Privacy policy

SmartBooking is operated by Globocon Software (Australia). Effective from 5 October 2026. Questions: smartbooking@globoconsoftware.com.

1. Who we are

SmartBooking is an event booking platform for community organisations in Australia. Organisations register, publish events and sell or give away tickets; members of the public book those tickets; volunteers help run the events and check people in at the door. The website at smartbooking.au and the SmartBooking mobile apps are the same service — the apps show the website.

We handle personal information under the Australian Privacy Act 1988 and the Australian Privacy Principles. This policy explains what we collect, why, who sees it, and how to get it corrected or deleted.

2. What we collect

We only collect what the service needs to work. Depending on how you use SmartBooking:

If you…	We collect	Why
Book tickets	Your name, email address, mobile number (optional), the name of each person attending, any answers to the organiser's registration questions (such as a meal choice or dietary needs), what you booked, when, and the ticket numbers and QR pass codes issued to you.	To issue your passes, email them to you, let the organiser admit you at the door, give the organiser the answers they asked for, and answer questions about your booking.
Pay for tickets	The amount, currency, and Stripe's reference numbers for the payment. We never see or store your card number. Card details are entered on Stripe's secure payment page.	To confirm the payment, issue refunds, and keep the financial records the law requires.
Register an organisation	Your name, email address, password (stored only as a one-way hash), mobile number, and the organisation's name, type, contact details, address, registration or ABN details and website.	To create your account, approve the organisation, and run its events and payouts.
Publish events	Event details, venue and address, ticket types and prices, and any images you upload.	To show the event publicly and take bookings for it.
Are a volunteer	Your name, mobile number, email address, age in whole years, skills, and — where your organisation records it — the date it verified your Working With Children check and the check's reference number. If you activate portal access, a login (email and hashed password).	So the organisation can assign you to events, meet age requirements for events involving children, and give you access to check attendees in.
Use the site or app at all	Standard server logs: IP address, browser or app version, pages requested and the time, plus error reports.	To keep the service secure and working.

What we do not do. We do not run advertising, we do not build profiles, we do not use analytics or tracking SDKs anywhere in the booking, account, organiser or volunteer pages, and we never sell personal information. The one exception is the Google Analytics tag on the public home page, described in section 5.

3. How we use it

Deliver the service: bookings, passes, payments, refunds, check-in, volunteer assignments.
Send the emails the service needs: booking confirmations and passes, account and password emails, volunteer invitations and event notices. We do not send marketing email.
Support: answer your questions and resolve problems with a booking or account.
Safety and compliance: prevent fraud and misuse, keep financial records, and meet legal obligations.

The organiser of an event you book. They see the booking: buyer and attendee names, contact details and ticket numbers. They need this to run the event.
Volunteers assigned to an event. They see attendee names and ticket numbers for that event only, to check people in.
Stripe (payment processing). Your card details go directly to Stripe; Stripe sends us the outcome and its references. Stripe's own privacy policy applies to the payment page.
Our email delivery provider, which relays the emails listed above.
Google Maps, used on organiser pages to find a venue address. Google receives the address searched, not your booking data.
Authorities, where the law requires it.

These providers process data on our instructions. Stripe and Google may process data outside Australia (including in the United States) under their own safeguards.

5. Cookies and device access

Sign-in cookie — keeps you signed in. "Keep me signed in" extends it to 30 days.
Security cookie — protects forms against forgery.
Theme preference — light or dark, stored only in your browser.
Google Analytics — our public home page uses Google Analytics to count visits and see which parts of the page are used. Google sets its own cookies for this and receives your IP address and browser details; we see only aggregated reports. It runs on the home page only, not on booking, account or organiser pages. You can opt out with Google's browser add-on or by blocking cookies for that page.
Camera — the volunteer check-in page asks for camera access to scan QR passes. Scanning happens on your device; no image is uploaded.

There are no advertising cookies. The only analytics is the Google Analytics tag on the public home page described above.

6. How long we keep it

Bookings and payment records — 7 years, as Australian tax and financial-record law requires.
Accounts — until you delete them (see below).
Volunteer records — until the organisation removes you from its volunteers, or you delete your account.
Server logs — up to 90 days.

7. How we protect it

All traffic is encrypted in transit (HTTPS). Passwords are stored only as salted one-way hashes. Card details never touch our servers. Access to booking and volunteer data is limited to the organisation it belongs to, and to our staff when needed for support.

8. Your rights

You can ask us to:

Access the personal information we hold about you.
Correct anything that is wrong. Organisers and volunteers can edit most details themselves after signing in.
Delete your account and personal information — see the next section.

Email smartbooking@globoconsoftware.com. We reply within 30 days. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

9. Delete your account

Anyone with a SmartBooking login — an organisation administrator, a volunteer or a ticket buyer, including accounts that sign in with Google — can delete their account and personal information. You can do it yourself in the app or on the website, or ask us by email.

Delete it yourself, in the app or on the website

Sign in and open Your profile (volunteers: Profile).
At the bottom of the page, choose Delete account.
Enter your password (accounts that only use Google must have signed in within the last 15 minutes), type DELETE and confirm.
Your account is deleted straight away, you are signed out on every device, and we email you a confirmation.

The only administrator of an organisation that still has upcoming events or money not yet paid out cannot delete their account straight away. The page explains what is outstanding: add another administrator, or finish the events and have the money paid out, and you can then delete your account. You can also contact us for help.

Or ask us by email

Email smartbooking@globoconsoftware.com with the subject "Delete my account", from the email address your account uses.
We reply to that address to confirm it is really you. No password or other details are needed in the email.
Once you confirm, we delete the account within 30 days and email you when it is done.

What is deleted

Your login, name, email address, mobile number and password hash.
Your volunteer record, skills, age and Working With Children details, and the events you are assigned to.
Any unsent invitation or password links.

What we have to keep

Booking and payment records for events, for 7 years under Australian financial-record law. Where you were the buyer, we remove your name and contact details from these records and keep only the transaction.
Records of who checked attendees in, kept without your name.
Your organisation, if you are its only administrator and it has events with bookings. We will ask you to nominate another administrator first, or to close the organisation, so ticket holders are not left without a contact.

Booked tickets without an account? A guest booking is not linked to an account. Email smartbooking@globoconsoftware.com from the address used on the booking and we will remove your name and contact details from it, subject to the financial-record rule above.

10. Children

SmartBooking is for adults. Organisations may record that a volunteer is under 18 (as an age in whole years, never a date of birth) so that events with age requirements are staffed correctly, and may record Working With Children checks for events involving children. We do not knowingly create accounts for anyone under 16.

11. Changes and contact

When this policy changes we update the effective date at the top and, for material changes, tell account holders by email. The current version is always at smartbooking.au/privacy.

Privacy questions and requests: smartbooking@globoconsoftware.com.