT Digital) to understand how visitors use our website - such as which pages are viewed and general location and device information. This data is aggregated and isn't used to identify you personally. On our advertising landing pages we also use the Meta (Facebook/Instagram) Pixel, which sets a cookie and tells Meta when you visit the page or submit the form there, so we can measure and improve our ads. Meta handles that information under its own privacy policy, and you can control ad personalisation in your Facebook and Instagram settings. Google Analytics and the Meta Pixel only load after you click “Accept” on our cookie notice; if you click “Decline” they don't load and set no cookies. Our own internal analytics tool doesn't use cookies. You can change your cookie choice at any time.

10Changes to this Policy

We reserve the right to change this Policy at any time. An updated version will be published on the website.

11Contact