Privacy Policy

Last updated: 29 October 2026.

Booking Master is operated by Adrian Moore trading as Coastal Web (ABN 51 626 115 776), Western Australia. This policy explains how we handle personal information in providing the platform.

For support, access, correction, deletion or privacy enquiries, contact admin@bookingmaster.com.au, addressed to the Privacy Contact, Coastal Web. See also our Terms of Use.

1. Businesses and their customers

Businesses use Booking Master to manage bookings and services for their customers. The business offering the service decides what its booking form asks and how it uses booking information. Its own privacy notice and booking terms may also apply.

We handle business account information for the operation of Booking Master, and booking information to provide the platform for the relevant business. Contact that business about its service or how it uses your information. You can also contact us directly about information we handle; we will explain whether we can act on your request or need to coordinate with the business.

2. Information we collect

• Business and user account details, including names, business details, email addresses, contact details, account permissions, and subscription and billing records.
• Booking information, including customer names and contact details where supplied, selected services, dates, quantities, booking references, addresses or pickup details, and answers supplied through configured booking forms.
• Payment and refund records, including amounts, currency, payment status, provider transaction identifiers and relevant payment-method information returned by the payment provider. Card entry is handled through Stripe’s payment interface.
• Integration information, including connected-company identifiers, accounting choices, authorisation tokens and delivery or sync history.
• Support correspondence and technical information used to operate and secure the service, such as IP addresses, browser details, session information, activity records and error logs.

We collect information when you or an authorised user enters it, when a business imports or supplies it, when you contact us, and when connected payment or integration providers return information needed for the requested service. Avoid entering sensitive personal information unless necessary and appropriately authorised.

3. Why information is used

We use information to create and administer accounts; provide bookings, availability and customer-management features; process and reconcile payments and refunds; send configured service communications; deliver authorised integrations; provide support; investigate errors and misuse; protect accounts; administer subscriptions; and meet applicable legal obligations.

Some details are necessary for a requested booking, payment or account function. If they are not provided, that function may not be available. Optional form fields and communications depend on the business’s configuration.

4. Who may receive information

Information may be available to authorised staff of the relevant business and to Coastal Web personnel who need it to operate or support the platform. Account permissions help control access within the application.

We also use service providers for hosting, email delivery, payment processing and integrations. Information is shared as needed for those services and the instructions of the authorised business. A business may enable additional receiving systems or APIs and choose which supported information to share. We may disclose information when required or authorised by law or reasonably necessary to address fraud, security incidents or legal claims.

5. Stripe payments

Where Stripe payments are enabled, payment information is supplied to Stripe to process the transaction. Booking Master receives transaction and payment-status information needed to confirm the booking and manage refunds. Payment providers handle information under their own privacy notices. Contact the booking business about its refund decision or the relevant provider about its handling of payment information.

6. QuickBooks Online information

When an authorised business user connects QuickBooks Online, we receive authorisation to access the selected company’s supported accounting information. We store the QuickBooks company identifier and access and refresh tokens in encrypted form, together with selected accounting references and sync records needed to maintain the connection.

To configure and validate the connection, the integration reads company and currency settings and relevant account, service-item, sales-tax and customer records. If automatic setup is confirmed, it creates or reuses matching dedicated accounting records. It uses the accounting information for setup, authorised payment and refund syncing, validation and reconciliation.

Eligible online booking payments and refunds are sent with accounting amounts, currency, transaction dates, service descriptions and booking references. Receipts use the selected shared online-sales customer rather than creating an individual QuickBooks customer for every passenger or booking customer. The integration does not send customer emails from QuickBooks.

You can pause sync or disconnect in Booking Master’s Settings → Integrations and revoke authorisation through Intuit’s connected-app controls. Disconnecting prevents future syncing through that connection but does not automatically erase receipts already in QuickBooks. Intuit handles information under its own privacy notices.

7. Hosting and overseas handling

Our hosting is arranged through Hostspud on infrastructure supplied by NameHero. NameHero has confirmed that our application server is located in Kansas City, United States. Information stored on that server is therefore hosted outside Australia, in the United States. This server location does not establish the location of every backup or service-provider support team.

Stripe, Intuit and other providers may operate in additional countries. The countries involved depend on the provider and service used. Contact us for current information about hosting locations and overseas service providers relevant to your account.

When arranging overseas handling, we consider applicable privacy obligations and the safeguards available through the provider. This policy does not treat use of Booking Master as a waiver of statutory privacy protections.

8. Sessions, cookies and analytics

Booking Master uses session cookies and, where selected, remember-device features to maintain sign-in and account security. Blocking necessary cookies may prevent those functions from working.

Where website analytics are enabled, they may collect technical and usage information such as browser details, pages visited and online identifiers. Analytics configuration may differ between the main website and the application. Contact us for information about the tools currently enabled and any available choices.

9. Security and retention

We use measures such as HTTPS, access controls and protected credentials to help secure information. No online service can guarantee absolute security. Keep account credentials private and report suspected unauthorised access promptly.

We keep active-account information as needed to provide the service and meet legitimate legal and business requirements. After an account is closed, our policy is to retain its operational data for 30 days and then delete it, subject to any requirement to preserve particular records. Cancelling a subscription alone does not necessarily close the account.

Records required for legal obligations, billing or dispute resolution may be retained separately where necessary. Backup copies may remain subject to the hosting provider’s backup cycle and may not disappear at the same time as active-system data. Contact us about backup retention and the handling of a particular deletion request.

Deleting data from Booking Master does not automatically delete information already held by a business or an external provider, including accounting records in QuickBooks. Requests relating to those copies may also need to be made to the relevant holder.

10. Access, correction and deletion requests

Email admin@bookingmaster.com.au to request access to, correction of, or deletion of information we handle. Explain the account or booking concerned and your request. We may reasonably verify your identity and authority before releasing or changing information.

We will assess the request and respond within a reasonable period. Some information may need to be retained, or a request may need coordination with the booking business. Where we cannot fulfil a request, we will explain the reason and available complaint options, subject to applicable law. These contact arrangements do not limit any other lawful way you may make a request.

11. Privacy complaints

Send a privacy complaint to our Privacy Contact at admin@bookingmaster.com.au, describing what happened and the outcome you seek. We will investigate and aim to respond within 30 days. If more time is needed, we will explain why.

If you are not satisfied, you may contact the Office of the Australian Information Commissioner or another relevant complaints body, where it has jurisdiction. This policy does not limit any rights you have under applicable privacy law.

12. Policy changes

We will update this page when our practices change and identify the updated date. Material changes will be communicated where appropriate. Contact us if you would like clarification or a copy of this policy.