1. About Bookloh
Bookloh is a cloud-based booking and event management platform operated by Three Pro Production. This Privacy Policy explains how we collect, use, store, share, and protect personal data when users access our website, application, workspaces, and related services.
2. Who This Policy Applies To
This policy applies to business owners and companies using Bookloh, team members invited into a workspace, and visitors to our website and marketplace.
For customers of businesses using Bookloh, the business is generally responsible for informing them how their personal data is used. Bookloh processes such data on behalf of the business.
3. Information We Collect
Account Information. We may collect full name, email address, company name, company workspace URL, phone number, business category, business address, optional location data, and registration or verification information. If users sign in with Google, we receive information permitted by their Google account settings.
Business & Booking Data. Users may store booking and event details, customer information, staff and salesperson information, products and services, quotations and invoices, payment records, commission and sales reports, documents and templates, and company branding and settings.
Subscription & Payment Information. Payments are processed by Stripe. We may receive subscription plans, billing cycle information, subscription status, and limited payment card metadata such as card brand and last four digits. We do not store full credit card details.
Communications & Notifications. We may send verification emails, password reset emails, billing notifications, optional WhatsApp notifications, and optional browser push notifications.
Calendar Subscription. If calendar sync is enabled, Bookloh generates a private ICS calendar feed URL. Anyone with access to the URL may view information included in the feed.
Technical Information. We automatically collect IP address, browser and device information, session and authentication data, security logs, and error reports. Google reCAPTCHA may be used to prevent abuse.
4. How We Use Personal Data
We use personal data to provide and maintain the Service, create and manage user accounts, process subscriptions and payments, send service-related communications, deliver optional marketing communications, support marketplace listings, manage notifications and integrations, enforce permissions and security measures, improve platform performance and features, and comply with legal obligations. Bookloh does not sell personal data.
5. Legal Basis for Processing
Depending on applicable law, we process personal data based on contractual necessity, legitimate business interests, user consent, and legal obligations. For Malaysian users, processing may also be subject to the Personal Data Protection Act 2010 (PDPA).
6. How We Share Information
Service Providers. We may share information with trusted providers, including Google Firebase / Google Cloud, Stripe, Google OAuth, Google reCAPTCHA, Meta WhatsApp Cloud API, and email service providers.
Within Your Organization. Data may be accessible to other users within the same workspace according to assigned permissions.
Legal Requirements. We may disclose information when required by law or to protect our rights, users, and platform security.
Business Transfers. Data may be transferred during mergers, acquisitions, or business restructuring.
7. Data Storage & International Transfers
Bookloh uses cloud infrastructure, including Google Cloud and Firebase. Personal data may be processed or stored outside Malaysia, including in countries where our service providers operate. Reasonable safeguards are implemented for cross-border transfers where required.
8. Data Retention
We retain data while an account remains active, as necessary to provide services, to comply with legal and regulatory obligations, and for limited backup and recovery purposes. Users may request account deletion, subject to applicable legal requirements.
9. Responsibilities of Business Users
Businesses using Bookloh are responsible for obtaining appropriate consent where required, providing privacy notices to customers, managing workspace access and permissions, and protecting login credentials and calendar feed URLs. In most cases, the business acts as the Data Controller or Data User, and Bookloh acts as the Data Processor.
10. User Rights
Subject to applicable law, users may have the right to access personal data, correct inaccurate information, withdraw consent, request deletion, restrict processing, and receive a copy of their data. Requests may be submitted through Bookloh's designated privacy contact.
11. Cookies & Similar Technologies
We use cookies and related technologies to maintain login sessions, remember preferences, enhance security, and improve platform performance. Disabling cookies may affect certain features.
12. Security Measures
Bookloh implements reasonable security measures, including HTTPS encryption, authentication systems, role-based access controls, and workspace isolation architecture. No system can guarantee absolute security, and users are responsible for safeguarding their credentials.
13. Additional Provisions
The Service is intended for users aged 18 and above. Third-party websites are governed by their own privacy policies. This Privacy Policy may be updated from time to time.
Contact Information
Bookloh is operated by Three Pro Production.
Privacy: privacy@bookloh.com
Support: support@bookloh.com
Billing: billing@bookloh.com
Registered Address: 13-05, Jalan Austin Perdana 3, Taman Austin Perdana, 81100 Johor Bahru, Johor Darul Ta'zim