Privacy policy

We collect what running a booking needs, and no more:

• Your name and phone number, and your email if you are a venue owner or on their team.
• Your business details if you apply to join: the name, city, district, how many venues and pitches, and whatever you write in the note.
• Your bookings, payments and reviews, with the amounts and times attached to them.
• Technical logs: IP address, device and browser, and the time of the request, kept for security, to stop abuse, and to trace faults.

Every field has a reason:

• To carry out a booking and pass it to the venue, and to run the venue's dashboard.
• To reach you about a booking, an application or a subscription. No marketing messages without your say-so.
• To take payment and pay the venue out, and to keep an accounting record.
• To stop abuse and fraud, to protect accounts, and to rate limit repeated requests.
• To see what breaks and what gets used, so we can fix and improve it.

We do not sell your data or trade in it. We share it only as far as necessary: the venue you booked with sees your name, your phone number and your booking; and the providers we rely on, for messages and email, hosting and taking payment, see only what their job needs. We may disclose data where Iraqi law requires it.

We keep your account data for as long as your account exists. Booking and payment records are kept after that for as long as accounting and the law require, then deleted or made anonymous. Confirmation codes expire within minutes, and technical logs are deleted after a short period.

You can ask for a copy of your data, for anything wrong in it to be corrected, or for it to be deleted. You can withdraw consent to marketing messages at any time. We will not cut your service because you used one of these rights.

Email hello@toobah.net from the address we have for you, or call 0770 000 0000 from your account's number, and say it is a deletion request. We check the request is yours, delete what we are not required to keep, and tell you what was deleted and what stayed and why. We reply within 30 days.

This site has no analytics, no advertising and no tracking, and it sets no cookies. The dashboards use cookies only for the sign-in session and to remember the interface language.

Toobah is meant for adults. If you are under 18, use it with your guardian's knowledge and consent. If we learn of an account belonging to a younger child, we delete it.

If we change this policy we publish the new version here with its date, and tell account holders about the changes that matter.

Privacy questions and deletion requests go to hello@toobah.net, or call 0770 000 0000.