1. Introduction & Scope
Ash's Reboot ("we", "us", or "our"), ABN 82 873 354 063, based in Morningside, QLD, is committed to protecting the privacy of your personal information. This Privacy Policy explains what we collect, why, how we use and protect it, and your rights. We handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), and we also extend GDPR (EU/UK) and CCPA (California) rights to all customers as described below. This policy applies when you use our online booking form, home pickup/delivery service, club collection bins, or customer portal.
2. Personal Information We Collect
To take and fulfil a booking we collect only the minimum details necessary: your name and mobile number (used as your customer reference); email address; suburb and, for home pickup, your physical address and delivery-access instructions; boot brand, model, size and current-condition description; before and after photos; voucher code (if used); and service transaction records (clean type, price, dates, job stage). We do not collect or store full credit card numbers or bank details — digital payments are handled by certified third-party payment providers and mobile EFTPOS terminals.
3. Why We Need It (Purpose & Lawful Basis)
We use your information to log, label and track your boots through the Reboot Protocol; schedule pickups and signature-required home deliveries; send job-status updates via SMS/email; process payment and issue receipts; contact you if an operational or safety issue arises; and, with your separate opt-in consent, send occasional service updates. Our lawful basis under GDPR is performance of the contract (taking and fulfilling your booking), with explicit opt-in consent recorded for any direct marketing.
4. Categories of Personal Information (CCPA)
At the point of collection we capture the following categories of personal information: contact identifiers (full name, mobile, email), location data (suburb and home address where home pickup is selected), equipment/transaction details (boot brand, model, size, condition, photos, clean type, price), and usage/feedback data when you complete a survey. We do not collect Sensitive Personal Information as defined by CCPA.
5. Collection & Consent
We collect information directly from you when you submit the booking form, scan a clubhouse QR code, or contact us. Before submitting a booking you must tick the explicit consent box: “I agree to the collection and handling of my information in accordance with the Privacy Policy.” We store that consent verbatim, the source (booking_form), and an ISO timestamp on your job record. Marketing communications require a separate opt-in and can be withdrawn at any time.
6. How We Use Your Information
We use your information strictly to operate our local service: identifying and labelling boots in our lab, sending automated job tracking updates, managing pickup and delivery routes across Morningside and surrounding suburbs, processing payments and accounting, and contacting you about operational issues. We never sell, trade or rent your personal contact details.
7. Use Limitation & Data Minimisation
We limit collection to the fields required to fulfil your booking and meet our record-keeping obligations. We do not use your information for secondary purposes unrelated to the service, and we do not profile you or make automated decisions about you.
8. Disclosure & Sharing
Your information is only shared, under confidentiality obligations, with trusted cloud providers that host our database, booking infrastructure (including Base44), and SMS/email delivery — and with relevant local club officials only if strictly required to resolve a lost-and-found issue or coordinate clubhouse collection-bin access. We may disclose information where required by Australian law, court order, or law enforcement in Queensland.
9. We Do Not Sell Your Data (CCPA Non-Sale Notice)
Ash's Reboot does not sell personal information, and we have not sold personal information in the preceding 12 months. We do not share personal information for cross-context behavioural advertising. California residents have the right to know what personal information we collect, to request deletion, and to opt out of any future sale — as we do not sell data, no opt-out is required, but you may still request deletion at any time.
10. Photos, Media & Youth Privacy
Before and after photos document pre-existing conditions and cleaning results. Unless you tell us otherwise, anonymised transformation photos may appear in our marketing (e.g. the website before/after gallery). We respect athlete privacy, especially minors — we will never publish an athlete's full name, address, or sensitive personal details alongside marketing images without explicit written parental/guardian consent. You can opt out of photo marketing at any time by contacting us.
11. Data Security & Storage
Your information is stored on secure, encrypted, access-controlled cloud databases. Access is limited to the business owner and authorised administrators. No physical paper copies of your contact information are retained on-site. No system can be guaranteed 100% secure, but we take reasonable steps to protect your data.
12. Data Retention
We retain your information only as long as reasonably required to provide the service and meet legal, tax and record-keeping obligations, after which it is securely de-identified or permanently deleted. Booking and transaction rows are retained for accounting; personal identifiers attached to them are redacted upon an erasure request.
13. Your Rights — Access, Correction & Deletion
You may request access to, or correction of, the personal information we hold about you. Under GDPR (EU/UK) you have the Right to be Forgotten — you may ask us to erase your personal data, and we will redact personal identifiers from your Customer record and linked jobs (keeping anonymised transaction rows for accounting) upon verified request. Under CCPA, California residents may request deletion of their personal information. To exercise any right, email us using the details below and we will respond within a reasonable time (generally 30 days).
14. Australian Privacy Principles (APPs)
Under the APPs we notify you at or before collection (this policy) of what we collect and why (sections 2–3). You may complain to us about a breach of the APPs and, if unresolved, to the Office of the Australian Information Commissioner (OAIC). We will take reasonable steps to implement practices, procedures and systems that ensure compliance with the APPs.
15. International Transfers & Geo-Restriction
Ash's Reboot operates in Australia and currently only accepts bookings submitted from within Australia. A server-side geo-location check and a client-side browser check work together to restrict bookings to Australian locations. Where your data is processed or stored by overseas cloud providers (e.g. infrastructure hosting), we rely on the provider's standard contractual or equivalent safeguards.
16. Marketing Communications
Where you have consented, we may send occasional updates or offers. You can unsubscribe at any time using the link in the message or by contacting us. Consent for marketing is separate from the booking consent and never affects your ability to book a service.
17. Cookies & Analytics
Our site may use basic analytics to understand usage and improve the service; this does not identify you personally.
18. Children's Privacy
Bookings are typically made by a parent or guardian on behalf of a junior player. We do not knowingly collect personal information directly from children. Parents or guardians may contact us to review or request deletion of information relating to their child.
19. Changes to This Policy
We may update this policy from time to time; the "Last updated" date above reflects the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.
20. Complaints & Contact
Questions, data-access requests, corrections, or erasure requests? Email our privacy contact at privacy@ashsreboot.com.au or write to Ash's Reboot, Morningside QLD 4170 · ABN 82 873 354 063 · Owner: Ashley Michael Pardey. Unresolved APP complaints may be made to the Office of the Australian Information Commissioner (oaic.gov.au).