Privacy Policy

1. Who we are

This website is run by Beaches Beauty in Avalon (also known as Beaches Beauty Avalon), a skin and beauty business at 43A Elvina Avenue, Avalon Beach NSW 2107. In this policy, "we", "us" and "our" mean Beaches Beauty in Avalon [LEGAL BUSINESS NAME AND ABN].

We handle your personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and, where it applies, NSW health privacy laws.

3. How we collect it

• Directly from you, when you book, fill in a consultation form, visit us, buy online, contact us or sign up to our emails.
• Through our online booking system, when you make or manage a booking.
• Automatically, through cookies and similar tools when you use our website (see section 7).
• Occasionally from someone else with your permission, for example when someone buys you a gift voucher.

4. Why we use your information

• To book, deliver and follow up your treatments safely, and to check a treatment suits your skin.
• To keep accurate treatment records, so your care is consistent from visit to visit.
• To send appointment confirmations and reminders.
• To process payments, orders, gift vouchers and refunds.
• To answer your questions and respond to feedback.
• To send you news, offers and skincare advice, but only where you have agreed or the law allows (see section 9).
• To understand how people use our website and make it better.
• To meet our legal, tax and insurance obligations.

5. Health information

Health and skin information is sensitive, so we treat it with extra care. We only collect what we need to treat you safely, we ask for your consent before we collect it, and we only use it for your care and for the purposes described in this policy. Your treatment records are kept confidential and are only seen by the people who need them to look after you.

6. Photos and social media

We only take photos for your treatment records if you agree. We will only share before-and-after photos, or any photo showing you, on our website or social media with your clear permission, and you can change your mind at any time by telling us. Please note that once something has been shared publicly online, we can remove it from our own channels but cannot control copies made by others.

Our website may show content from our social media accounts, such as our Instagram feed. These platforms have their own privacy policies.

7. Cookies and website analytics

Like most websites, ours uses cookies, which are small files stored on your device. We use them to make the site work, remember your cart, and understand how the site is used.

Our website uses Google Analytics and Microsoft Clarity. Google Analytics tells us which pages are visited and how people find us. Microsoft Clarity shows us how visitors use the site, for example where they click and scroll, so we can fix anything confusing and make the site easier to use. These tools may collect information such as your device, browser, approximate location and activity on our pages. We use this information to improve our website, not to identify you personally, and we take care not to capture sensitive details such as payment information.

You can limit or turn off cookies in your browser settings, and you can opt out of Google Analytics using Google's browser add-on. Some parts of the site, such as the shopping cart, may not work properly without cookies.

8. Who we share your information with

We do not sell your personal information. We only share it with people and businesses who help us run our services, and only as much as they need. This includes:

• our online booking provider (Timely), which handles your appointments and reminders;
• our website and online shop provider (Squarespace) and our payment providers, which process orders and payments;
• analytics providers (Google and Microsoft), as described in section 7;
• our email and marketing provider [EMAIL PROVIDER, e.g. Squarespace Email Campaigns or Mailchimp];
• professional advisers such as our accountant, insurer or IT support, where needed;
• government bodies or other parties where the law requires us to, or where you have given us permission.

Some of these providers store information on servers outside Australia, including in the United States. Where we use them, we choose providers that protect personal information.

9. Marketing messages

If you join our email list or tell us you'd like to hear from us, we may send you news, offers and skincare advice by email or text. Every message tells you how to unsubscribe, and you can also ask us to stop at any time. We will still send you messages about your appointments and orders.

10. Keeping your information safe

We take reasonable steps to protect your information from misuse, loss and unauthorised access. Treatment records and online accounts are protected by passwords and limited access, and we choose reputable providers for our online systems. We keep your information only as long as we need it for the reasons above, or as long as the law requires us to keep treatment records. After that, we securely destroy or de-identify it.

No online system is completely secure. If we ever suffer a data breach that is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner as the law requires.

11. Your rights

You can ask us to:

• give you a copy of the personal information we hold about you;
• correct information that is wrong or out of date;
• stop sending you marketing; or
• remove a photo of you that we have shared.

Contact us using the details below. We may need to confirm who you are first, and we will respond within a reasonable time. In some cases, such as where the law requires us to keep treatment records, we may not be able to delete everything, but we will explain why.

12. Questions and complaints

If you have a question or you're unhappy with how we've handled your information, please contact us first. We will look into it and reply as soon as we can. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

13. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated at the top.