Privacy notice

IslandBiz Bookings, a product of TERIMA, lets small businesses in Vanuatu take bookings and orders online. This notice explains what personal information we collect and how it is used.

Who is responsible

When you book or order from a business, that business decides what to do with your details and is responsible for them. IslandBiz Bookings provides the system the business uses and looks after the data on the business's behalf. For business owners and staff, TERIMA is responsible for your account details.

What we collect

• Customers: your name, phone number, email address (optional), the service or items you choose, the date and time, any notes you write, and the delivery address if you ask for delivery.
• Business owners and staff: name, email address, a securely scrambled (hashed) password, and activity such as sign-ins.
• Technical information: your internet address (IP address), used only to stop abuse and spam.

How we use it

• To make, confirm, change and cancel your booking or order, and to contact you about it.
• To let the business run its day: calendar, customer list, reports.
• To send emails such as booking confirmations and password resets.
• To keep the service secure and prevent spam or misuse.

We do not sell your information and we do not use it for advertising.

Who can see it

• The business you booked with, and its staff.
• Our service providers who run the system for us: Vercel (hosting), Supabase (database) and Resend (email). They process data only to provide those services.
• The IslandBiz administrator, only when needed to give support or fix a problem.
• Authorities, if the law requires it.

Some of these providers store data outside Vanuatu.

Security

Passwords are stored scrambled, connections are encrypted, and each business can only see its own data. No system is perfectly secure, so please use a strong password and keep it private.

How long we keep it

We keep booking and order records while the business uses the service and as long as needed for its records. Rate-limit records are kept for about a day. A business can ask us to delete its data when it leaves.

Your choices

You can ask to see, correct or delete your personal information. Please contact the business first, or contact us at natsongkiri2@gmail.com and we will help.

Cookies

We use only one essential cookie: a sign-in cookie for business owners and staff. We do not use advertising or tracking cookies.

Changes

If we change this notice we will update the date at the top.