๐Ÿ‡ฆ๐Ÿ‡บPrivacy Act 1988 (Cth) & 13 APPs Compliant

Privacy Policy

How BookitSocial protects, manages, and respects your personal data across Australia. Clear, transparent, and built with safety first.

Effective: May 2026 ยท Version 2.0Governed in Victoria, AustraliaยทAudited for Zero Data Selling

Your Data Stays Yours

Encrypted payments via Stripe. Zero tracking pixel bloat. Instant 1-tap in-app deletion.

๐Ÿ›ก๏ธ

Zero Data Selling

We do not sell, rent, or trade your personal details to third-party ad brokers or data aggregators.

๐Ÿ’ณ

Bank-Grade Stripe

Card data is handled exclusively by Stripe Connect. BookitSocial never touches or stores raw credit card numbers.

โšก

1-Tap Deletion

Delete your account anytime inside your Profile settings. Your profile immediately disappears and data anonymises.

๐Ÿ‡ฆ๐Ÿ‡บ

Australian Principles

Operated by Social Ark Pty Ltd in Melbourne, strictly adhering to the 13 Australian Privacy Principles (APPs).

1

Who We Are & Scope

BookitSocial is an Australian social ticketing and going-out discovery platform operated by Social Ark Pty Ltd (ABN registered in Melbourne, Victoria, Australia).

This Privacy Policy explains how we collect, store, handle, and safeguard your personal information across the BookitSocial mobile application (available on iOS and Android), the web guest-checkout portal at bookitsocial.co, and the host administration panel (collectively, our "Services").

We are strictly bound by the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs), which govern the fair and responsible handling of personal records.

2

What Personal Information We Collect

We collect information directly from you when you register, book an experience, or interact with other members, as well as automatic device diagnostic signals to keep the network safe:

Account & Identity Information

Name, verified email address, Australian mobile phone number, and date of birth.

18+ Age & Login Verification

Public Social Profile

Profile avatar photo, bio blurb, home city (e.g. Melbourne, Sydney), and curated interests.

Community Guest Lists

Bookings, Passes & Living Table Seats

Ticket QR codes, table seat reservations, guest invites, and split-bill allocations in AUD.

Door Entry & Check-in

Payment & Payout Tokenisation

Stripe customer ID, card brand, and expiry. For hosts: Stripe Connect KYC details.

Processed via Stripe

Device Signals & Security Logs

Device model, operating system, IP address, login timestamps, and anti-fraud telemetry.

Account Protection
3

How We Use Your Personal Information

Under Australian law, we only collect and process information reasonably necessary for our core activities:

๐ŸŽŸ๏ธ Ticketing & Door Check-in

Generating verified QR entry tickets, delivering digital receipts, and coordinating door access with verified hosts.

๐Ÿ‘ฅ The Living Table & Split Bills

Displaying real-time seat assignments, sending invite cards in chat, and letting attendees split bills seamlessly.

๐Ÿ›ก๏ธ Safety & Automated Moderation

Catching spam, blocking harassment, auditing suspicious logins, and protecting community integrity.

๐Ÿ“ Local City Discovery

Serving relevant events in Melbourne, Sydney, Brisbane, Perth, and other Australian regions based on your preference.

4

Third Parties & Infrastructure Partners

We never sell your data. We partner only with audited tier-one cloud providers required to run the platform:

Stripe PaymentsPCI-DSS Level 1

Processes all guest card payments, host payouts, and refunds in Australian dollars.

Google Cloud / FirebaseSOC 2 / ISO 27001

Manages encrypted telephone and Google OAuth sign-in, session tokens, and instant push alerts.

Microsoft AzureAustralian Region

Encrypted primary database hosting and operational event telemetry stored under Australian data protocols.

Cloudinary MediaSecure CDN

Secure media caching and optimization for event posters and user avatar uploads.

5

Storage, Security & Data Retention

All communications between your device, our web clients, and backend APIs are secured with end-to-end TLS 1.3 encryption. At rest, databases are encrypted using AES-256 standard protocols.

Account Deletion & Grace Period: When you initiate account deletion from the app, your account is immediately de-indexed from discovery. To safeguard against financial dispute fraud, financial records (such as Stripe charges) are retained for 30 days before permanent irreversible anonymisation, satisfying Australian taxation and accounting obligations.

6

Your Rights Under the Privacy Act 1988 (Cth)

You possess statutory rights under the Australian Privacy Principles:

  • โœ“
    Right of Access: You can request copies of all personal data held in connection with your account.
  • โœ“
    Right to Correction: Update your name, city, bio, and profile details anytime in the app settings.
  • โœ“
    Right to Delete: Request permanent closure and erasure via the in-app deletion button or by contacting support.
  • โœ“
    Right to Opt-Out: Unsubscribe from non-transactional marketing notices with a single tap.
7

Contact Us & OAIC Complaints

If you have questions, wish to exercise privacy rights, or feel your privacy has not been respected, contact our dedicated Privacy Officer first:

Social Ark Pty Ltd (Privacy Officer)

Melbourne, Victoria, Australia

Email: info@bookitsocial.co

Office of the Australian Information Commissioner (OAIC): If you are not satisfied with our response to a privacy concern, you have the right to lodge an inquiry or complaint with the OAIC at www.oaic.gov.au or telephone 1300 363 992.