Privacy Policy
Last updated: 7 May 2026.
This Privacy Policy explains how HADIA BEAUTY PTY LTD (ABN 47 687 035 972), trading as Hadia Beauty, of 73 Walker Street, Dandenong VIC 3175 (we, us, our), collects, uses, stores, discloses and protects your personal information.
1. Our commitment to your privacy
Your privacy matters to us. We collect and handle your personal information in accordance with the Privacy Act 1988 (Cth), the 13 Australian Privacy Principles (APPs) set out in Schedule 1 of that Act, the Spam Act 2003 (Cth) and the Notifiable Data Breaches scheme.
This Privacy Policy applies to every interaction you have with us: when you visit hadiabeauty.com.au, when you book or receive a service in the salon, when you purchase a gift card or product, when you contact us by phone, email or social media, and when you sign up for our marketing list.
2. The personal information we collect
Personal information is information or an opinion about an identified individual, or about an individual who is reasonably identifiable.
We may collect the following kinds of personal information about you:
Identity and contact information: full name, date of birth (where relevant for age-restricted services), residential or postal address, email address and telephone number.
Booking and service information: services booked, appointment dates and history, service preferences, notes about previous results, names of staff who served you.
Sensitive information (with your consent): skin type, allergies, medical conditions, medications, pregnancy status, recent procedures (such as injectables, retinol use, recent waxing), and any other health information that affects whether a treatment is safe and suitable for you. Sensitive information is collected only where it is reasonably necessary to deliver a service safely.
Payment information: card type, last four digits, billing details (full card numbers are processed by our payment provider and are not stored by us).
Identification at piercing or microblading appointments: photo identification where required to verify age.
Photographs and video: before-and-after images, close-ups of work performed, where you have consented to this for portfolio or marketing use (see clause 8).
Website and digital information: IP address, browser type and version, device type, operating system, pages visited, time on site, referring URL, search terms used to reach the site, and information collected via cookies (clause 6).
Communications: emails, SMS, social media messages and call records when you contact us, and your responses to our marketing.
Reviews and testimonials: any feedback you provide on Google, social media or directly to us.
3. How we collect personal information
We collect personal information directly from you in the following ways:
When you book an appointment online via hadiabeauty.australiapos.com.au.
When you call or message us to make a booking, ask a question or give feedback.
When you complete a consultation form, intake form or consent form in the salon.
When you purchase a gift card, retail product or service in person.
When you sign up to our marketing list at booking, in the salon or on the website.
When you interact with our social media accounts (Instagram, Facebook, TikTok).
When you visit our website, through cookies and similar technologies (clause 6).
We may also collect information from third parties such as our payment processor, our booking software provider, public sources, and people you have asked to book on your behalf (such as a bridal party organiser).
4. How we use your personal information
We use your personal information for the primary purpose for which it was collected and for related secondary purposes you would reasonably expect, including:
To confirm, manage and deliver the services you have booked.
To assess whether a service is safe and suitable for you (using sensitive information you have provided).
To send appointment confirmations, reminders, rescheduling notices and follow-up care messages.
To respond to your enquiries, complaints and feedback.
To process payments and issue receipts and invoices.
To maintain accurate client and treatment records, in line with our record-keeping obligations.
To send you marketing communications about our services, offers and events, but only where you have opted in (clause 7).
To improve our website, services and customer experience.
To run our business and meet our legal, tax and regulatory obligations.
To investigate or respond to suspected unlawful, fraudulent or unsafe behaviour.
5. Sensitive information consent
Australian Privacy Principle 3 requires us to obtain your consent to collect sensitive information (including health information) unless an exception applies.
By providing information about your skin, hair, allergies, medications, medical history or pregnancy on a booking form, intake form or consultation, you consent to us collecting and using that information for the purpose of safely planning and delivering your treatment.
We will not use your sensitive information for any other purpose without your further consent.
6. Cookies, analytics and tracking technologies
Our website uses cookies and similar technologies. A cookie is a small text file placed on your device by your browser.
Strictly necessary cookies: required to make the website work (session cookies, security cookies). These cannot be disabled.
Analytics cookies: we use Google Analytics 4 (operated by Google LLC) to understand how visitors use our website (pages visited, time on page, device type, geographic region at city level). The data is aggregated and IP addresses are anonymised.
Advertising and remarketing cookies: we use Meta Pixel (operated by Meta Platforms Inc.) and may use Google Ads conversion tracking to measure the effectiveness of our advertising and to show you relevant ads on Facebook, Instagram and across the Google Display Network.
You can disable cookies in your browser settings. Some site features (such as the booking widget) may not work properly with cookies disabled. You can also opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on, and manage advertising preferences with Meta and Google directly.
We do not knowingly collect personal information from children under 13 through cookies.
7. Marketing communications and consent
We will only send you direct marketing communications (email, SMS, social media direct messaging) if you have opted in to receive them.
Opt-in happens when you tick the marketing box on our booking form or sign-up form, or when you ask us in person to add you to the list.
Every marketing email contains a clear unsubscribe link. Every marketing SMS contains opt-out instructions (typically reply STOP). You can also opt out at any time by emailing sales@hadiabeauty.com.au.
