Privacy Policy

1. About this Policy

Booking Lelo is owned and operated by Garib Labs (“we”, “us”, “our”). We operate bookinglelo.comand its associated subdomains (the “Platform”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Platform.

By using the Platform you consent to the practices described in this Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

Information you provide directly

• Account details: email address, full name, phone number
• Profile photo: if you sign in via Google or Microsoft, your profile picture may be imported
• Membership information: whether you are a member of an organisation and, if applicable, your membership number
• Booking information: event name, requested date and time, space selection, responses to custom booking form questions, and your digital signature when accepting an organisation’s terms and conditions
• Support communications: messages you send us

Information collected automatically

• Log data: IP address, browser type, pages visited, date and time of access
• Cookies: session cookies for authentication; analytics cookies; third-party advertising cookies (see Section 6)

3. How We Use Your Information

• To create and maintain your account
• To process and manage booking requests on behalf of organisations
• To send booking confirmations, status updates, and reminder emails
• To display your details to the organisation you are booking with
• To verify membership status where required by an organisation
• To improve the Platform and diagnose technical issues
• To comply with legal obligations

4. Sharing Your Information

We share your information only as described below:

• Organisation administrators: when you make a booking request, your name, contact details, membership information, and booking details are shared with the relevant organisation so they can manage your request.
• Service providers: we engage the following processors to operate the Platform:
  • Supabase Inc. — database hosting and authentication
  • Vercel Inc. — web hosting and content delivery
  • Resend Inc. — transactional email delivery
  • Google LLC / Microsoft Corporation — OAuth sign-in (if you choose to use social login)
  • Google LLC — advertising (see Section 6)
• Legal requirements: we may disclose information if required by law, court order, or to protect the rights, property, or safety of Booking Lelo, its users, or the public.

5. Cookies

We use the following types of cookies:

• Essential cookies: required for login sessions and security. Cannot be disabled.
• Analytics cookies: help us understand how visitors navigate the Platform so we can improve it.
• Advertising cookies: placed by Google AdSense to serve relevant advertisements (see Section 6).

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality.

6. Advertising

The Platform may display advertisements served by Google AdSense. Google and its partners use cookies to serve ads based on your prior visits to this and other websites.

Google’s use of advertising cookies enables it and its partners to serve ads based on your visits to this site and/or other sites on the Internet. You may opt out of personalised advertising by visiting Google Ad Settings or aboutads.info.

For more information on how Google uses data from sites that use its services, see How Google uses data when you use our partners’ sites or apps.

7. Data Retention

We retain your account information for as long as your account is active or as needed to provide the service. Booking records are retained for the period required by the relevant organisation and applicable law. You may request deletion of your account at any time (see Section 9).

8. Security

We implement industry-standard security measures including HTTPS encryption in transit, row-level database security, access controls, and regular security reviews. No method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

9. Your Rights

Under the Australian Privacy Act 1988 (and where applicable, other privacy laws), you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated personal data
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@bookinglelo.com.

10. Children’s Privacy

The Platform is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

11. Third-Party Links

The Platform may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated “Last updated” date. Continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

13. Contact Us

For privacy enquiries or to exercise your rights, contact us at: