Privacy notice

About this notice

This privacy notice explains how Nautic hair and beauty in Two Rocks ("we", "us") collects and uses your personal information when you book online or otherwise interact with our storefront.

We are the data controller for this information. Our storefront is provided by OpenChair, which acts as a data processor on our behalf. OpenChair handles secure storage, payment processing (via Stripe), and message delivery (via Resend and Twilio).

Information we collect

When you book or otherwise interact with our storefront, we collect: your name, email address, phone number, the services you book, the staff you book with, the dates and times of your appointments, any notes or preferences you provide, and a record of past visits.

For online deposits and gift card purchases, payment is handled by Stripe. We never see or store your full card details — Stripe shares only the last four digits and a token we use to issue refunds.

Cookies and similar technologies are used to keep your session active and to remember the booking you're working on.

How we use your information

We use the information we collect to: confirm and manage your bookings; send you reminders, confirmations, and follow-ups; take and refund payments; respond to enquiries you send us; provide a better experience by remembering your preferences; and meet our legal and tax obligations.

Cookies and tracking

We do not currently run third-party analytics or advertising tracking on the storefront. Functional cookies are still used to keep you logged in to your customer portal and to remember your booking details between steps.

You can withdraw your consent at any time by clearing the cookies for this site or by changing your browser's cookie settings.

Who we share information with

Your information is only shared with: our team (so they can serve you); OpenChair (as our software platform); Stripe (for payments); Resend and Twilio (for email and SMS messages we send you).

We do not sell your information to anyone, and we do not share it with advertisers except as described in the cookies section above.

How long we keep information

We keep your booking and contact information for as long as you are an active customer, plus a reasonable period afterwards (typically up to seven years) to meet financial and legal record-keeping obligations.

Your rights

Under the Privacy Act 1988 (Cth), you have the right to:

Request a copy of the information we hold about you. Ask us to correct anything that is inaccurate. Ask us to delete information we no longer need. Ask us to restrict or object to certain uses. Withdraw your consent for marketing or analytics at any time.

To exercise any of these rights, contact us at frog.davies81@gmail.com. We will respond within a reasonable period (usually within 30 days).

Children

Our storefront is not directed at people under 16. If you believe a child has booked with us without parental consent, please contact us at frog.davies81@gmail.com and we will remove the information.

Changes to this notice

We may update this notice from time to time. The "last updated" date below shows when it was last revised. We will tell you about significant changes when we send you a confirmation email for your next booking.

Complaints

If you are unhappy with how we have handled your information, please contact us first at frog.davies81@gmail.com. If we cannot resolve it, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) (https://www.oaic.gov.au).

Compliance

This notice is intended to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. It was generated automatically from a template. It is not legal advice — for advice on your specific circumstances, consult a solicitor.