We comply with the Spam Act 2003 (Cth). We will action opt-out requests within 5 business days at the latest.
8. Photography, video and social media consent
We may take photographs or video during your appointment for our portfolio, social media and marketing.
We will not publish any image that identifies you (face, distinctive tattoos, identifying jewellery) without your express verbal or written consent.
Close-up images of nails, brows, lashes, hair length, makeup or skin that do not identify you may be used for portfolio purposes without separate consent. Full details are set out in our Terms & Conditions, clause 11.
You can withdraw image consent at any time by emailing sales@hadiabeauty.com.au. We will remove the image from any platform we control as soon as reasonably practicable. We cannot recall images already shared by third parties.
9. Who we share your information with
We do not sell your personal information.
We share information with trusted third parties only where it is necessary to operate our business, deliver your service, or where required by law:
AustraliaPOS (booking and POS provider): to manage appointments, client records and payments.
Payment processors (such as Stripe, Square, or the bank merchant facility): to process card payments. These providers are PCI DSS compliant.
Email and SMS marketing platforms (such as Mailchimp, Klaviyo, ActiveCampaign or equivalent), if you have opted in to marketing.
Google LLC: for website analytics and advertising performance.
Meta Platforms Inc.: for social media engagement and advertising performance.
Cloud hosting providers: for secure hosting of our website and business records.
Professional advisers: accountants, lawyers, insurers, IT support, where reasonably required.
Government, regulatory and law enforcement bodies, where required by law or to protect the safety of clients, staff or the public.
We require all third parties who handle your personal information on our behalf to comply with the Privacy Act 1988 or equivalent privacy protections.
10. Cross-border disclosure
Some of the third parties listed in clause 9 (in particular Google LLC and Meta Platforms Inc.) are based outside Australia, including in the United States and other countries.
Where we disclose your personal information to an overseas recipient, we take reasonable steps to ensure that the recipient does not breach the Australian Privacy Principles in relation to that information, in line with APP 8.
11. How we store and protect your information
We take reasonable steps to protect your personal information from loss, misuse, interference, unauthorised access, modification or disclosure (APP 11).
These steps include: HTTPS encryption on our website, password-protected systems, role-based staff access, locked physical files for paper consultation forms, regular software updates, and the use of reputable third-party providers with their own information security controls.
We do not store full credit card numbers. Card payments are tokenised and processed by PCI DSS compliant payment providers.
If we suspect a data breach involving your personal information that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme.
12. How long we keep your information
We keep client booking and treatment records for as long as you remain a client and for up to 7 years after your last appointment. This aligns with Australian tax and business record-keeping requirements and supports continuity of care for repeat treatments.
Marketing list data is kept for as long as you remain subscribed and for a short period afterwards to ensure your unsubscribe is honoured.
Once we no longer require your information for the purposes for which it was collected, we will take reasonable steps to destroy or de-identify it.
13. Your rights: access, correction and complaints
Under the Australian Privacy Principles you have the right to:
Access the personal information we hold about you (APP 12). You can request a copy by contacting us at sales@hadiabeauty.com.au. We will respond within 30 days.
Correct any personal information that is inaccurate, out of date, incomplete, irrelevant or misleading (APP 13). Please contact us and we will update it without charge.
Withdraw consent to marketing communications at any time (clause 7).
Withdraw consent to the use of your image at any time (clause 8).
Request the deletion of your personal information, subject to our legal obligations to retain certain records (clause 12).
Make a complaint about how we have handled your personal information.
Complaints: please send your complaint to sales@hadiabeauty.com.au or to HADIA BEAUTY PTY LTD, 73 Walker Street, Dandenong VIC 3175. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, by phone on 1300 363 992 or by post at GPO Box 5288, Sydney NSW 2001.
14. Anonymity and pseudonymity
Where it is lawful and practicable to do so, you may deal with us anonymously or under a pseudonym (for example when making a general enquiry by phone). However, we cannot deliver salon services anonymously: we need your name and contact details to confirm your booking, contact you about changes, and meet our duty of care.
15. Children
We do not knowingly collect personal information from children under 13 without parental consent.
Where a service is provided to a minor (under 18), parental or guardian consent is required and the parent or guardian is treated as the contact for booking purposes. Treatment records for the minor are still subject to this Privacy Policy.
16. Third-party links
Our website may contain links to other websites (such as the AustraliaPOS booking page or our social media profiles). Those websites are operated by third parties and have their own privacy policies. This Privacy Policy applies only to hadiabeauty.com.au and the personal information we collect.
17. Changes to this policy
We may update this Privacy Policy from time to time as our business and the law evolves. The latest version will always be available at hadiabeauty.com.au/privacy and will show the effective date in the ‘Last updated’ line at the top.
If we make a material change that affects how we use your personal information, we will notify you by email (where we have your address) or by a clear notice on the website.
18. Contact us about privacy
Privacy Officer
HADIA BEAUTY PTY LTD
ABN 47 687 035 972
73 Walker Street, Dandenong VIC 3175
Phone: +61 451 009 747
Email: sales@hadiabeauty.com.au
Office of the Australian Information Commissioner (OAIC): oaic.gov.au, 1300 363 992.
