Trust & Compliance
Privacy Policy
ResvSpot Limited ("ResvSpot") provides booking management software for salons, spas, and service businesses across New Zealand and Australia. This policy explains how we collect, use, and protect the information entrusted to us through our marketing site, merchant portal, and booking experiences.
Last updated: January 12, 2025
1. Information we collect
The specific data points depend on how you interact with ResvSpot—as a business customer, staff member, or consumer booking an appointment. We only collect information that allows us to deliver the platform and improve its performance.
Business Account Data
Details you provide when creating a merchant workplace, including business name, contact information, staff rosters, services, and brand assets.
Customer Booking Data
Information captured when a client books through the ResvSpot widget or the Merchant Portal—names, contact details, appointment history, preferences, and consent flags.
Usage & Engagement
Device identifiers, browser type, IP address, session logs, and activity telemetry that help us keep the platform secure and improve user flows.
Payments & Billing
Subscription information, plan selection, invoices, and payment status processed securely with PCI-compliant providers. We do not store full card numbers.
Support & Sales Conversations
Email, chat, and call transcripts with our success team so we can resolve issues, train staff, and provide tailored onboarding guidance.
2. How we use your information
Our legal bases include fulfilling a contract with you, pursuing legitimate interests (such as improving the platform), complying with legal obligations, and obtaining consent when required (for example, marketing emails or analytics cookies).
Deliver the product
- Power appointment booking, reminders, and automated communications between staff and customers.
- Sync schedules across locations, keep waitlists accurate, and surface AI routing suggestions.
Improve performance
- Monitor usage patterns to optimize our booking funnels and identify friction in mobile vs. desktop flows.
- Train predictive no-show and revenue forecasting models using aggregated and de-identified datasets.
Security & compliance
- Detect fraud, abuse, or suspicious logins.
- Fulfil contractual and legal obligations under NZ Privacy Act, Australian Privacy Act, GDPR, and CCPA.
Communication
- Send product updates, onboarding tips, billing notices, and important service announcements.
- Respond to support tickets and capture feedback you submit to our team.
3. When we share data
We never sell personal data. Limited sharing happens only with trusted processors and customers as outlined below, and always under confidentiality obligations.
Technology & infrastructure partners
Cloud hosting, analytics, communications, and payment providers that help us operate ResvSpot. These vendors only receive the minimum information required to deliver the contracted services.
Business customers
When you are a client booking with a merchant, that merchant receives booking and profile data necessary to service your appointment.
Regulators & legal authorities
We may disclose information if required by law, to enforce our Terms, or to protect the rights, property, or safety of ResvSpot, our customers, or others.
Business transfers
If we undergo a merger, acquisition, or asset sale, data may be transferred to the new controlling entity subject to the commitments of this policy.
4. Data retention & security
Booking information is retained for as long as you maintain an account or as needed to provide the service. When you close your account we archive or anonymize records that we no longer need.
5. Your choices & rights
Depending on your region (NZ, AU, EU, UK, US), you may have specific statutory rights. We honour all applicable privacy requests and aim to respond within 30 days.
- Access, correct, or update your data from the merchant portal or by contacting us.
- Request deletion of customer records when legally permissible. Operational records such as invoices may be retained as required by tax law.
- Export booking histories or staff rosters in portable formats.
- Object to certain processing, including marketing communications, at any time.
- Opt-out of non-essential cookies via the on-site Cookie Banner or your browser settings.
6. Contacting us
If you have privacy questions, would like to execute an access request, or want to sign our Data Processing Agreement, email [email protected] or send a ticket through our contact form. Our privacy team is based in Auckland, New Zealand.