Privacy Policy

BOOKD Digital Pty Ltd (ABN registered) ("BOOKD Digital", "we", "us", "our") is committed to protecting your privacy and handling your personal information responsibly in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, store, and disclose personal information when you use our website, platform, and services.

Our registered business address is 333 Kent Street, Sydney NSW 2000, Australia. For privacy-related enquiries, contact us at ange@bookddigital.com.au.

We collect personal information that is reasonably necessary to provide our services. This includes:

Contact and identity information — your name, email address, phone number, and business details such as your clinic name, location, and clinic type.

Campaign and performance data — advertising spend, lead counts, revenue figures, appointment data, and other metrics associated with the marketing campaigns we manage on your behalf.

Account credentials — usernames and login details for platform access (passwords are stored in encrypted form only).

Communications — messages and enquiries submitted through our website contact forms, email, and chat.

Technical data — IP addresses, browser type, device information, pages visited, and session duration, collected via cookies and analytics tools when you use our website or client portal.

We collect information directly from you, from third-party advertising platforms (such as Meta) in connection with your campaigns, and automatically through our website and portal.

We use the personal information we collect to:

Provide and manage our patient acquisition services, including building and optimising advertising campaigns on your behalf.

Communicate with you about your account, campaigns, performance reports, and service updates.

Issue invoices, process payments, and manage our business relationship with you.

Improve and develop our platform, tools, and processes.

Comply with our legal obligations under Australian law.

Respond to your enquiries and support requests.

We will only use your information for the purposes for which it was collected, or for directly related secondary purposes that you would reasonably expect.

Your data is stored securely using Supabase, which operates on AWS (Amazon Web Services) infrastructure. We apply industry-standard security practices including encryption at rest, encrypted connections (TLS/HTTPS), access controls, and regular security reviews.

While we take reasonable precautions to protect your information from unauthorised access, no system can guarantee absolute security. If you become aware of any security concern relating to your account, please contact us immediately at ange@bookddigital.com.au.

We handle all personal information in accordance with Australian data handling standards and do not transfer data outside Australia except where required to use the third-party services described in Section 5.

To deliver our services, we engage trusted third-party providers who may process your data on our behalf. These include:

Meta Platforms (Facebook/Instagram) — for delivery of paid advertising campaigns.

Retell AI — for AI voice agent functionality.

Twilio — for SMS communications.

Resend — for transactional email delivery.

Stripe — for payment processing.

Vercel — for website and application hosting.

Supabase — for database and authentication services.

Each of these providers operates under their own privacy policies and applicable data protection laws. We only share the minimum information necessary for each service to function.

Our website uses cookies and similar tracking technologies to support platform functionality and analytics. Cookies help us understand how visitors use our site, remember your preferences, and improve your experience.

Types of cookies we use include session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period).

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of our website or client portal.

Under the Australian Privacy Principles, you have the right to:

Access the personal information we hold about you.

Request that we correct inaccurate, incomplete, or out-of-date information.

Request that we delete your personal information, subject to our legal obligations to retain certain records.

Complain about how we have handled your personal information.

To exercise any of these rights, please contact us at ange@bookddigital.com.au. We will respond to all requests within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

We retain personal information for as long as necessary to provide our services and meet our legal obligations. Specifically:

Client account data and campaign information is retained for the duration of the service agreement and for a reasonable period thereafter.

Financial records, invoices, and transaction data are retained for a minimum of seven (7) years in accordance with Australian taxation and corporations law.

Where data is no longer required, we will delete or de-identify it securely.

If you have any questions about this Privacy Policy, or wish to access, correct, or delete your personal information, please contact us:

BOOKD Digital Pty Ltd 333 Kent Street, Sydney NSW 2000 Email: ange@bookddigital.com.au

This Privacy Policy was last updated in June 2026. We may update this policy from time to time. Continued use of our services after any update constitutes your acceptance of the revised policy.