Privacy Policy

Zero Miles Per Hour Ventures operates Booklyn, a business management and customer engagement platform.

Business name: Zero Miles Per Hour Ventures
Country: Ghana
Email: hello@booklyn.me

For privacy-related questions or requests, contact us at the email above.

Because Booklyn serves businesses, we process information in more than one role, depending on the situation.

Information about our users. When a business owner, employee or admin creates an account, we're generally the data controller for information relating to that user.

Information a business manages about its own customers. When a business uses Booklyn to collect information from its own customers, that business generally decides why and how the information is collected — the business is the data controller and Booklyn processes it on the business's behalf as a data processor. The business is responsible for deciding what to collect, giving appropriate privacy notices, getting required consents, responding to customer requests, and configuring retention and access appropriately; we provide the technical tools and safeguards to support that.

If you're a customer of a business using Booklyn, please also check that business's own privacy notice — it's responsible for its own use of your personal information.

Depending on how you use Booklyn, we may collect:

Account information — name, email, phone number, business name and address, login credentials, and other details needed to create and manage your account.

Business information — business description, branches, opening hours, services, products, prices, staff, logo, images and domain details.

Customer information — name, phone, email, booking and purchase history, preferences, notes, membership and subscription details, and intake-form responses, as configured by the business. What an intake form asks for is up to the business — we process it to provide the Platform, and businesses are responsible for not collecting unnecessary or unlawful information through their forms.

Transaction information — transaction identifiers, payment status, amounts, currency, billing and refund information. This includes payments a business records itself against a booking, such as cash, mobile money, card or bank transfer received outside the Platform, any balance still due on a booking, and notes a business adds about a payment. Where a third-party payment provider processes a payment, we generally don't receive or store full card details, and that provider processes information under its own privacy policy.

Online meeting information — for an online booking: the email address used to send the meeting link (which can be different from the one on the account), the meeting link and meeting identifier, and, where a business has connected its Google or Zoom account, the connected account's email address and the access tokens needed to keep that connection working. See the section on Google and Zoom connections below.

Notification settings — where you choose to receive booking alerts on your device, the technical details your browser provides so we can send them.

Communications — support requests, feedback and correspondence with us.

Technical information — IP address, device and browser type, operating system, log and usage information, and other security-related information collected automatically.

We may use personal information to create and manage accounts; operate the Platform; process bookings, appointments and subscriptions; provide point-of-sale, shop, customer-management, intake-form, campaign and WhatsApp features; create and manage online meeting links for online bookings; send transactional notifications and appointment reminders; check with payment providers whether a payment has been completed and keep booking and payment records accurate; provide reports and analytics; improve our Services and provide support; detect fraud and abuse; maintain security; process payments and billing; communicate important service information; comply with legal obligations; and enforce our Terms of Service.

We aim to process personal information lawfully, fairly and only for purposes that are necessary, relevant and appropriate — consistent with Ghana's Data Protection Act, 2012 (Act 843). Depending on the circumstances, our legal basis may be your consent, that processing is necessary to provide a service you've asked for or to perform a contract, that it's required by law, that it's necessary to protect someone's vital interests, or that it's necessary for a legitimate interest permitted by law. Where we rely on consent, you may withdraw it where the law allows — withdrawing doesn't affect processing that already happened.

We may send you information about Booklyn, updates, offers and other relevant communications where the law permits. You can opt out using the unsubscribe link in an email, the instructions in an SMS, your account preferences, or by contacting us — we may still send essential transactional or service messages such as security alerts, billing notices or appointment-related messages.

Separately, businesses using Booklyn may use our tools to send email, SMS and other messages to their own customers. The business determines the purpose and content of those messages, and your relationship regarding that communication is primarily with the business, not us. If you no longer want marketing messages from a business, contact that business directly or use the opt-out mechanism it provides.

We use cookies and similar technologies to keep you signed in, remember preferences, understand how the Platform is used, maintain security, and improve functionality. You can manage cookies through your browser settings — disabling some may affect how the Platform works.

We may also use analytics to understand how people interact with Booklyn — spotting technical problems, improving usability, understanding feature usage, monitoring performance and detecting suspicious activity. Where required, we'll provide appropriate choices or get consent for these technologies.

We don't sell personal information. We share it with trusted service providers where necessary to run the Platform — cloud hosting and infrastructure, payment processors, email and SMS providers, WhatsApp/messaging providers, video-meeting providers (Google Meet and Zoom, only where a business has connected its account), domain and DNS providers, analytics, customer support and security providers, and professional advisers. We require them to handle personal information consistently with applicable contractual and legal requirements.

We may also disclose information where you've authorised it, to comply with a legal obligation or lawful request, to protect our rights or property, to prevent fraud or abuse, to protect anyone's safety, or in connection with a merger, acquisition or sale of all or part of our business.

