Legal

Privacy Policy

Effective Date: 2 August 2026

The Rich Brow (ABN 38 833 614 310) is committed to protecting your privacy. This Privacy Policy explains how we collect, hold, use and disclose your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our website or services, you consent to the practices described in this Policy.

1.

Who We Are

The Rich Brow is a professional beauty salon located at Shop 184/569 George Street, Sydney CBD NSW 2000, Australia. We provide eyelash extensions, eyebrow services, nail services, waxing, facial treatments and related beauty services. In this Policy, 'we', 'us' and 'our' refers to The Rich Brow.

2.

What Personal Information We Collect

We may collect the following types of personal information: contact details (name, email address, phone number); appointment and booking information; health information relevant to treatment suitability, including allergies, skin conditions, eye conditions, medications and pregnancy status; payment information (processed securely through our booking platform); photographs and images taken before and after treatments (with your consent); feedback, reviews and testimonials you provide; and website usage data collected via cookies and analytics tools. We collect only the information reasonably necessary to provide our services.

3.

How We Collect Personal Information

We collect personal information directly from you when you make a booking through our website or booking platform (Fresha), contact us by phone, email or in person, complete a consultation or intake form, provide feedback or a review, interact with our social media pages, or visit our website. We may also collect information automatically through cookies and analytics tools when you browse our website.

4.

Sensitive Information

Health information is a type of sensitive information under the Privacy Act. We collect health information only where it is reasonably necessary to provide safe and appropriate beauty treatments. We will seek your consent before collecting sensitive information and will handle it with a higher level of care. You may decline to provide health information, however this may affect our ability to safely perform certain treatments.

5.

How We Use Your Personal Information

We use your personal information to: provide, manage and improve our beauty services; process bookings, payments and cancellations; send appointment reminders and follow-up communications; respond to your enquiries and complaints; send marketing communications where you have consented; comply with legal and regulatory obligations; and improve our website and service offerings. We will not use your personal information for purposes other than those described in this Policy without your consent, unless required or permitted by law.

6.

Marketing Communications

We may send you promotional emails, SMS messages or social media communications about our services, offers and events where you have consented to receive them. You may opt out of marketing communications at any time by clicking the unsubscribe link in any email, replying STOP to any SMS, or contacting us at [email protected]. We will process opt-out requests promptly and within a reasonable timeframe.

7.

Disclosure of Personal Information

We may disclose your personal information to: our booking platform provider (Fresha) for appointment management; payment processors for secure payment handling; IT and software service providers who assist us in operating our business; professional advisers including lawyers and accountants; and government or regulatory authorities where required by law. We do not sell, rent or trade your personal information to third parties for their own marketing purposes. Where we share information with third-party service providers, we take reasonable steps to ensure they handle your information in accordance with the Privacy Act.

8.

Overseas Disclosure

Some of our third-party service providers may be located overseas, including cloud storage and software providers. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure those recipients handle your information in a manner consistent with the Australian Privacy Principles. By using our services, you consent to the potential disclosure of your personal information to overseas recipients for the purposes described in this Policy.

9.

Cookies & Website Analytics

Our website uses cookies and similar technologies to improve your browsing experience, analyse website traffic and understand how visitors use our site. Cookies are small text files stored on your device. You may disable cookies through your browser settings, however this may affect the functionality of our website. We may use third-party analytics tools such as Google Analytics to collect aggregated, non-identifiable data about website usage.

10.

Photography & Social Media

We may take before and after photographs or videos for quality assurance, training and marketing purposes. By attending an appointment, you consent to photography unless you advise us otherwise in writing before your appointment. Where photographs are used for marketing, we will not identify you by name without your separate consent. Where you voluntarily submit reviews, testimonials, photographs or social media tags referencing The Rich Brow, you grant us a non-exclusive, worldwide, royalty-free licence to use that content for marketing purposes unless you request otherwise in writing.

11.

Security of Your Information

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification and disclosure. These steps include secure storage systems, restricted staff access, and using reputable third-party platforms with their own security measures. While we take reasonable precautions, no data transmission over the internet is completely secure. If you have concerns about the security of your information, please contact us.

12.

Retention of Personal Information

We retain personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes and enforce our agreements. Health information collected for treatment purposes is retained in accordance with applicable health records legislation. When personal information is no longer required, we take reasonable steps to destroy or de-identify it.

13.

Access & Correction

You have the right to request access to the personal information we hold about you and to request corrections if it is inaccurate, incomplete or out of date. To make an access or correction request, please contact us at [email protected]. We will respond to your request within a reasonable timeframe (generally within 30 days). We may decline access in limited circumstances permitted by the Privacy Act, and will explain our reasons if we do so.

14.

Complaints

If you believe we have breached the Australian Privacy Principles or otherwise mishandled your personal information, you may lodge a complaint by contacting us at [email protected]. We will acknowledge your complaint within 2 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

15.

Children's Privacy

We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. For customers under 18, we require a parent or legal guardian to provide consent before treatment and may collect the guardian's contact details for appointment management purposes.

16.

Third-Party Links

Our website may contain links to third-party websites, including our booking platform Fresha and our social media pages. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party websites you visit.

17.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Updated versions will be published on our website with a revised effective date. We encourage you to review this Policy periodically. Continued use of our website or services after publication of an updated Policy constitutes acceptance of the changes.

Privacy Enquiries

The Rich Brow (Trading Name) | ABN: 38 833 614 310 | Shop 184/569 George Street, Sydney CBD NSW 2000

[email protected]

Office of the Australian Information Commissioner: www.oaic.gov.au | 1300 363 992