Privacy policy
Whosup is a booking service operated by Dobin Yang (ABN 65 305 057 430), a sole trader based in Brisbane, Queensland. In this policy, "we" and "us" means Dobin Yang as the operator of Whosup. This policy explains how we collect, use, store and share personal information, and how you can contact us about it. We handle personal information in line with the Australian Privacy Principles.
Who this policy covers
- People who visit whosup.com.au or contact us.
- Businesses that use Whosup (our customers) and their staff.
- Clients of those businesses whose details are stored in Whosup, for example when they book an appointment or sign a consent form.
What we collect
- When you contact us: your name, business name, email address, phone number (if you give it) and type of business.
- When your business uses Whosup: account details for you and your staff, your services, prices, opening hours and settings.
- Client information entered by a business or by its clients: name, phone number, email address, booking history, notes and signed consent forms. Consent forms can include health information, such as allergies or skin conditions, where the business asks for it.
We do not use advertising or tracking cookies on this website.
How we use it
- To reply to enquiries and arrange demos.
- To provide, support and improve the Whosup service.
- To send booking confirmations and other service messages on behalf of businesses.
- To bill customers and meet our legal obligations.
We do not sell personal information.
Client information held for businesses
When a business stores its clients' information in Whosup, the business decides what is collected and why. We hold and process that information on the business's behalf, only to provide the service. Clients who want to access or correct their details should contact the business first. We will help the business respond.
Who we share it with
We use a small number of service providers to run Whosup:
- Supabase stores our database and files on servers in Singapore.
- Vercel hosts this website and may process requests in other countries, including the United States.
- Google provides our email and the fonts on this website.
Because of this, personal information may be stored or processed outside Australia, including in Singapore and the United States. We choose providers with strong security practices and only share what they need to provide their service. We may also disclose information where the law requires it.
How we protect it
Data is encrypted in transit and access is limited by account. Each business can only see its own data. Signed consent forms are locked once signed so they cannot be changed.
How long we keep it
We keep enquiry details for as long as needed to follow up, and customer data for as long as the business uses Whosup. When a business leaves, we give it a copy of its data on request and then delete it from the service within a reasonable time, unless the law requires us to keep it.
Access, correction and complaints
You can ask to access or correct the personal information we hold about you by emailing hello@whosup.com.au. If you have a concern about how we handled your information, email us and we will respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
We may update this policy as Whosup grows. The date at the top shows when it was last changed.