Privacy Policy
Last updated: October 19, 2025
1. Who we are
Seglo is operated by Daniel Choi as an Australian sole trader. When this Privacy Policy uses "Seglo", "we", "us", or "our", it refers to the Seglo platform, including our booking, payments, communication, and business management tools for service providers and their clients.
We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where we make Seglo available to individuals located in the United Kingdom or European Economic Area, we also follow the requirements of the UK GDPR and EU GDPR.
You can contact us about privacy matters at privacy@seglo.co. For general support questions, use support@seglo.co. If we cannot resolve your privacy concern, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or with your local data protection authority.
2. Who this Privacy Policy covers
This policy applies to the following people:
- Visitors to our websites, landing pages, support channels, and social media accounts.
- Businesses that create a Seglo account to manage services, locations, staff, or payments.
- Team members invited by a business to use Seglo for scheduling, payroll, or messaging.
- Clients who book or receive services through Seglo, whether online, in-app, or via a business-managed workflow.
- Prospective partners, contractors, or suppliers who contact us or are referred to us.
- People who connect third-party services to Seglo, for example Google Calendar, Google sign-in, or Instagram.
Our business customers may have their own privacy notices that explain how they use client and staff information. Where you deal directly with a business through Seglo, that business is responsible for complying with its own privacy obligations in addition to ours.
3. Personal information we collect
Information you provide directly
- Account identifiers such as your name, email address, phone number, role, and password.
- Business profile details including business name, description, trading name, ABN/ACN, address, and service locations.
- Team roster information such as staff names, roles, working hours, pay configuration, permissions, and availability.
- Client information recorded by you, a business, or Seglo during bookings (for example contact details, preferred services, notes, reminders, loyalty status, or marketing preferences).
- Support enquiries, surveys, beta programme feedback, or other communication you send to us.
Information collected automatically
- Log data, device identifiers, browser type, operating system, language, referring URLs, pages viewed, and session timestamps.
- Usage analytics about how you use Seglo features, such as bookings created, notifications sent, and performance dashboards viewed.
- Approximate location inferred from your IP address when required to secure the platform, set timezone defaults, or tailor content.
- Push notification tokens and device metadata so we can deliver mobile and browser notifications that you request.
Payment and financial details
Seglo uses Stripe to process card and direct debit payments. Stripe stores card numbers and bank account details on our behalf. We receive tokens, billing contact details, transaction history, charge outcomes, and dispute information so we can reconcile payments, calculate payouts, and prevent fraud. We may also collect Australian business banking details to enable payouts or to verify account ownership.
Communications data
- Email, SMS, in-app, or push notification content generated through the platform.
- Event logs indicating whether a message was delivered, opened, clicked, or failed.
- Voice or video call metadata if we introduce those capabilities in the future. We will update this policy before enabling new channels.
Integrated services and social accounts
If you opt to connect Google, Instagram, Meta, or other third-party accounts, we store the tokens and any data you authorise (for example calendar availability, media used for marketing, or social analytics). You can disconnect integrations at any time from within Seglo or with the third party provider. Disconnecting removes future data syncing but may not delete historical data already imported into Seglo.
Sensitive information
Some businesses record health notes, accessibility requirements, or emergency contacts to deliver services safely. Providing this information is voluntary and should only be supplied when a client consents. Sensitive information is only used for the service requested and is subject to additional safeguards.
Information from others
We may receive information about you from the business you interact with, referral partners, publicly available sources, or authorities where it is lawful to do so. For example, a business may import its existing client list into Seglo, or we may receive fraud risk information from payment partners.
We do not knowingly collect personal information from children under 16 without parental consent. If you believe a child has provided us information without consent, please contact us so we can delete it.
4. How we use personal information
We use personal information in line with the Australian Privacy Principles. Where the UK GDPR or EU GDPR applies, each purpose below explains the relevant legal bases.
- Provide and improve the platform. We use personal information to create and manage accounts, configure locations and staff, process bookings, deliver reminders, calculate payroll, and surface analytics. Legal grounds: performance of a contract, our legitimate interests in operating a secure platform, APP 3 and APP 6.
- Process payments and payouts. We share information with Stripe to take payments, manage subscriptions, issue refunds, and conduct financial reporting. Legal grounds: performance of a contract, compliance with legal obligations, APP 11.
- Support and communicate with you. We respond to requests, troubleshoot issues, send service notices, and provide training. Legal grounds: performance of a contract, legitimate interests, APP 6.
- Personalise features and marketing. We tailor dashboards, recommendations, promotions, and onboarding flows and send marketing messages when you opt in. Legal grounds: consent, legitimate interests, APP 7 (direct marketing).
