Blend Booking is online booking software used by Australian businesses — barbers, salons, tradies and others. This policy explains what personal information Blend Booking handles, why, and your choices. We follow the Australian Privacy Principles in the Privacy Act 1988.
If you book with a business
When you book through a business's website or booking page, you are dealing with that business. It decides what it asks you and how it uses your details; Blend Booking stores and processes them on its behalf. Questions about a booking are best sent to the business first.
We collect:
- your name, email and (if you give it) mobile number;
- the address for jobs done at your place, and your answers to the business's booking questions;
- photos of the job, if you add them (the booking form redraws them before sending, which leaves out where they were taken). They're kept with your request or booking; photos for a time you didn't go on to book are deleted within a few days;
- your bookings — service, time, staff member, changes and cancellations, and notes the business adds;
- the service and days you asked for, if you join a business's waitlist;
- whether you paid, and how much (card details go straight to Stripe — we never see or store them);
- the emails and texts sent to you, and whether you replied STOP;
- your IP address, briefly, for the anti-spam check when you pick a time.
We use these to make, change and cancel your booking, take payments the business asks for, send confirmations and reminders, tell you when a time opens up (if you joined the business's waitlist), let you know when someone is on the way to a job at your place, ask once for a review the day after a visit (if the business has switched that on), and let the business contact you about the booking. We don't sell your information, show you ads, or use it for anything else. The business can see your details and booking history with them — not your bookings with other businesses. A business can show its staff the jobs they're doing, with your name, contact details and job address, in the calendar app they use.
Texts: reminders, “on my way” texts, waitlist offers and review requests come from one shared number. Reply STOP to stop all texts from it (that covers every business using Blend Booking). A review-request email has its own unsubscribe link, and every waitlist email has a link to leave the waitlist. Emails about a booking you made can't be switched off while the booking stands.
If you use Blend Booking for your business
When you sign your business up, we collect its name, kind of business, state, time zone and web address, and your name, email and password. We email you a code to check the address is yours, and Cloudflare Turnstile checks your IP address to stop spam sign-ups. We record which version of our terms and this policy you agreed to.
We hold your staff's names, emails and passwords (stored scrambled, never readable), the mobile number each person adds for their morning run-sheet, their sign-in sessions (with IP address and browser), a log of who changed which booking, and your business settings. If you connect a Google or Outlook calendar, we write bookings into it and read when you're busy — not what your other events are about. If you use a Blend calendar instead, we make a calendar in our own Google account and share it with the Google address you give us (Google emails that address an invite); we read only that calendar. If you make a calendar subscribe link, anyone who has the link can read that staff member's jobs, with customers' names, contact details and job addresses, until you reset the link or turn it off. When our support team signs in to your account to help, it is recorded in the log.
Who else handles the information
We use these services to run Blend Booking. Each receives only what it needs:
- Vercel — runs the website and app (servers in Sydney);
- Neon — the database (Sydney);
- Stripe — payments, when the business takes them online (Australia and the United States);
- Resend — sends emails (United States);
- Twilio — sends text messages (United States);
- Cloudinary — stores photos customers add of a job (United States);
- Cloudflare Turnstile — the anti-spam check (worldwide);
- Google or Microsoft — only if the business shows bookings in a Google or Outlook calendar (worldwide);
- Google Maps — shows the business's location on its booking page, so your browser loads the map from Google (worldwide);
- Sentry — error reports, set up to leave out customers' details (United States).
So some information is handled overseas, mainly in the United States. We choose providers that protect it to standards similar to the Australian Privacy Principles.
Cookies
The booking widget uses no cookies. Staff who sign in get one cookie that keeps them signed in. Stripe's payment form sets its own cookies to prevent fraud. The map on a business's booking page comes from Google, which may set its own cookies.
Keeping it safe, and for how long
Information is encrypted in transit and access is limited to the people who need it. We keep a business's records while it uses Blend Booking. When a business stops using Blend Booking, we delete its customers' records within 90 days unless the law requires us to keep them.
Seeing, correcting or deleting your information
Ask the business you booked with, or email us at support@book.blenddesigns.au. We'll reply within 30 days. If you're not happy with how we handle a privacy complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If we change this policy, the new version will be on this page with its date.