Yuma Book

Privacy policy

Effective 13 September 2026. Last updated 13 September 2026.

This policy applies to personal information collected by Yuma IT Pty Ltd (ABN 62 684 389 839) (we, us or our) through Yuma Book at https://yumabooking.com. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Using the service, creating an account, or sending us an enquiry is an agreement to this policy.

1. Who we are

Yuma IT Pty Ltd is at 49 Phillip Ave, Watson ACT 2602, Australia. Contact hello@yumait.com.au for access, correction, deletion or a privacy complaint. You can also write via Contact.

2. What we collect

Depending on how you use the service, we may collect:

Account details: name, email, phone, password hashes, passkeys, authenticator metadata, session tokens and organisation membership.
Business details: trading name, legal name, ABN or ACN (looked up through our business-number service), category, menus, availability, service area, insurance and food-business registration documents.
Event and booking records: event details, quotes, bookings, invoices, messages, reviews, applications and run sheets.
Files you upload to private storage (compliance documents, menus, logos, evidence). Authorised counterparties on a booking or application may receive only what you share.
Technical data: IP address, device and browser data, security logs, and bot-check tokens (Cloudflare Turnstile) on public write forms.
Marketplace funnel counts: a hashed account id or anonymous token, event kind, Australian state and vendor category. We do not store message bodies, emails, suburbs or precise locations in those counts. Counts older than 90 days are ignored. Staff, tests and bots are separated from production rates.

We do not require sensitive health information. If you put allergen or dietary notes in a booking or menu, we store them as part of that record.

3. How we use it

to create and secure accounts, including abuse prevention
to publish listings you choose to make public
to run quotes, bookings, invoices, reminders and messages between the parties
to check food-business registration before a listing goes public
to look up ABN/ACN details you request
to send transactional email (password reset, booking notices)
to improve reliability and understand marketplace funnel rates
to meet legal, tax, audit and dispute-handling duties

We do not sell personal information. We do not use it for unrelated direct marketing unless you ask us to.

The other party to a quote, booking, application or listing enquiry, to the extent needed for that transaction.
Teammates in your organisation, according to the role you assign.
Infrastructure providers that host the service (currently Cloudflare, including Workers, D1 and private object storage).
Email delivery for transactional messages, and bot-check and security services.
Our ABN lookup service (Kunthi) when you run a lookup. We send the identifier or name you enter, not your password.
Payment partners if live payments are enabled. Card data is handled by that partner, not stored as raw card numbers on Yuma Book.
Address search suppliers (for example Mapbox) when that feature is configured. Those results are temporary and are not stored as a standing address book.
Professional advisers, insurers, or authorities where we reasonably believe we must disclose.

Location dataset attribution is on Location data.

5. Overseas disclosure

The service is hosted on Cloudflare’s network. Personal information may be processed in Australia and in other countries where that network operates. Australian data residency is not promised. Our providers are required to protect information they process for us. By using the service you consent to this overseas processing.

6. Retention and deletion

We keep account and workspace records while the account is active. Account deletion can be requested in settings. There is a 30-day delay before anonymisation. Deletion is refused while you are the sole owner of an organisation, or while that organisation has open bookings or retained payment and invoice records. Immutable audit and tax records may be kept after an account is closed. Funnel counts older than 90 days are ignored.

You can download a copy of your profile, memberships, booking metadata and messages you wrote from workspace settings. Private files belonging to other parties and sign-in secrets are excluded.

7. Access, correction and complaints

You may ask us for access to, or correction of, personal information we hold about you, or lodge a privacy complaint, at hello@yumait.com.au. We will respond within a reasonable time. If you are not satisfied, you may contact the Office of the Australian Information Commissioner.

8. Security

We use HTTPS, access controls, private file storage, hashed passwords, optional passkeys and multi-factor authentication, and bot checks on public write forms. No method of transmission or storage is completely secure. Tell us promptly if you think an account is compromised.

Public vendor profiles show only the fields you publish. Compliance documents stay private unless you share them for a booking or application.

9. Cookies and similar technology

We use cookies and similar storage for sign-in sessions and security. We use Cloudflare Turnstile on public forms to reduce automated abuse. When analytics are enabled we use Cloudflare Web Analytics, which does not use advertising cookies. You can block cookies in your browser; the service may not sign you in without them.

10. Children

Yuma Book is aimed at businesses and adults organising events. Do not create an account for a child under 18.

11. Changes

We may update this policy by publishing a new version on this page. The date at the top is the current version. Continued use after a change is acceptance of the update.