Privacy Policy

This policy explains what Bookort does with personal information. It is written to be read, not to be survived.

What is collected

When you create an account: your name, email address and mobile number. Your password is stored only as a cryptographic hash — nobody at Bookort can read it.

When you book: which venue, which courts, when, what it cost, and any note you added for the venue.

When you pay: the amount, the method, the time, and a reference from the payment provider. Card numbers never reach Bookort. Payment details are entered on PayMongo's own pages; what comes back is a reference and a result.

When you use the site: your IP address and browser details, in server logs and in security records — a sign-in, a password change, a device you asked us to remember. An approximate location may be derived from your IP address so the home page can show venues near you. It is coarse, it is not stored against your account, and you are never asked to share precise location.

What you choose to add: a profile photo, a preferred sport, a review you write about a venue.

Why it is collected

• To take and honour bookings, and to tell you about them.
• To take payment, issue refunds, and keep financial records that must be kept.
• To let a venue you have booked with recognise you at the desk and contact you about that booking.
• To keep accounts secure — which is what the sign-in records and device history are for.
• To answer you when you get in touch.

Bookort does not sell personal information, and does not use it for advertising.

Who it is shared with

The venue you booked with sees what it needs to honour the booking: your name, your contact details, the booking itself, and what was paid. A venue you have never booked with sees nothing about you.

PayMongo, to process payments and refunds.

Service providers that Bookort uses to operate — hosting, email delivery, file storage — under contracts that limit them to that purpose.

Where the law requires it, and no further than it requires.

How long it is kept

• Financial records — payments, refunds, ledger entries — are kept for as long as tax and accounting law requires. These are not deleted on request, because keeping them is a legal obligation.
• Bookings and attendance are kept while the account is open, as your history with a venue.
• Security records — sign-ins, password changes, devices — are kept for a limited period and then removed.
• An account you close is deactivated rather than erased where financial records depend on it, and the personal details not needed for those records are removed.

Your rights

Under the Data Privacy Act of 2012, you may ask to see the personal information held about you, to have it corrected, to have it erased where there is no lawful reason to keep it, to object to how it is used, and to receive a copy in a portable form.

Write to privacy@bookort.com. You are also entitled to complain to the National Privacy Commission.

Cookies

Bookort uses three cookies, all of them necessary to sign you in and keep you signed in safely. There are no analytics or advertising cookies. The [Cookie Policy](/legal/cookies) names each one.

Children

Bookort is not intended for children under 13, and accounts are not knowingly created for them. A booking made for a child is made by an adult, who is responsible for it.

Security

Passwords are hashed, sessions are protected, and access to personal information is limited to the people who need it. No system is perfectly secure, and anyone who claims otherwise is selling something — but where something goes wrong that puts you at risk, you will be told.

Changes

Material changes will be announced rather than only dated.

Contact

privacy@bookort.com for anything in this policy.