- Protect our platform and users. We monitor for fraud, abuse, unauthorised access, or policy violations, and we audit system activity. Legal grounds: legitimate interests, compliance with legal obligations, APP 11.
- Comply with law and enforce agreements. We retain records for taxation purposes, respond to lawful requests, enforce our Terms of Service, and defend legal claims. Legal grounds: compliance with legal obligations, legitimate interests.
5. Legal reasons we rely on
Depending on the activity, we rely on one or more of the following lawful bases:
- Consent: for marketing emails or SMS, connecting social accounts, storing sensitive client notes, or using optional cookies. You can withdraw consent in your account or by contacting us.
- Performance of a contract: for providing the Seglo services you or your employer request, including account provisioning, bookings, point-of-sale, and payroll calculations.
- Legal obligations: for record keeping, tax, anti-money laundering, responding to regulators, and notifiable data breach reporting.
- Legitimate interests: for product development, analytics, training our teams, protecting against fraud, and ensuring network security. We balance these interests against your rights and implement safeguards.
- Vital interests: in rare cases we may process information to protect an individual from serious harm, for example when handling an emergency contact request.
6. Businesses and Seglo as data controllers
Seglo acts as an independent data controller for the personal information we collect about platform users to operate and secure our services. When a business imports or creates client or staff records, that business is also a data controller. Seglo processes those records to provide the service, and the business decides how it interacts with its clients. If you are a client of a Seglo business, please contact that business if you wish to exercise privacy rights that relate to services they provide.
We may offer features that allow businesses to export or forward personal information to other systems. Seglo is not responsible for how those third-party systems use the exported data.
8. International data transfers
Seglo is based in Australia and uses cloud infrastructure that may store or process data in Australia, Singapore, the United States, the European Union, or other locations where our service providers operate. We take steps to make sure international transfers comply with applicable laws, including using contracts based on the EU Standard Contractual Clauses or the UK International Data Transfer Addendum when required.
By using Seglo, you consent to us transferring your information to these locations for the purposes described in this policy. We only transfer personal information where it is necessary to provide the services, protect our users, or meet legal obligations.
9. How long we keep personal information
We keep personal information only for as long as needed to deliver the services or meet legal obligations. Typical retention periods include:
- Account records for businesses and team members: the life of the account plus up to seven years to comply with taxation, employment, and contractual requirements.
- Booking, payment, and transaction data: at least seven years to support financial reporting, dispute resolution, and regulatory requirements.
- Communication logs and support tickets: three years after closure, unless we must keep them longer for legal reasons.
- Analytics and log data: between 12 and 24 months, unless aggregated for product insights or security monitoring.
- Marketing preferences: until you opt out, after which we keep only the minimal information required to honour your request.
We may retain anonymised or aggregated information that does not identify you to improve our services and compile statistics.
10. How we protect personal information
- Encryption in transit (HTTPS/TLS) and encryption at rest for databases and backups.
- Role-based access controls, audit logging, and restricted production access for staff.
- Multi-factor authentication, password hashing, and session expiry controls.
- Continuous monitoring, automated alerts, and regular vulnerability management.
- Due diligence and contract requirements for vendors handling personal information.
- Incident response and breach notification procedures that include notifying affected users and regulators when legally required.
No system is completely secure. If we become aware of unauthorised access that is likely to result in serious harm, we will notify affected individuals and the OAIC or other regulators as required.
11. Your privacy choices and rights
You can manage many privacy choices directly in your Seglo account, including updating profile details, managing staff permissions, adjusting notification preferences, and disconnecting integrations.
You also have the right to request access to personal information we hold, ask us to correct inaccuracies, object to certain uses (such as direct marketing), or request deletion where permitted by law. We respond to verified requests within 30 days, or within the period required by applicable law.
If you are located in the UK or EEA, you may also request data portability, ask us to restrict processing, or lodge a complaint with your local supervisory authority. Contact details for EU authorities are available at edpb.europa.eu, and for the UK at ico.org.uk.
To submit a privacy request, email privacy@seglo.co. We may ask for additional information to verify your identity or to clarify the scope of your request.
13. Third-party services and links
Seglo may include links to websites or services operated by third parties. Those third parties are responsible for their own privacy practices. We encourage you to review their privacy policies before sharing any personal information with them. Seglo is not responsible for the content or privacy practices of external sites.
14. Changes to this Privacy Policy
We update this policy when our practices change or when laws require it. We note the effective date at the top of the page. If we make material changes, we will alert you through the Seglo dashboard, by email, or via another prominent notice.
15. How to contact us
Email: privacy@seglo.co (privacy enquiries), support@seglo.co (general support)
In-app: Use the help section within your Seglo account
If you raise a complaint, we will acknowledge it in writing and investigate it promptly. If you are not satisfied with our response, you can contact the OAIC or your local data protection authority.