This Privacy Notice for Brushbook (“we”, “us”, or “our”), describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:
- Visit our website at https://www.brushbook.com or any website of ours that links to this Privacy Notice
- Engage with us in other related ways, including any marketing or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at hello@brushbook.com.
Summary of key points
This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics in the sections below.
- What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.
- Do we process any sensitive personal information? We do not process sensitive personal information.
- Do we collect any information from third parties? We do not collect any information from third parties.
- How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
- In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties.
- How do we keep your information safe? We have organisational and technical processes in place to protect your personal information, though no method is 100% secure.
- What are your rights? Depending on where you are located, applicable privacy law may give you certain rights regarding your personal information.
- How do you exercise your rights? Contact us or submit a data subject access request.
1. What information do we collect?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
The personal information we collect may include: names, email addresses, and usernames.
We do not process sensitive information.
We may provide you with the option to register using your existing social media account details (such as Google). If you choose to register in this way, we will collect certain profile information about you from the social media provider, as described in the section “How do we handle your social logins?” below.
Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies. The information we collect includes log and usage data, device data, and location data (which may be derived from your IP address). You can opt out of location collection by disabling location settings on your device, though some features may not work.
Google API
Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
2. How do we process your information?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
We process your personal information to:
- Facilitate account creation and authentication and manage user accounts.
- Request feedback and contact you about your use of our Services.
- Send marketing and promotional communications where permitted (you may opt out).
- Identify usage trends and improve our Services.
- Determine the effectiveness of our marketing and promotional campaigns.
- Save or protect an individual's vital interest when necessary to prevent harm.
3. What legal bases do we rely on to process your personal information?
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law.
If you are located in the EU or UK, we may rely on consent, legitimate interests, legal obligations, and vital interests as described in the full policy. If you are located in Canada, we may rely on express or implied consent, or other bases permitted by applicable law.
4. When and with whom do we share your personal information?
In Short: We may share information in specific situations described in this section.
We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
5. What is our stance on third-party websites?
In Short: We are not responsible for the safety of any information that you share with third parties that we may link to or who advertise on our Services.
The Services may link to third-party websites, online services, or mobile applications. We do not guarantee any such third parties, and data collected by third parties is not covered by this Privacy Notice. You should review the policies of such third parties and contact them directly with questions.
6. Do we use cookies and other tracking technologies?
In Short: We may use cookies and other tracking technologies to collect and store your information.
We may use cookies and similar tracking technologies when you interact with our Services. Some technologies help us maintain security, prevent crashes, fix bugs, save preferences, and assist with basic site functions. We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, subject to applicable law. Where required, you may opt out as described in section 13 below.
7. How do we handle your social logins?
In Short: If you choose to register or log in using a social media account, we may have access to certain information about you.
Our Services offer you the ability to register and log in using your third-party social media account details. Where you choose to do this, we will receive certain profile information from your social media provider, which may include your name, email address, and profile picture, as well as other information you choose to make public on that platform. We will use the information we receive only for the purposes described in this Privacy Notice.
8. How long do we keep your information?
In Short: We keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. No purpose in this notice will require us keeping your personal information for longer than twelve (12) months past the termination of the user's account. When we have no ongoing legitimate business need to process your personal information, we will delete or anonymise it, or securely store and isolate it until deletion is possible.
9. How do we keep your information safe?
In Short: We aim to protect your personal information through a system of organisational and technical security measures.
We have implemented appropriate technical and organisational security measures designed to protect personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Transmission of personal information to and from our Services is at your own risk.
10. Do we collect information from minors?
In Short: We do not knowingly collect data from or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction.
By using the Services, you represent that you are at least 18 or the equivalent age in your jurisdiction. If we learn that personal information from users under that age has been collected, we will deactivate the account and take reasonable measures to delete such data. Contact us at hello@brushbook.com if you believe we have collected information from a minor.
11. What are your privacy rights?
In Short: Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information.
In some regions (like the EEA, UK, Switzerland, and Canada), you may have rights under applicable data protection laws, including access, rectification, erasure, restriction, data portability, and objection to processing. You can withdraw consent at any time where we rely on consent. You can unsubscribe from marketing emails using the link in our emails or by contacting us.
If you would like to review or change your account information or terminate your account, contact us using the information below. Upon termination, we will deactivate or delete your account and information from active databases, though we may retain some information as permitted by law.
12. Controls for do-not-track features
Most web browsers include a Do-Not-Track (DNT) feature. No uniform technology standard for recognising DNT signals has been finalised. As such, we do not currently respond to DNT browser signals. If a standard is adopted that we must follow in the future, we will inform you in a revised version of this Privacy Notice.
13. Do United States residents have specific privacy rights?
In Short: If you are a resident of certain US states, you may have additional rights regarding your personal information.
The table below shows categories of personal information we have collected in the past twelve (12) months:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name | YES |
| B. Personal information as defined in the California Customer Records statute | Name, contact information, education, employment, employment history, and financial information | YES |
| C. Protected classification characteristics under state or federal law | Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data | NO |
| D. Commercial information | Transaction information, purchase history, financial details, and payment information | NO |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or other similar network activity | Browsing history, search history, online behaviour, interest data, and interactions with our and other websites, applications, systems, and advertisements | NO |
| G. Geolocation data | Device location | YES |
| H. Audio, electronic, sensory, or similar information | Images and audio, video or call recordings created in connection with our business activities | NO |
| I. Professional or employment-related information | Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us | NO |
| J. Education Information | Student records and directory information | NO |
| K. Inferences drawn from collected personal information | Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics | NO |
| L. Sensitive personal Information | NO |
We have not sold or shared personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers.
Depending on your state, you may have rights to know, access, correct, delete, obtain a copy of, and opt out of certain processing (including targeted advertising). To exercise these rights, email hello@brushbook.com.
14. Do other regions have specific privacy rights?
In Short: You may have additional rights based on the country you reside in.
We collect and process personal information under Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020 where applicable. You may request access to or correction of your personal information by contacting us. You may submit a complaint to the Office of the Australian Information Commissioner or the Office of New Zealand Privacy Commissioner if you believe we are unlawfully processing your information.
15. Do we make updates to this notice?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Last updated” date. If we make material changes, we may notify you by posting a notice on our Services or contacting you directly.
16. How can you contact us about this notice?
If you have questions or comments about this notice, email us at hello@brushbook.com.
17. How can you review, update, or delete the data we collect from you?
Based on applicable laws, you may have the right to request access, correction, or deletion of your personal information. To request to review, update, or delete your personal information, contact us at hello@brushbook.com.