Privacy Policy

1. Scope

This policy explains what personal information MyBiznest collects, why we collect it, who it is shared with, and the choices you have. It applies to customers, guests, business owners, and staff members.

Businesses that use MyBiznest are separately responsible for how they handle the customer information they receive through the platform.

2. Information we collect

• Account information: name, email address, phone number, password (stored only as a secure hash), and role.
• Business information: business name, description, categories, address or service area, opening hours, staff, services, products, media, and links.
• Transaction information: bookings, orders, amounts, fulfillment choices, delivery or pickup addresses, order status, and refund requests.
• Guest information: the name, email address, and phone number supplied at guest booking or checkout, so the business can fulfil the request and you can access it by secure link.
• Communications: messages and attachments exchanged through the platform, support tickets, and reviews.
• Legal records: which policies you accepted, the version accepted, when, in what context, and technical request details such as browser user agent and IP address.
• Technical data: device and browser information, log data, and basic analytics such as visits to a business link.

3. Payment data

Online card payments are processed by Stripe, our payment provider. Card numbers, CVC codes, and full payment credentials are submitted directly to Stripe and are never stored by MyBiznest.

For payments processed through MyBiznest we store a payment reference, the amount, the currency, the fee breakdown, the payment status, and the refunded amount. This is what allows a payment to be verified and refunded through the platform.

For payments made directly to a business outside MyBiznest — cash, external payment apps, bank transfers, or independently processed card payments — MyBiznest holds no payment record beyond the fact that the customer selected a direct payment method. We do not receive, verify, monitor, or track those payments, and therefore cannot confirm, reconcile, or refund them.

Businesses that accept online payments complete identity and banking verification with Stripe. That information is held by Stripe under its own terms; MyBiznest only receives the resulting account status.

4. How we use information

• To operate the platform: accounts, listings, bookings, orders, messaging, and notifications.
• To process online payments, platform fees, payouts, refunds, and subscriptions.
• To provide customer support and resolve disputes.
• To keep legally required records of policy acceptance and transaction terms.
• To detect, prevent, and investigate fraud, abuse, and security incidents.
• To improve the platform and, where you have not opted out, to send optional marketing about MyBiznest.

5. Who we share information with

MyBiznest does not sell personal information.

• The business you book or order from receives the contact and fulfillment details needed to complete your request.
• Stripe, for payment processing, payouts, subscriptions, and fraud checks.
• Our infrastructure, database, storage, and email delivery providers, acting on our instructions.
• Law enforcement, regulators, or other parties where we are legally required to do so, or to protect the rights and safety of users.
• A successor entity in the event of a merger, acquisition, or sale of assets.

6. Data isolation and security

Access to data is enforced at the database level. Customers, guests, staff, and businesses can only read the records that belong to them or to the business they are part of. Administrators have read access to platform records for support, compliance, and fraud prevention.

We use encryption in transit, hashed credentials, signed private links for guest access, scoped upload URLs for media, and session timeouts for administrative access. No system is perfectly secure, but we work to protect data proportionately to its sensitivity.

7. Retention

We keep account data while your account is active. Transaction records, payment records, policy acceptance records, and transaction policy snapshots are retained after that for accounting, tax, dispute, and legal-compliance purposes.

Policy acceptance records and transaction snapshots are historical and read-only. They are never edited or back-dated, including when a policy is updated.

8. Your choices and rights

• Access and update most of your information in your account settings.
• Control transactional and marketing email through notification settings; security and payment notices cannot be switched off.
• Request deletion of your account; we will remove or anonymise personal data except where we must retain records by law.
• Depending on where you live, you may have rights to access, correct, export, restrict, or object to processing of your data. Contact support to exercise them.

9. International transfers and children

MyBiznest operates internationally and information may be processed in countries other than your own, with appropriate safeguards in place.

MyBiznest is not intended for children. We do not knowingly collect personal information from anyone under 18.

10. Changes

We may update this policy. The version number and effective date at the top of this page always show the current release, and material changes are notified before they take effect.

Questions about this policy can be sent to support through the MyBiznest Help Center.