PRIVACY & CLIENT DATA PROTECTION POLICY

Effective Date: 1 September 2022

Business Name: Sol Brow & Lash

Location: 5/120 Bay Street, Port Melbourne VIC 3207

Email: hello@solbrowlashes.com.au

Phone: 0467 789 789

1. Introduction & Overview

Sol Brow & Lash is committed to protecting your personal and sensitive health information. Because we collect health and skin data for our services, we operate as a health service provider under the Privacy Act 1988(Cth) and adhere strictly to the 13 Australian Privacy Principles (APPs).

This Privacy Policy explains how your information is collected, stored, used, and protected when you visit our website, book an appointment, or undergo treatments at our salon.

2. Integration with Fresha System

To provide a seamless, secure booking and salon experience, Sol Brow & Lash utilises Fresha (Fresha.com) as our primary business management, online booking, payment processing, and digital records platform.

All personal details, booking records, payment card processing, and digital intake/waiver forms captured online or in the salon are integrated directly into the Fresha platform. By using our website or booking services with us, you acknowledge that your data will be collected and handled in accordance with this policy as well as Fresha’s Privacy Policy.

3. What Information We Collect

We collect information necessary to safely deliver high-quality beauty and skin treatments:

  • Personal Details: Full name, phone number, email address, date of birth, and home address.

  • Sensitive Health & Skin Data: Treatment records, patch test results, health histories, allergies, skin types, medical conditions, medications, and completed client intake and waiver forms.

  • Payment Information: Credit or debit card details processed securely through Fresha’s PCI-DSS compliant payment gateway.

  • Visual Records: Before-and-after photographs taken with your explicit consent for treatment tracking or marketing purposes.

  • Website Data: Technical data collected via website cookies, including IP address, browser type, and page usage metrics.

4. How We Collect Your Information

We collect data primarily through direct interactions:

  • Online bookings made via our website or the Fresha marketplace.

  • Digital client intake, waiver, and patch test consent forms completed prior to or during your appointment.

  • In-person consultations conducted at our Port Melbourne salon.

  • Subscription to our newsletters or direct promotional communications.

5. How We Use Your Information

Your personal and health information is used exclusively for legitimate operational and health purposes:

  • Assessing treatment suitability and identifying medical contraindications (e.g., laser, HIFU, lash adhesives, tints).

  • Managing, confirming, and sending automated SMS/email reminders for your appointments via Fresha.

  • Processing payments, deposits, and cancellation fees securely.

  • Maintaining accurate client records for patch testing and clinical safety compliance.

  • Sending promotional offers, news, and salon updates (only where you have opted in).

6. Data Security & Storage

We prioritise the security of your data:

  • Fresha Platform Safeguards: All client profiles, consultation notes, and intake forms stored in Fresha are secured behind enterprise-grade cloud encryption, firewalls, and strict account access controls.

  • Payment Card Security: Payment card details are tokenised and encrypted by Fresha in compliance with Level 1 PCI-DSS standards. Salon staff do not have access to full card numbers.

  • Restricted Access: Only authorised Sol Brow & Lash staff members who require client data to perform services or administer bookings have access to your record.

  • No Local Device Storage: Client contact details and records are never stored locally on unauthorised staff devices.

7. Disclosure of Personal Data

We do not sell, rent, or trade your personal information to third parties or external organisations. We may disclose your data only in the following circumstances:

  • Service Providers: To trusted technology platforms like Fresha strictly to facilitate bookings, digital forms, and billing.

  • Legal Requirements: Where required by law, court order, or mandatory government reporting (e.g., WorkSafe Victoria or ACCC reporting in the event of a critical incident).

  • Medical Emergencies: To medical professionals or emergency services if necessary to protect your health or safety.

8. Direct Marketing & Opting Out

You may receive marketing communications or promotional offers if you have opted in during booking. You can opt out at any time by:

  • Clicking the "Unsubscribe" link at the bottom of any promotional email.

  • Adjusting your communication preferences inside your personal Fresha account profile.

  • Contacting us directly at hello@solbrowlashes.com.au.

9. Accessing & Correcting Your Information

You have a legal right under the APPs to request access to the personal and health information we hold about you, or to request corrections if details are inaccurate or out of date.

  • You can review and update your personal contact details at any time by logging into your Fresha client account.

  • For formal access or amendment requests regarding your clinical records, please email hello@solbrowlashes.com.au. We will process your request within 30 days.

10. Privacy Enquiries & Complaints

If you have any questions about this policy or wish to make a complaint regarding how your data has been handled, please contact our privacy coordinator:

Sol Brow & Lash

Email: hello@solbrowlashes.com.au

Phone: 0467 789 789

Address: 5/120 Bay Street, Port Melbourne VIC 3207

If you are unsatisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.