Privacy and data
360MB Rewards privacy policy
Effective date: to be confirmed before production publication. This policy covers the 360MB Rewards mobile app, corporate portal and related administration services.
Information we collect
Account and contact details; organisation membership and role; booking, event, quote and payment-reference information; rewards and redemptions; files you deliberately upload; notification preferences; and security, audit and device-delivery records needed to operate the service. We do not ask you to send passwords or identity documents by email.
Phone sign-in
If you choose phone sign-in in an installed mobile app, we send a one-time verification code by SMS. Your phone number is processed by our authentication provider, Firebase/Google, for verification, fraud and abuse prevention. Standard SMS rates may apply. A phone-only account does not automatically merge with an existing email account or grant company access. You may instead use email sign-in.
Why we use it
We use this information to authenticate accounts, manage bookings and organisations, calculate quotes and rewards, deliver requested messages, protect the service, meet legal and accounting duties, and respond to support or privacy requests. We do not sell personal information.
Who receives it
Authorised 360 Motion Booth staff and service providers receive only the information needed for hosting, authentication, file storage, messaging, reporting, payments or accounting. Providers must protect the information and use it only for the service they provide. Cross-border processing will be reviewed and protected as required by Botswana law.
How long we keep it
Profile, marketing, device and preference data is removed or anonymised when it is no longer needed. Open bookings, ownership duties, disputes and legal holds must be resolved first. Botswana tax-related books and supporting business documents may need to be kept for eight years after the relevant tax year or accounting period. During that period we retain the minimum evidence required and remove or pseudonymise contact fields that are not needed for that purpose.
Your choices and rights
You may ask to access, correct, restrict, object to, export or erase personal information, and may withdraw consent where consent is the basis for processing. We will acknowledge requests promptly and aim to provide a substantive response within one month. A lawful retention duty or legal claim may limit immediate erasure; if so, we will explain what is retained and why.
Security and incidents
We use access controls, tenant separation, audit records, encrypted network connections, guarded uploads, backups and recovery procedures. No system is completely risk-free. We investigate suspected incidents and make legally required notifications.
Contact and deletion requests
Use the signed-in account deletion control where possible, or contact book@360motionbooth.co.bw. We may verify account ownership through a secure channel.
Publication gate: this draft must be reviewed by a Botswana legal adviser and the company’s accountant, and the controller identity, service-provider list and international-transfer safeguards must be confirmed before it is treated as the final public policy.