This policy explains what personal information Book with Oliver ("we") collects when you book, why, who we share it with and how we keep it safe. We follow South Africa's Protection of Personal Information Act (POPIA).
We never see or store your card details
Payments are handled by Yoco, South Africa's payment gateway for small businesses. When you pay, you enter your card details on Yoco's secure payment page, not on ours. Your card number, expiry date and security code go straight to Yoco and never reach our systems, so we cannot see, store or reuse them. Yoco is certified to the Payment Card Industry Data Security Standard (PCI DSS), the security standard set by the card networks. From Yoco we receive only whether the payment succeeded, the amount and a payment reference.
What we collect
- Your Google sign-in: your email address and an account identifier from Google, so you can sign in. We never receive your Google password.
- Your details: first name and surname, which you enter before booking, plus the email address from your Google sign-in.
- Your bookings: dates, times, session type or package, number of participants, any notes you add, amounts paid, account credit and cancellations.
- Anonymous usage counts: which booking steps a visit reaches and whether you're on a phone or computer, linked to a random code in your browser, never to your name, account or IP address. These are deleted after 180 days.
How we use it
- To take, confirm and manage your bookings, including cancellations and account credit.
- To send your booking confirmation and refund emails.
- To tell your coach who to expect: coaches see your name and the number of participants, not your contact details or what you paid.
- To contact you about a booking if something changes.
- To see where the booking page is hard to use, from the anonymous counts.
We do not sell or rent your information, use it for advertising, or send you marketing.
Who we share it with
Only with the services that run this booking system, each of which handles it for us under its own security and privacy commitments:
- Yoco: card payments.
- Google: sign-in.
- Supabase: our secure database.
- Cloudflare: hosts this website.
- Resend: delivers our emails.
- Telegram: sends booking alerts to coaches (name and booking only).
Some of these services store data outside South Africa. Where they do, it is protected by safeguards comparable to POPIA's. We will also disclose information if the law requires it.
How we keep it safe
All traffic to this site is encrypted (HTTPS). Your information is held in a database that only our booking system can reach, and staff need their own sign-in to see bookings. Coaches only see their own sessions.
How long we keep it
We keep your account and booking history while your account is in use, and booking and payment records for as long as tax and accounting law requires. Anonymous usage counts are deleted after 180 days.
Your rights
You may ask to see the personal information we hold about you, have it corrected, or have it deleted. You can edit your details yourself under the person icon at the top of the page. We can't delete an account while it has an upcoming booking or unused credit. You may also object to how we use your information, and you can complain to South Africa's Information Regulator (inforegulator.org.za).
Your browser
We don't use advertising or tracking cookies. The page keeps a few small items in your browser to keep you signed in, hold your booking while you pay, and hold the random code for the anonymous counts.
Contact us
For any privacy question or request, email oliver@ngmevents.win.
Last updated 9 October 2026