Privacy Policy

Last updated: 2 April 2026

1. Introduction

This Privacy Policy explains how NT Development Group Pty Ltd, trading as BookAndGo ("we", "us", "our") collects, uses, discloses, and protects personal information through the BookAndGo platform ("Platform"), accessible at bookandgo.com.au.

BookAndGo is a multi-tenant booking platform for appointment-based service businesses. This policy applies to all users of the Platform, including business owners ("Providers") and their customers ("Clients").

We are committed to complying with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Platform, you consent to the collection and use of your information as described in this policy.

2. Information We Collect

From Providers (Business Owners)

  • Name, email address, and phone number
  • Business name, address, and contact details
  • Services offered, pricing, and availability schedules
  • Client lists and appointment records
  • Payment and billing information (processed via Stripe)

From Clients (End Customers)

  • Name, email address, and phone number
  • Appointment history and booking preferences
  • Review text and ratings submitted for businesses
  • Messages sent via the AI chat assistant or SMS

Automatically Collected

  • Device information, browser type, and IP address
  • Usage data and interaction patterns via Google Analytics 4 (GA4)
  • Authentication session data via Firebase Auth cookies

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Platform
  • Process bookings, appointments, and payments
  • Send transactional communications (confirmations, reminders, receipts) via email and SMS
  • Power AI-assisted booking via our chat and SMS assistants
  • Generate invoices and manage billing
  • Improve the Platform through analytics and usage data
  • Respond to support enquiries and provide customer service
  • Comply with legal obligations

4. Authentication

The Platform uses Firebase Authentication to manage user accounts. You may sign in using Google OAuth or an email and password combination. We do not store your Google or third-party account passwords. Authentication sessions are maintained via secure cookies.

5. Payments

All payment processing is handled by Stripe, which is PCI DSS compliant. BookAndGo does not store, process, or have access to your full credit card details. Payment information is collected and processed directly by Stripe in accordance with their Privacy Policy.

6. AI Chat and SMS Assistants

BookAndGo uses Anthropic Claude to power AI chat assistants on business booking pages and via SMS (Australian number: +61 468 018 011). When you interact with these assistants, your messages are sent to Anthropic for processing to generate responses. Anthropic does not store your conversation data after processing. Conversation context is maintained in our database to provide continuity within a session.

7. Third-Party Service Providers

We share personal information only with trusted service providers who assist in operating the Platform. We never sell your personal information to third parties.

  • Google Cloud / Firebase — hosting, authentication, database, and analytics
  • Stripe — payment processing
  • Twilio — SMS delivery and AI SMS bot
  • SendGrid — transactional email delivery
  • Anthropic — AI chat assistant processing
  • Google Analytics 4 — website usage analytics

Each provider operates under their own privacy policy and is contractually required to handle your data securely and only for the purposes of providing their services to us.

8. Cookies and Tracking

The Platform uses the following cookies and tracking technologies:

  • Firebase Auth session cookies — essential for maintaining your login session
  • Google Analytics 4 cookies — used to understand how users interact with the Platform

You can control cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use certain features of the Platform.

9. Data Storage and Security

All data is stored in Australia (Sydney, australia-southeast1 region) via Google Cloud Platform and Firebase. We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and access controls to protect your personal information.

While we take all reasonable steps to protect your information, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security.

10. Data Retention

We retain your personal information for as long as your account remains active or as needed to provide services to you. If you request account deletion, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

Providers are responsible for managing the personal information of their Clients within the Platform in accordance with their own privacy obligations.

11. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

  • Access — request a copy of the personal information we hold about you
  • Correction — request correction of inaccurate or incomplete information
  • Deletion — request deletion of your personal information
  • Complaint — lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached

To exercise any of these rights, contact us at support@bookandgo.com.au.

12. Children's Privacy

The Platform is not intended for use by children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the Platform after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: