Privacy Policy

1. Overview

This Privacy Policy explains how Navi, available through bookingnavi.com, collects, uses, stores, and shares information in connection with its independent booking concierge service.

Navi is operated by Crabber, a business registered in Hong Kong. Crabber is the data user responsible for personal data collected through Navi. Contact details are in section 13.

By using the website, submitting a booking request, starting checkout, contacting support, or completing a purchase, the customer agrees that Navi may process information as described in this policy.

2. Information We Collect

We collect booking-related information, including the selected branch, date, time slot, party size, seating area, price, order status, payment reference, customer email address, support messages, and operational notes required to provide the service.

We collect the guest's name in English and phone number. These are required because the reservation is registered in the guest's name through the cafe's official reservation system.

We may collect confirmation-delivery information, including the email address used for checkout, delivery status, support follow-up details, and limited reservation information required to send or forward booking confirmation materials.

We may collect technical information, including IP address, browser type, device type, approximate region, page access time, error logs, security events, checkout session status, and other information needed to operate, secure, and improve the website.

We do not intentionally collect sensitive personal information unless the customer voluntarily includes it in a support message. Customers should avoid sending passport numbers, identity documents, payment card numbers, health details, or other unnecessary sensitive information through ordinary support channels.

3. Payment Information

Payments may be processed by a third-party payment provider such as Stripe. Navi does not store full card numbers, card security codes, or complete payment card credentials on its own servers.

The payment provider may collect and process payment details, billing information, fraud signals, and transaction metadata according to its own terms and privacy policy.

Navi may receive limited payment-related information such as payment status, payment reference, customer email, USD amount, currency, and fraud or dispute status where needed for fulfilment, support, accounting, security, and dispute handling.

4. How We Use Information

We use information to display available time slots, temporarily hold a selected time slot during checkout, process payment authorisation and capture, register the reservation, send or forward booking-related information, provide customer support, prevent duplicate orders, detect abuse, maintain records, and comply with legal or payment provider requirements.

The guest's name and phone number are submitted to the cafe's official reservation system to register the reservation, and may be used by the cafe to contact the guest about the reservation. We do not use them for marketing.

We may also use aggregated or operational information to improve website performance, diagnose technical issues, measure demand, manage inventory, and reduce fraud or misuse.

We do not sell customer personal information to third parties.

5. Operational Systems and Service Providers

Navi uses third-party services for hosting, payment processing, email handling, security, operational storage, and support workflows. These currently include Stripe (payments), Supabase (operational database), Google (the booking mailbox), Resend (email delivery), and Cloudflare (website hosting, domain, and email routing).

These providers may process information only as needed to provide their services to Navi, maintain security, comply with law, or fulfil their own contractual and regulatory obligations.

Booking availability and order records may be stored in operational tools used by Navi. Temporary holds may be stored in short-term operational systems so that the website can reduce duplicate sales and display current availability more quickly.

6. Email and Confirmation Handling

The email address supplied by the customer is used to send support replies, payment-related updates, booking-related information, and confirmation materials where applicable.

The customer's own email address is not submitted to the cafe. The reservation is registered with a Navi booking mailbox, which receives the official confirmation; Navi then forwards that confirmation to the customer's email address unchanged.

Support form submissions may be sent to Navi through a third-party email delivery provider, and the customer's email address may be used as the reply-to address so that support can respond directly.

If the customer enters an incorrect email address, Navi may be unable to deliver confirmation information. The customer should contact support promptly with payment details and the correct email address.

Navi may keep records of email delivery status, support correspondence, and fulfilment status for operational, dispute, and customer service purposes.

7. Retention

We retain booking, order, payment reference, support, and fulfilment records for as long as reasonably necessary to provide the service, handle customer enquiries, resolve disputes, prevent fraud, comply with tax or accounting requirements, and maintain operational records.

We aim to delete the guest's name and phone number from our operational records within 180 days after the reservation date, unless they are needed for an open dispute, a legal requirement, or fraud prevention.

Temporary hold data is generally retained only for a short period and may expire automatically. Some related operational logs may remain longer for security, debugging, or dispute purposes.

8. Security

Navi uses reasonable technical and organisational measures to protect information, including server-side handling of private credentials, third-party payment processing, temporary hold controls, and restricted operational access.

No website, payment flow, email system, cache system, or internet transmission is completely secure. Customers should use a secure email account, avoid sharing confirmation information publicly, and contact support if they suspect unauthorised use.

9. International Processing

Because Navi may use international service providers, information may be processed or stored in countries or regions different from the customer's location.

By using the service, the customer understands that cross-border processing may be necessary for hosting, payment handling, email delivery, operational storage, security, and support.

10. Customer Choices and Requests

Customers may contact Navi to request access, correction, or deletion of certain information. Navi may need to retain information where required for payment records, fraud prevention, dispute handling, legal compliance, accounting, or legitimate operational reasons.

Customers may request support by providing the payment email, booking date, time slot, and location. Navi may ask for additional information to verify the request before making changes to order-related records.

11. Children

Navi is intended for customers who are legally able to purchase services online or who have permission from a parent or guardian. Navi does not knowingly provide the service directly to children where parental or guardian consent is required by law.

12. Updates to This Policy

Navi may update this Privacy Policy from time to time to reflect operational, legal, security, or service changes.

The updated version will be published on the website. Continued use of the service after publication means the customer accepts the updated policy for future use.

13. Contact

Requests about personal data, including access, correction, or deletion, can be sent to support@bookingnavi.com.

Postal address: Crabber, Room 405, Winning Centre, 29 Tai Yau Street, San Po Kong, Kowloon, Hong Kong.