Privacy notice

Boothlock is a booking tool that event organizers use to take booth requests and payments. When you request a booth, the event organizer decides what happens with your request, and Boothlock stores and processes your details for them and to run the service.

Each event page shows the organizer's contact details.

Boothlock is a booking tool only: we do not hold booth payments or settle disputes between vendors and organizers. See the Terms of use in the page footer.

Vendors: your email address (confirmed with a one-time code), business name, contact name, phone number, business type and a description of what you sell. Optionally: SSM registration number, Instagram, TikTok, Facebook, website, and a note to the organizer.

Payments: card and bank details go straight to Stripe. Boothlock never sees or stores them. We keep the booking amount, fees, payment status and refunds.

Organizers: your sign-in account, organization name, contact details and connected Stripe account.

Cookies: a vendor portal sign-in cookie (lasts 30 days), a language cookie, and organizer sign-in cookies. No advertising or tracking cookies.

To process your booth request, let the organizer review and contact you, take payment and issue refunds, send emails about your request (approved, rejected, expired, paid, refunded, withdrawn, event cancelled), prefill your next request, let an organizer you paid invite you to their later events, keep financial records, and stop abuse such as spam and repeated code requests.

We do not sell your data or use it for advertising.

The organizer of each event you apply to sees the details you sent with that request and your current saved profile. An organizer you have not applied to cannot see you.

Service providers (subprocessors) help us run Boothlock. Some of them process data outside Malaysia.

Your details stay with an organizer's records until they delete you. Deleting removes your name, contact details, submitted details and notes, and keeps only booking amounts, status and dates for financial records.

Your saved vendor profile stays until you change it in the vendor portal or ask us to remove it.

You can ask to access or correct your data, ask for it to be deleted, or withdraw consent for future processing. Withdrawing consent means we can't process new requests from you.

Ask the event organizer first: they can export or delete your record. You can update your saved profile yourself in the vendor portal. You can also email us at privacy@boothlock.com.

When this notice changes, the version above changes. Each request records the version you agreed to.