Privacy Policy

We collect the following categories of information:

• Account information: name, email address, business name, hashed password, and optional phone number.
• Business information: services offered, prices, business hours, team members, and business location.
• Booking data: appointments you create or that your customers create through your Trality booking page.
• Customer information: data your customers submit when booking with you (name, email, phone, notes).
• Payment information: handled by Stripe, our payment processor. We do not store full card numbers.
• Usage data: device information, IP address, browser type, pages visited, and actions taken in the app.
• Communications: messages you send us through support, contact, or in-app channels.

• Provide, maintain, and improve the Service.
• Process bookings, payments, and refunds.
• Send service-related emails (booking confirmations, reminders, account notifications).
• Provide customer support and respond to enquiries.
• Detect, prevent, and address fraud, abuse, or technical issues.
• Comply with our legal obligations.

We share information only where necessary, with:

• Stripe for payment processing.
• Email service providers for transactional email delivery.
• Hosting and infrastructure providers who operate the platform on our behalf.
• Law enforcement or regulators where legally required.
• Successor entities in the event of a merger, acquisition, or sale of assets.

We do not sell your personal information or your customers' personal information.

• Hosted with reputable cloud providers in Australia.
• Industry-standard encryption in transit (TLS) and at rest.
• Role-based access controls and audit logging on internal systems.
• Regular review of security practices and dependencies.

No method of storage or transmission over the internet is 100% secure, but we take reasonable steps to protect your information from misuse, loss, and unauthorised access.

We retain account and booking data while your account is active. On account closure, we retain data for up to 12 months for backup, dispute resolution, and compliance purposes, after which it is deleted unless we are otherwise required by law to retain it.

Under the Australian Privacy Principles, you can:

• Access the personal information we hold about you.
• Request correction of information that is inaccurate or out of date.
• Request deletion of your personal information, subject to legal exceptions.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

To exercise these rights, contact us at privacy@trality.com.au.

We use essential cookies to keep you signed in and to operate core features of the Service. We may also use analytics cookies to understand how the Service is used so we can improve it. You can disable non-essential cookies in your browser settings.

If you are a customer making a booking through a Trality-powered booking page, your information is collected by the business you are booking with. That business is the controller of your data; Trality processes your data on their behalf as their service provider. Please contact the business directly for requests about your information.

Some of our service providers (including Stripe and email providers) operate overseas. When we transfer personal information internationally, we take steps to ensure it is protected to a standard equivalent to the APPs, typically through contractual safeguards.

The Service is not intended for use by children under 16. If you become aware that a child has provided us with personal information, please contact us so we can remove it.

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. For material changes, we will notify account holders by email.

If you have any questions about this policy, contact us at:

• Email: privacy@trality.com.au
• Address: Gold Coast, Queensland, Australia