Privacy Policy

Bookanto is an online appointment-booking platform for veterinary clinics, operated by ApexHQ Vet in Australia. When you book through this page, you are booking with your chosen clinic; we provide the technology that makes the booking work. Your clinic remains responsible for the veterinary records it keeps in its own practice systems.

To manage your booking we collect: your name, mobile number, email address and home address; details of additional contacts you choose to add; your pet's details (name, species, breed, date of birth, microchip number, desexing and insurance status); your appointment type and reason for visit; and a record of SMS verification codes sent to your mobile. If you sign in with Apple or Google, we receive only your basic identity (name and email) from them.

We use your information solely to create, confirm, remind you about, modify or cancel your appointments; to pass your booking to your clinic's practice management system; and to recognise you on your next visit so you don't have to re-enter your details. We do not sell your data, and we do not use it for advertising.

Your booking is shared with the clinic you book with (including its practice management system). We also rely on a small number of service providers to operate the platform: Supabase (database hosting, Sydney, Australia), Vercel (application hosting), Twilio (SMS messages), Google (address autocomplete and optional sign-in) and Apple (optional sign-in). Each provider processes data only on our instructions.

Our primary database is hosted in Sydney, Australia. Some service providers listed above process limited data (such as SMS delivery) on infrastructure outside Australia.

We keep your booking history while your clinic uses our platform so that returning bookings are faster. SMS verification records are automatically deleted after 30 days. You can ask us to delete your information at any time (see Your rights below).

You can ask us to show you the information we hold about you, correct it, export it, or delete it. We honour these requests under the Australian Privacy Act 1988 and, where it applies, the EU/UK GDPR. To make a request, contact us at the address below or ask your clinic — we respond within 30 days.

All data is transmitted over encrypted connections (TLS) and stored encrypted at rest. Access to your data is restricted by role, sign-in to our internal tools is authenticated, and administrative actions are recorded in an audit log. We sign in pet owners with one-time SMS codes, so we never store a password for you.

We use only strictly necessary cookies: one to keep you signed in during your booking, and a short-lived one during Apple/Google sign-in. We use no analytics, advertising or tracking cookies of any kind.

Privacy questions or requests: ApexHQ Vet — privacy@apexhq.com.au. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (oaic.gov.au).