Some of our service providers may operate outside Ghana. Where personal information crosses borders, we take reasonable steps to make sure it receives appropriate protection and that the transfer complies with applicable data protection requirements. If you're a business using the Platform, you remain responsible for telling your own customers, where required, about relevant processing and international transfers.

We use reasonable technical and organisational safeguards — access controls, authentication, encryption where appropriate, monitoring, logging and backups — to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No online system can be guaranteed completely secure, and you're also responsible for protecting your own account credentials and limiting access to authorised people.

We keep personal information for as long as reasonably necessary to provide our Services, maintain your account, fulfil contractual obligations, provide support, keep business and financial records, resolve disputes, prevent fraud, and comply with legal requirements. Once it's no longer needed, we securely delete, anonymise or otherwise dispose of it. Access tokens for a connected Google or Zoom account are stored encrypted and are deleted when the connection is removed or the business closes its account.

If we become aware of a security incident involving personal information, we'll take reasonable steps to investigate, contain and fix it, and notify the relevant authorities and affected individuals within the required timeframe where the law requires it.

Depending on applicable law, you may have rights to know whether your information is being processed, request access to it, request correction of inaccurate information, object to certain processing, withdraw consent where that's the legal basis, request deletion or restriction where applicable, exercise rights around direct marketing, and complain to the relevant data protection authority. Ghana's Data Protection Commission recognises rights including access, objection and rights relating to direct marketing under the Data Protection Act. Some rights may be subject to legal limits.

To make a privacy request, contact us at hello@booklyn.me, with enough detail for us to understand and, where reasonably necessary, verify your request. If your information is held by a business using Booklyn, we may direct your request to that business where it's the relevant controller. We aim to handle valid requests within the period applicable law requires.

Booklyn is primarily intended for businesses and their customers. Unless a specific feature says otherwise, it's not intended for children below the minimum age the law allows to provide their own personal information. Businesses must not knowingly use Booklyn to unlawfully collect a child's personal information, and are responsible for complying with applicable requirements if they serve children.

A business using Booklyn can connect its own Google account and/or its own Zoom account so that Booklyn creates an online meeting link for each online booking. A business chooses whether to connect, and no connection is made without the business's own permission on Google's or Zoom's consent screen.

What we access.

• Google: with the business's permission (the Google Calendar events permission), we create, change and delete the calendar events that Booklyn itself creates for online bookings, each with a Google Meet link. We also read the email address of the connected Google account so we can show which account is connected. We do not read, list or change any other events or calendars.
• Zoom: with the business's permission, we create, change and delete the Zoom meetings that Booklyn itself creates for online bookings, and read the email address of the connected Zoom account.

What a meeting contains. The service name, the business name, the booking time and length, and the booking reference. For a Google event, the customer's email address is added as a guest so the event is on the right booking; Google is told not to send its own invitation from this step, and Booklyn sends the customer's confirmation and meeting link by email. For a Private meeting, the only person invited is the Google account the customer entered when booking; guests cannot invite others, change the event or see other guests.

What we store. The connected account's email address, the access tokens needed to keep the connection working (stored encrypted), and, on each booking, the meeting identifier and join link.

How it is used. Only to create, move and cancel meetings for that business's bookings, and to show the join link to the customer and the business. We do not use this information for advertising, we do not sell it, we do not use it to train artificial-intelligence models, and our staff do not read it except where needed to provide support, keep the Platform secure or comply with the law. We share it only with Google or Zoom to carry out the request.

Disconnecting and deleting. A business can disconnect at any time in its Booklyn settings. We then revoke the connection and delete the stored tokens. Meeting links already on past bookings stay on those bookings until the booking record itself is deleted. A business can also remove Booklyn's access from its Google account (myaccount.google.com/permissions) or its Zoom account at any time. If a business closes its Booklyn account, we delete the connection and its tokens.

Google API Services User Data Policy. Booklyn's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The Platform may link to or integrate with third-party services that operate under their own privacy policies. We're not responsible for the privacy practices of third parties we don't control — please review their policies before using them.

Payments may be processed by third-party payment providers, and payment details may go directly to them. We don't intentionally store full card numbers unless we say otherwise. We may ask a payment provider whether a particular payment was completed, using its reference, so that a booking and its payment record are correct, including when a confirmation arrives late.

Where a business connects Google or Zoom, that provider handles information under its own policy: the Google Privacy Policy and the Zoom Privacy Statement.

We may update this Privacy Policy from time to time. When we make a material change, we'll try to let you know through the Platform, email or another appropriate method. The "Last updated" date at the top of this page shows when it was most recently revised.

Questions, concerns or requests about this Privacy Policy or your personal information? Contact us:

Zero Miles Per Hour Ventures
Accra, Ghana
Email: hello@booklyn.me

You may also have the right to contact Ghana's Data Protection Commission about how your personal information is handled.