Privacy notice

Updated 3 November 2026

Who operates MakoBooking

SIGIL LIMITED

For enquiries and privacy requests, contact [email protected].

Information you provide

We collect your name, email address and project goals when you send an enquiry. Business name, role, website, industry, telephone number and preferred contact time are optional. Please do not include identity documents, payment details or sensitive personal information in the form.

We also keep your submission time, enquiry reference, email processing status and internal follow-up notes. Cloudflare processes technical request data for hosting and security. The enquiry service uses a hashed network address and a hashed email address for temporary rate limits.

How we use information

We use your information to respond to your request, assess requirements, prepare a proposal and manage related follow-up. We send a confirmation to you and a notification to our team. The required fields let us identify and answer your enquiry; without them, the form cannot be submitted.

Processing is for steps you request before a potential contract, our legitimate interest in managing business enquiries and preventing abuse, and any applicable legal duties. This form does not subscribe you to marketing emails.

Service providers and international processing

Cloudflare provides website hosting, D1 enquiry storage, Access protection for the owner workspace, Turnstile spam prevention and incoming email routing. Resend processes the owner notification and customer confirmation. Incoming email to [email protected] is forwarded to our business Gmail mailbox, provided by Google.

Providers may process information in countries outside your own. Resend sending is configured in Tokyo; this does not mean all provider data stays in Japan. Provider privacy notices describe their processing and safeguards. We do not sell enquiry information.

AI assistant and returning conversations

Our optional AI assistant runs on Base44 and loads when you open the chat. The messages you enter are processed by Base44 and its AI service to prepare replies. Please do not send passwords, payment details or sensitive personal or customer information. General questions do not require your name or email.

A conversation token is stored in your browser so you can return to the same chat for up to 30 days from its creation. Return access expires after 30 days, and a daily cleanup removes expired chat records and their associated copies from the chatbot database. Base44 may retain deleted records for a further recovery period under its own retention arrangements. Browser privacy settings may prevent returning-chat storage.

If you request human help, we collect your name, email, request details, permission to share the conversation and, for existing-project support, your project number. Your summary and complete conversation are shared with our team through the enquiry inbox and email so we can respond. These enquiry and email records are separate from returning chat history and follow the enquiry retention arrangements below. We do not send chat messages or handoff contact details to Google Analytics.

Retention and security

Enquiries and correspondence are kept while we assess your request and for as long as reasonably needed for related follow-up, project records or legal obligations. Retention is reviewed manually; there is currently no automatic enquiry deletion schedule. You can contact us to request deletion, subject to any lawful reason to retain a record. Provider logs and backups follow their separate retention arrangements.

The owner workspace requires authenticated access. Email service credentials are stored as server-side secrets. These measures reduce risk but cannot guarantee that online systems or email will always be secure.

Cookies and spam protection

With your permission, Google Analytics measures visits, traffic sources and interactions such as starting or successfully submitting an enquiry. Analytics cookies distinguish browsers and sessions; they expire after up to 180 days. We do not send your enquiry name, email, phone number, project details or reference to Analytics. Google processes technical device and network information under its own privacy information. Advertising features are disabled. How Google uses information from sites and apps.

Analytics is off until you choose Accept all. You can decline or withdraw permission using Cookie settings in the footer. We remember this choice in your browser for 180 days. Choosing Essential only does not affect enquiries. Analytics totals may be lower than the enquiries recorded in our system because visitors can decline analytics or block it.

English and Thai use separate page addresses. Cloudflare Turnstile performs a security check when you use an enquiry form; Cloudflare Access uses authentication cookies for the protected owner workspace.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion or a copy of your information, object to or restrict processing, and withdraw consent where processing relies on it. You may also complain to the relevant data protection authority. Contact [email protected] with your request or enquiry reference. We may need to verify your identity and explain any legal limits on a request.