Privacy Policy

1. Information We Collect

Information you provide directly

• Account registration: name, email address, password, gender, phone number.
• Profile: first name, last name, work position, address, city, country.
• Bookings: event type, venue address, contact phone, scheduling date, special notes.
• Payments: transaction reference, amount, payment method type (we do not store full card numbers).
• Reviews: rating, written review text, and any review images you upload.
• Communications: messages or enquiries you send to our support team.

Information collected automatically

• Location data: if you choose to use our location detection feature, we collect your latitude, longitude, city, and country from your browser's geolocation API or Google Maps. This is optional and only used to pre-fill booking address fields.
• Usage data: pages visited, features used, timestamps, and referring URLs — collected via server logs and cookies.
• Device information: browser type, operating system, and IP address.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account.
• Process bookings and payments.
• Send transactional emails (booking confirmations, payment receipts, cancellation notices, password resets).
• Notify you of important account or booking changes.
• Display reviews and ratings on service pages.
• Improve the platform — analyse usage patterns, fix bugs, and optimise performance.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with applicable laws and regulations of the Kingdom of Cambodia.

We do not sell your personal information to third parties, and we do not use it for unrelated advertising purposes.

3. How We Share Information

We share your information only in the following circumstances:

• With service providers you book: when you place a booking, relevant details (name, contact phone, event details, venue) are shared with the provider so they can fulfil the service.
• Email delivery: we use an SMTP email service (Gmail / Google Workspace) to send transactional emails. Google's privacy policy applies to email transmission.
• Maps services: if you use location detection, your browser communicates directly with Google Maps. We do not pass your raw location data to Google — the lookup happens in your browser.
• Legal requirements: we may disclose information if required by Cambodian law, court order, or lawful governmental request.
• Business transfers: in the event of a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you via email before your information becomes subject to a different privacy policy.

4. Cookies & Tracking

We use the following types of cookies:

• Session cookies: essential for keeping you logged in and protecting your session (CSRF tokens).
• Preference cookies: remember your settings and language preferences.
• Analytics cookies: help us understand how users navigate the platform so we can improve it. No personally identifiable information is included in analytics data.

You can control or disable cookies through your browser settings. Disabling essential cookies may prevent some features from working correctly.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Booking and payment records are retained for a minimum of five (5) years for accounting and legal compliance purposes. When you request account deletion, we will remove your personal profile data within 30 days, while retaining anonymised transaction records as required by law.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate or incomplete information (available directly in your profile settings).
• Deletion: request that we delete your account and associated personal data.
• Portability: request your data in a portable format.
• Objection: object to certain types of processing, such as analytics.

To exercise any of these rights, please contact us. We will respond within 30 days.

7. Security

We implement appropriate technical and organisational measures to protect your information, including:

• TLS encryption for all data transmitted between your browser and our servers.
• Bcrypt hashing for all stored passwords — we never store passwords in plain text.
• Access controls limiting who on our team can view sensitive data.
• Regular security reviews of our platform code and infrastructure.

No method of transmission or storage is 100% secure. We encourage you to use a strong, unique password and to log out after using the platform on shared devices.

8. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any information.

9. Children's Privacy

Alizo is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us and we will delete the account promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at least 14 days before the changes take effect, and we will update the "Last Updated" date at the top of this page. Continued use of the platform after the effective date constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

• Email: privacy@alizo.com
• Support: Contact form
• Address: Alizo Platform, Phnom Penh, Kingdom of Cambodia