Privacy Policy

Kew Threading and Beauty Pty Ltd (“we”, “us” or “our”) runs Kew Threading & Beauty. This policy covers our website, our bookings and the services we provide.

If you have a question about this policy or your personal information, please contact us using the details below.

We only collect the personal information we need. Depending on how you deal with us, this may include:

• Contact form: your name, email address, phone number (optional), the service you’re interested in and your message.
• Bookings through Fresha: your name, contact details and appointment history, plus any notes you add to your booking.
• At your appointment: consultation notes about your treatments, preferences and results.
• Payments: if you pay by card, your payment is processed by our payment provider. We don’t keep your full card number.
• Website technical data: when you visit our website, our hosting provider processes technical details such as your IP address, browser type and the pages you view, so it can deliver the site and keep it secure.

Some treatments need a little health information so we can keep you safe. At your consultation, we may ask about allergies, skin conditions, medications (such as retinoids or isotretinoin), pregnancy and your patch-test results.

Health information is sensitive information under the Privacy Act. We only collect it with your consent, at your consultation, and only so we can perform your treatment safely.

We don’t ask for health information through this website, so please don’t include medical details in our contact form. We’ll talk about anything you need to tell us privately at your appointment.

We collect personal information directly from you, for example when you book, fill in our contact form, send us a message, call us or visit us. When you book online, we receive your booking details through Fresha, and Fresha’s own privacy policy also applies.

We hold your information in Fresha, in our business email account and in our client records.

We don’t sell your personal information. We only use it to:

• manage your bookings and send you confirmations and reminders
• check that a treatment is suitable and safe for you
• reply to your enquiries and messages
• meet our legal obligations, such as tax and record-keeping
• send you news and offers, but only if you’ve opted in. You can opt out at any time.

We only share personal information where it’s needed to run our business and provide your service. This may include sharing it with:

• Fresha, our online booking platform
• Web3Forms, which delivers messages from our contact form to our inbox (it is run by Web3Creative, a business based in India, and its servers are in the United States)
• Cloudflare, which hosts our website and helps keep it secure
• Google, but only if you choose to load the map on our website
• Meta, if you message us on Instagram or Facebook
• our email provider, which stores the emails we send and receive
• our professional advisers, such as our accountant
• anyone else we’re required or authorised to share it with by law.

Some of the providers we use store or process information outside Australia, including in the United States, India, the United Kingdom and the European Union.

When we use overseas providers, we take reasonable steps to make sure your information is handled in a way that’s consistent with the Australian Privacy Principles.

Our website doesn’t set its own tracking or advertising cookies. If we measure visits to the site, we use Cloudflare’s cookie-free web analytics, which doesn’t follow you across other websites.

Our host, Cloudflare, may set strictly necessary cookies to help keep the site secure.

If you choose to load the map or open our booking page on Fresha, Google or Fresha may set their own cookies under their own privacy policies. You can block or delete cookies in your browser settings at any time.

You can ask us general questions without giving your name, or by using a different name. To book an appointment, though, we need your name and contact details.

We only take photos of your treatment with your express consent. We only share them, for example on our website or social media, if you’ve agreed to that too. If you change your mind, let us know and we’ll stop using them.

We take reasonable technical and organisational steps to protect your personal information from misuse, interference and loss, and from unauthorised access, changes or disclosure.

We keep personal information only for as long as we need it for the purposes in this policy, or for as long as the law requires, such as for tax and business records.

When we no longer need it, we securely delete it or de-identify it, so it can no longer be linked to you.

You can ask to see the personal information we hold about you, or ask us to correct it if it’s wrong, out of date or incomplete. Just contact us using the details below.

It’s free to make a request, and we’ll respond within 30 days. If we can’t give you access or make a correction, we’ll explain why in writing.

If you’re unhappy with how we’ve handled your personal information, please contact us first using the details below. We’ll look into your concern and respond within 30 days.

If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

We don’t use computer programs to make decisions that significantly affect you.

If a data breach is likely to cause serious harm, we’ll notify the people affected and the OAIC where the law requires it. We’ll also act quickly to contain the breach and reduce any harm.

We may update this policy from time to time, for example if our services or the law change. The latest version will always be on this page, with the date it was last updated.