Privacy policy

Privacy framework

This policy explains how Brighton Beauty Studio collects, uses, stores and discloses personal information through the studio and its website at https://brightonbeautystudio.com.au.

The Privacy Act 1988 (Cth) and the Australian Privacy Principles set national standards for handling personal information. The studio is a small business operator. Some small businesses are exempt from parts of the Act unless an exception applies, and the position can depend on the services provided and the information held. Regardless of whether a particular obligation applies, the studio aims to handle personal information consistently with the Australian Privacy Principles and this policy.

Information collected

The studio collects information you provide when you book, call or make an enquiry. This may include:

• your name, phone number and email address;
• the services you ask about and your treatment preferences;
• your appointment and service history; and
• health, skin, sensitivity or allergy information that you choose to provide before a treatment.

Health information is sensitive information under Australian privacy law. The studio collects it only with your consent and only where it is needed to assess suitability or deliver a treatment safely. Please provide only information that is relevant to your treatment.

When you use the website, technical information may also be collected automatically, including pages viewed, interactions, browser and device details, approximate location, referral source, cookie identifiers and network information such as an IP address.

How information is used

The studio may use personal information to:

• respond to enquiries and manage bookings;
• confirm, remind you about or change an appointment;
• provide, adapt or decline a treatment on safety grounds;
• maintain appointment and treatment records;
• respond to feedback, complaints or disputes;
• understand and improve how the website is used; and
• meet legal obligations and protect the studio and its clients.

The studio does not sell or rent personal information. It discloses information only where reasonably needed for these purposes, where you have consented, or where disclosure is required or authorised by law.

Third parties

The website and the studio rely on the following service providers. They handle information under their own terms and privacy policies.

Fresha

Fresha provides the online booking platform. When a “Book My Visit” link takes you to Fresha, the booking is made on Fresha's own platform. Fresha collects and handles the booking information you enter under its privacy policy.

Google Analytics 4

Google Analytics 4 uses first-party cookies and pseudonymous identifiers to measure visits, pages viewed, session activity, and browser and device information. Pseudonymous information is not the same as anonymous information because it can still distinguish one browser or device from another. Google says Analytics uses an IP address at collection to derive information such as approximate location, then discards the IP address before the data is logged or stored. Read Google's privacy policy or install the Google Analytics opt-out browser add-on.

The studio runs no advertising, so the tag is loaded with Google's ad-related storage turned off by default: advertising cookies, ad personalisation and ad user data. Only the analytics storage is enabled.

Microsoft Clarity

Microsoft Clarity records page interactions, clicks, scrolls and mouse movement to produce session replays and heatmaps. This helps the studio understand how people move through the site. Clarity masks text entered into input fields by default. Clarity may use cookies and other identifiers as described in the Microsoft privacy statement and Clarity terms.

Website hosting

The website is hosted and delivered by a third-party hosting provider. Its systems may process server logs containing the requested page, date and time, browser and device details, IP address and related network information for delivery, security, reliability and troubleshooting.

Google Maps and Google Business Profile

Google Maps provides location and directions services. The home page and the Visit page embed a Google map showing the studio's location. That map is loaded from Google when you scroll to it, so Google may receive your IP address and set cookies at that point, whether or not you interact with it. Reviews shown on this website are public Google reviews from the studio's Google Business Profile and may include the reviewer's public name, review text and public images. If you follow a Google link or use the embedded map, Google handles your activity under its privacy policy.

These providers may process information outside Australia. Their policies explain where and how they process information and the choices available to you.

Cookies and similar technologies

The site uses or may use the following categories of technology:

• Essential delivery and security technologies, including server logs used to deliver and protect the website.
• Usage analytics, including Google Analytics 4 first-party cookies used for pseudonymous measurement.
• Behaviour analytics, including Microsoft Clarity cookies and identifiers used for session replays and heatmaps.

Fresha may set its own cookies after you leave this site for its booking platform. Your browser can block or delete cookies, and the Google Analytics opt-out add-on can prevent Analytics measurement. Blocking cookies may limit some website or third-party features.

Storage and retention

Personal information may be stored in the studio's booking account, business records and devices, and in systems operated by the providers listed above. The studio takes reasonable steps to protect information from misuse, interference, loss and unauthorised access, modification or disclosure. No internet or storage system can be guaranteed completely secure.

There is no single retention period for every record. Booking, enquiry and treatment information is kept only for as long as it is reasonably needed to manage appointments, provide safe follow-up, resolve a complaint or dispute, or meet accounting and other legal requirements. Analytics and provider records are retained according to the studio's provider settings and the relevant provider policy. When information is no longer required, the studio will take reasonable steps to delete or de-identify it where practicable.

Access, correction and complaints

You may ask the studio to give you access to personal information it holds about you or to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. To protect your privacy, the studio may need to confirm your identity first. If a request cannot be met, the studio will explain why where it is reasonable and lawful to do so.

You may also make a privacy complaint using the contact details below. Please explain what happened and what outcome you are seeking so the studio can investigate and respond within a reasonable time. If the matter is not resolved, you may contact the Office of the Australian Information Commissioner to ask whether it can consider your complaint.

Privacy contact

For a privacy enquiry, access or correction request, or complaint, contact the studio by email, phone or post: