REVAMPD HAIR STUDIO – PRIVACY POLICY
Effective date: 17 September 2026
Revampd Hair Studio is operated by Heartwell Group Pty Ltd (ABN 96 688 667 165) (“Revampd”, “we”, “our” or “us”).
We respect your privacy and are committed to handling personal information responsibly. This policy explains how we collect, use, store and disclose personal information when you visit our website, contact us, make a booking, purchase a product or service, apply for employment or otherwise interact with Revampd.
1. Personal information we collect
We may collect:
- your name, telephone number, email address and contact details;
- appointment, consultation, service and purchase history;
- hair type, colour history, extension history and treatment preferences;
- information about allergies, medical conditions, pregnancy, medications, sensitivities or scalp conditions where relevant to services such as hair extensions or nanoplasty;
- before-and-after photographs taken with your consent;
- payment and transaction information;
- correspondence, feedback, reviews, enquiries and competition entries;
- website information, including your IP address, browser, device, cookies and interactions with our website or advertising; and
- employment application and employee information.
Information concerning your health, pregnancy, medications or allergies may constitute sensitive information. We only request this information where it is reasonably necessary to assess the suitability or safety of a service and will obtain your consent to its collection.
If you choose not to provide relevant information, we may be unable to safely perform the requested service.
2. How we collect information
We may collect information:
- directly from you in person, by telephone, email or social media;
- through our WordPress website and online enquiry forms;
- through our Timely booking and salon-management system;
- through consultation or consent forms;
- when you make a payment or purchase;
- when you subscribe to marketing communications;
- through cookies, analytics and advertising technology; and
- from a parent, guardian or another person making a booking on your behalf.
Where reasonably practicable, you may interact with us without identifying yourself. However, identifying information will generally be required to make and manage salon appointments.
3. How we use your information
We may use personal information to:
- manage bookings, consultations, services, payments, cancellations and enquiries;
- determine whether a requested treatment is suitable and can be performed safely;
- provide personalised haircare advice, services and product recommendations;
- contact you about appointments, follow-up care or service-related matters;
- process purchases, refunds, deposits and gift vouchers;
- manage our customer relationships and service records;
- send promotional emails or messages where you have consented or where otherwise permitted by law;
- improve our services, website, advertising and customer experience;
- prevent fraud and protect our clients, employees and business;
- respond to complaints or legal claims;
- recruit and manage employees; and
- comply with taxation, workplace, insurance, accounting and other legal obligations.
You may unsubscribe from promotional emails or messages at any time by following the unsubscribe instructions provided or contacting us. We may still send non-promotional messages relating to existing bookings, transactions or services.
4. Booking, website and payment providers
We use third-party systems to operate our business, including:
- Timely for appointment bookings and salon management;
- WordPress for our website;
- Stripe, Afterpay and PayPal for payment processing;
- GoHighLevel (GHL) for customer relationship management and communications; and
- Meta and Google Analytics for advertising, analytics and measuring website performance.
Payment card details are generally collected and processed directly by the relevant payment provider. Revampd does not ordinarily retain complete payment card numbers.
These providers handle information under their own terms and privacy policies. We encourage you to review the privacy policy of any third-party service you use.
5. Disclosure of information
We may disclose personal information to trusted providers that assist us with:
- online bookings and appointment management;
- payment processing;
- website hosting and technical support;
- customer communications and marketing;
- advertising and analytics;
- accounting, legal, insurance and business administration;
- information technology and data storage; and
- other services necessary to operate the salon.
We do not sell or rent client information.
We may also disclose information where required or authorised by law, where reasonably necessary to protect a person’s safety or our legal rights, or in connection with a proposed sale, restructure or transfer of the business.
6. Offshore access and storage
Some of our technology providers may store or process information outside Australia.
Selected, non-sensitive client information may also be accessed by authorised offshore virtual assistants who help with administration, customer communications or marketing. Access is limited to the information reasonably required for their work. Our offshore assistants are not authorised to access sensitive consultation or health information unless specifically required, appropriately protected and permitted by law.
Where the Australian Privacy Principles apply, we will take reasonable steps to ensure overseas recipients handle personal information appropriately.
7. Photographs and social media
We may take before-and-after photographs to document results or promote our services. We obtain the client’s verbal consent before taking or publishing photographs for promotional or social-media purposes.
Promotional images are generally limited to the back of the client’s head and do not show the client’s face. We do not publish photographs of clients under 18 for promotional purposes.
You may decline photography without affecting your service. You may also withdraw consent for future use by contacting us. We may not be able to remove material that has already been lawfully published, shared or reproduced by third parties.
8. Cookies, analytics and advertising
Our website may use cookies, pixels and similar technologies, including Meta and Google Analytics, to:
- operate and secure the website;
- remember user preferences;
- understand how visitors use the website;
- measure advertising performance; and
- provide or improve relevant advertising.
These technologies may collect information about your device, browser, IP address, website activity and interactions with advertising.
You can manage or restrict cookies through your browser settings. Disabling cookies may affect some website functionality. Where required, we will obtain consent before placing non-essential cookies or using information for targeted advertising.
9. Security and data retention
We take reasonable administrative, technical and physical measures to protect personal information from loss, misuse, interference, unauthorised access, modification and disclosure.
We limit access to personal information to employees, contractors and service providers who reasonably require it to perform their duties.
Information is retained only for as long as reasonably necessary for the purpose for which it was collected or to satisfy legal, accounting, insurance and record-keeping obligations. When information is no longer required, we will take reasonable steps to securely delete, destroy or de-identify it.
No online transmission or electronic storage system is completely secure, and we cannot guarantee absolute security.
10. Data breaches
If we become aware of a suspected data breach, we will investigate and take reasonable steps to contain and address it. Where the Notifiable Data Breaches scheme applies, we will notify affected individuals and the Office of the Australian Information Commissioner when legally required.
11. Access and correction
You may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete or out of date.
We may need to verify your identity before processing a request. Access may be refused or limited where permitted by law, in which case we will generally explain the reason.
12. Employees and applicants
We may collect information from applicants and employees for recruitment, payroll, rostering, workplace safety, performance management and employment administration.
Employment records may be collected and retained as required under the Fair Work Act 2009, the Fair Work Regulations 2009, the Hair and Beauty Industry Award 2020 [MA000005], taxation, superannuation and other applicable workplace laws.
The Hair and Beauty Industry Award regulates employment conditions within the industry; it does not regulate the handling of client information.
13. Australian Consumer Law
Nothing in this policy excludes, restricts or modifies any right or remedy that cannot lawfully be excluded under the Competition and Consumer Act 2010, including the Australian Consumer Law, or other applicable consumer legislation.
We aim to ensure that representations concerning our services, products, pricing, results and privacy practices are accurate and not misleading.
14. Privacy law
Revampd currently has annual turnover of less than $3 million. Some small businesses may be exempt from parts of the Privacy Act 1988, depending on their activities and circumstances.
Whether or not Revampd is legally required to comply with every provision of the Privacy Act, we aim to handle personal information consistently with the Australian Privacy Principles, including principles relating to transparency, collection, use, disclosure, security, access and correction.
15. Privacy complaints
If you have a privacy question, concern or complaint, please contact us at:
Revampd Hair Studio
Heartwell Group Pty Ltd
ABN 96 688 667 165
Unit 3, 27 Davidson Terrace
Joondalup WA 6027
Email: hello@revampd.com.au
We will acknowledge or attend to privacy complaints within 48 hours and aim to investigate and resolve them within a reasonable period.
If the Privacy Act applies and you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au.
16. Changes to this policy
We may update this policy to reflect changes to our services, systems, business practices or legal obligations. The current version will be published on our website with its effective date.