Ubuntu Booking privacy notice
Effective 14 October 2026. Version UB-2026-10-14.
Who operates this service
HEY GEORGE (PTY) LTD, registration 2019/251051/07, operates Ubuntu Booking's purchaser account, licence and managed connection service. Registered office: 5 Capell Road, Sydenham, Durban, 4091, South Africa. Contact info@heygeorge.co.za or +27 61 104 2746 about your account, information or a privacy complaint.
This notice covers the publisher service. Each business using Ubuntu Booking runs its own WordPress website and decides how it collects and uses booking information. Booking customers should contact that business about their reservation or booking records; its own privacy notice applies.
Information we use
We use your purchaser email, account identifier and password hash for sign-in, verification and recovery. We use order and payment references, amounts, recurring mandate identifiers, paid-through dates, cancellation state and accepted policy/consent records for billing and entitlement. Your activated website address, site-bound licence identifier and activation status support downloads, updates and connection authorisation.
Security cookies, request/rate-limit information and service errors help protect the service. Hosting and mail systems retain their normal access and delivery records. Support correspondence is used to resolve requests. Account messages cover verification, password recovery, payments and the subscription; purchase does not sign you up for marketing.
Payments and communication providers
PayFast handles payment entry and recurring card storage on its hosted checkout. This service stores the references and encrypted reusable mandate token needed to confirm or cancel billing, and does not store card numbers. Purchaser emails use the configured secure mail service.
If a managed connection is enabled and you authorise it, the publisher stores provider/account identifiers, authorised credentials, licensed website and callback details, consent/session proofs and connection status. Google calendar calls normally run between your WordPress website and Google. Managed inbound WhatsApp events pass through the publisher relay to the corresponding authorised website and may include sender identifiers, message text, delivery events and message/media metadata.
Your provider accounts remain yours. Google and Meta passwords are entered on their own authorisation screens, not this service. The provider's privacy terms and international processing apply. Host, mail and provider services receive the information needed to deliver and protect these functions; service and provider availability, permissions and review requirements still apply.
Controls and protection
HTTPS protects transmission. Passwords are hashed by WordPress. Stored publisher connection credentials, signing keys and reusable payment tokens are encrypted using the installation's security material. Role checks, request proofs, signature verification, rate limits and website-bound entitlements restrict access. Protect your own account, website and product key, keep software updated and never share provider passwords or verification codes in support messages.
Disconnect Google or WhatsApp in your website's connection settings and, where necessary, revoke the application through the provider's account controls. Disconnection and revocation are separate from deleting your bookings or cancelling the annual PayFast mandate. Cancel future renewals in the purchaser account.
Access, retention and complaints
Contact info@heygeorge.co.za for access, correction, a deletion or closure request, or a complaint. We verify ownership before changing account or billing information. We retain information needed to operate the account and mandate, reconcile payments, meet applicable record obligations and resolve disputes. Closure or deletion may require cancelling the mandate first and may not remove records that must be retained. Backup copies may remain until replaced under the hosting backup process.
The software does not automatically erase every billing, support or hosting record when you disconnect a provider. Ask support to coordinate closure, cancellation, provider revocation and deletion. Where applicable, you may also raise a complaint with South Africa's Information Regulator at inforegulator.org.za. A new material purpose or new provider permission must be explained before requesting the corresponding consent.