Privacy Policy

We only collect information we need to look after you. Depending on how you deal with us, this may include:

• Contact details: your name, phone number and email address.
• Booking details: the service you want, your preferred stylist, date and time, whether you're a new or existing client, and your appointment history.
• Hair model applications: your hair length, the services you're open to, and the photos you choose to send us.
• Job applications: the role you're interested in, anything you tell us about yourself, and your CV. CVs are emailed to our team rather than stored on the website, and kept only while we're recruiting.
• Service notes recorded in the salon, such as colour formulas and treatment history.
• Health information you choose to tell us, such as allergies, skin or scalp sensitivities or reactions to products. This is sensitive information under the Privacy Act. We only collect it with your consent and only to keep you safe during a service.
• Payment records. Card payments are processed by our payment provider; we don't store full card numbers. We don't collect payment details through this website.
• Technical information when you use our website, such as your browser type and a scrambled (hashed) version of your IP address used to stop spam. We can't use the hashed version to identify you.

We collect personal information directly from you: when you fill in a form on our website, email or call us, visit the salon, or apply for a job. If someone books on your behalf, please make sure you're happy for them to share your details with us.

You can ask us a general question without telling us who you are. To book an appointment or apply as a model we need your name and contact details.

If we receive personal information we didn't ask for, we'll destroy or de-identify it if we couldn't have collected it ourselves.

We use personal information to:

• respond to your enquiry and confirm, change or remind you about appointments;
• provide our services safely and to the standard you expect;
• consider you as a hair model and contact you about sessions;
• consider job applications;
• keep our records, handle complaints and meet our legal obligations;
• protect our website from spam and misuse; and
• send you news and offers, but only if you've agreed to receive them.

We won't use your information for any other purpose unless you agree, you'd reasonably expect it, or the law allows or requires it.

We only send marketing emails or text messages to people who have agreed to receive them, as required by the Spam Act 2003 (Cth). Every marketing message identifies us and includes a simple way to unsubscribe. We act on unsubscribe requests within 5 business days.

Messages about a booking or request you've made (such as a confirmation) are not marketing, and you'll still receive them while you have an active request with us.

We don't sell or rent personal information, and we don't share it with anyone for their own marketing. We share it only with trusted service providers who help us run the salon and website, and only so far as they need it:

• Vercel, which hosts our website (the parts that handle your forms run in Sydney, Australia);
• Neon, which hosts our database in Sydney, Australia;
• Resend, which delivers our emails;
• Microsoft 365, our email system;
• our salon booking and point of sale software;
• Shopify, which runs our online store at store.salonxpapas.com;
• Adobe Fonts and our map provider (OpenFreeMap), which receive your IP address when our pages load fonts and maps.

We may also disclose information where the law requires or allows it, for example to a court or regulator.

Our booking database is in Australia. Some of our service providers (including Vercel, Resend, Microsoft, Shopify and Adobe) are based overseas, mainly in the United States, and may store or process information there. We choose reputable providers and take reasonable steps to make sure they handle your information in line with the Australian Privacy Principles.

Our website uses privacy-friendly analytics and performance monitoring that don't use cookies and don't identify you. We also run automated security checks on our forms to block bots; these don't build a profile of you.

Our online store at store.salonxpapas.com is run by Shopify and uses its own cookies, explained in the store's privacy policy.

We don't use computer programs to make decisions about you that could significantly affect your rights or interests. Spam checks on our forms may block a message automatically; if that happens, please call us.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, change or disclosure. Our website uses encrypted connections, our database is access-controlled and hosted in Australia, and only staff who need information can see it.

We keep personal information only as long as we need it for the purposes above or as the law requires, then securely delete or de-identify it. Model application photos are deleted once we've reviewed them.

If a data breach is likely to cause you serious harm, we'll notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

We welcome clients under 16. If you're under 16, please ask a parent or guardian to make the booking or give us their details. Hair model applicants must be 18 or over, or have a parent or guardian apply for them.

You can ask to see the personal information we hold about you, or ask us to correct or delete it, at any time: email bookings@salonxpapas.com, call 07 3569 6800, or write to us at 18 Longland St, Newstead QLD 4006. We'll respond within 30 days. There's no charge, and if we can't give you access we'll explain why.

If you have a question or a concern about how we've handled your personal information, please email bookings@salonxpapas.com, call 07 3569 6800, or write to us at 18 Longland St, Newstead QLD 4006. We'll acknowledge your complaint promptly and aim to resolve it within 30 days.

If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au or 1300 363 992.

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.