Who we are
Pop & Paddle operates this website and booking service in Brunei. For privacy questions or requests, contact popandpaddlehq@gmail.com.
Information we collect
We collect the information you provide when booking, organising games, ordering or contacting us. This can include your name, phone number, booking reference, selected sessions, participants, order details and messages.
For payments, we may collect uploaded receipts, bank transaction references, payer names, payment amounts, dates and recipient details shown on the evidence. Receipts may contain account numbers or masked account details. Please avoid including unrelated transactions or information when uploading evidence.
The website also processes technical information needed to operate and protect the service, such as network addresses, request logs, session cookies and locally saved booking progress.
How we use your information
We use information to reserve sessions, manage orders and games, check payments, provide booking updates and support, resolve disputes, prevent duplicate or suspicious payment claims, and maintain reliable service and business records.
Payment checks can compare receipt information with your booking using fixed rules. A successful check may confirm a booking automatically. Missing, inconsistent or ambiguous information can be referred to our team. You can contact us if you believe a payment check is incorrect.
Merchant Gmail connection
The payment integration connects to Pop & Paddle’s own merchant Gmail account. Customers do not need to connect their Gmail accounts.
With the merchant account owner’s permission, the integration uses the Gmail API’s read-only scope to find bank payment notification emails and read their contents and attached receipts. Google’s read-only permission technically permits reading the connected mailbox; our payment workflow filters for bank notification messages. It cannot send, modify or delete emails through this permission.
We use relevant bank emails and receipt data to authenticate notifications, match payments, prevent reuse, reconcile transactions and investigate exceptions. Relevant original emails, attachments and extracted payment records may be stored privately for these purposes. Gmail authorization credentials are restricted to the server.
We do not sell Gmail data, use it for advertising, or use it to train or improve general-purpose AI or machine-learning models. Human access to this data is limited to payment support, security, dispute resolution and other permitted operational or legal needs. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
The merchant owner can revoke access through Google Account connections. Revoking access stops future Gmail access; it does not automatically delete records already retained for bookings, reconciliation or disputes. Contact us to request deletion of those records.
Service providers and access
We use service providers for website hosting, databases, private file storage, authentication and communications. These providers process information needed to deliver their services and may operate outside Brunei. Google processes the merchant Gmail connection. Authorized team members can access information needed to manage bookings, payments and support.
We may disclose information where required by law or necessary to investigate misuse, resolve disputes or protect the service. We do not sell your personal information.
Storage and security
We restrict access to payment evidence and administrative records and use authenticated access controls and private storage. Keep your booking reference, recovery links and contact details private. No online service can guarantee absolute security.
We retain information for as long as needed to manage the booking or transaction, handle support and disputes, maintain appropriate business records and meet applicable obligations. Retention depends on the type of record and any unresolved issue. You can ask us about a record or request its deletion; some records may need to be retained.
Your choices and requests
You can contact us to request access to, correction of or deletion of your information, or to question an automated payment result. We may need to verify your identity before responding. Removing information essential to an active booking may affect our ability to manage it.
Your browser settings let you manage cookies and local storage. Clearing them may remove saved booking progress or sign you out. Opening links to banks, WhatsApp, maps or other external services means their own privacy policies apply.
Changes to this policy
We update this page when our practices change. The date above shows the latest revision. For questions, email popandpaddlehq@gmail.com.