Privacy Policy
Draft version · staging
This is a good-faith draft for staging and testing purposes and has not yet been reviewed by a lawyer — have it reviewed before it governs real bookings and payments.
1. Who this policy covers
This Privacy Policy explains how Go Labbayk (Malaysia) Sdn. Bhd. ("Go Labbayk", "we"), registered at 6-01, Jalan Molek 1/28, Taman Molek, 81100 Johor Bahru, Johor, Malaysia, collects, uses, and protects information from Pilgrims and Merchants using the Go Labbayk platform.
2. What we collect
- Account information: name, email, phone, and role (Pilgrim or Merchant).
- Booking information: dates, guest count, contact details you provide for a specific booking, and messages exchanged with a Merchant about that booking.
- Merchant information: business name, category, license details, and photos you upload for your listings.
- Booking reference price and status. Go Labbayk never collects or processes payment for a booking — payment is made directly between Pilgrim and Merchant, so we never see or store any payment card or bank details for a booking. Merchant subscription payments are handled directly between the Merchant and Go Labbayk Saudi, outside this Platform.
- Basic usage data (pages visited, device/browser type) for keeping the Platform reliable and secure.
3. How we use it
We use your information to operate booking requests, let Pilgrims and Merchants message each other about an active booking, verify Merchant licenses before approval, send booking-related notifications, and prevent fraud and abuse (including the rate-limiting described in Section 6).
4. Who we share it with
A Pilgrim's contact details are shared with a Merchant only for a booking that Pilgrim actually requested with that Merchant — not broadcast to every Merchant on the Platform. We use Supabase (database, authentication, and file storage) as our infrastructure provider, acting under contract to process data only as instructed by Go Labbayk. We do not sell personal data to third parties.
5. Data retention
We retain booking records for as long as needed for accounting, dispute-resolution, and legal record-keeping purposes, and account information for as long as your account remains active. You may request deletion of your account as described in Section 7, subject to records we are legally required to keep.
6. Security
Access to your data is restricted at the database level (row-level security), so a Pilgrim account can never read another Pilgrim's bookings, and a Merchant account can never read another Merchant's listings, bookings, or messages. Automated messaging is rate-limited to reduce spam and abuse. All traffic between your browser and the Platform is encrypted in transit.
7. Your rights
You may request access to, correction of, or deletion of your personal data by contacting support@golabbayk.com. We will respond within a reasonable time and in line with Malaysia's Personal Data Protection Act 2010 where applicable.
8. Cookies
Go Labbayk uses only the minimum cookies/local storage needed to keep you signed in and remember your language preference — not third-party advertising trackers.
9. Children
Go Labbayk is not directed at children under 18. Umrah bookings for minors must be made by an accompanying adult's account.
10. Changes to this policy
We may update this policy as the Platform evolves. Material changes will be reflected by updating the date at the top of this page.
11. Contact
Privacy questions or requests can be sent to support@golabbayk.com or +60 11-5913 6869.