Privacy Policy

1. Introduction

Keratin With Love ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. This policy complies with the Australian Privacy Act 1988 (Cth) and the General Data Protection Regulation (GDPR) where applicable.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you provide directly to us, including:

• Name and contact details (email, phone number)
• Hair type and treatment preferences
• Appointment booking information
• Payment information (processed securely by third-party providers)
• Communication preferences
• Any information you provide in contact forms or messages

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• Browser type and version
• Device information
• IP address
• Pages visited and time spent on pages
• Referring website addresses
• Operating system

3. How We Use Your Information

We use your personal information for the following purposes:

• Processing and managing appointment bookings
• Providing hair treatment services tailored to your needs
• Communicating with you about appointments, services, and inquiries
• Sending marketing communications (with your consent)
• Improving our website and services
• Complying with legal obligations
• Preventing fraud and ensuring website security

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on:

• Contract: To fulfill our service agreement with you
• Consent: When you've given explicit permission for specific purposes
• Legitimate interests: To improve our services and protect our business
• Legal obligation: To comply with applicable laws and regulations

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience. Cookies are small data files stored on your device. We use:

• Essential cookies: Required for website functionality
• Analytics cookies: To understand how visitors use our site
• Marketing cookies: To deliver relevant advertisements (with consent)

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

6. Third-Party Services

We use trusted third-party services to support our business operations:

• Timely: Online booking system
• Google Maps: Location services
• Payment processors: Secure payment handling
• Email service providers: Communication management

These third parties have their own privacy policies and are responsible for their own data practices.

7. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service providers who assist in our business operations
• Professional advisors (lawyers, accountants)
• Law enforcement or regulatory bodies when legally required
• Business successors in the event of a merger or acquisition

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Typically, we retain client records for 7 years in accordance with Australian business record-keeping requirements.

10. Your Privacy Rights

Under Australian Privacy Law:

• Access your personal information
• Correct inaccurate or outdated information
• Complain about privacy breaches
• Request deletion of information (subject to legal requirements)

Under GDPR (for EU residents):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us using the details in Section 13.

11. Marketing Communications

With your consent, we may send you promotional emails about our services, special offers, and hair care tips. You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in our emails
• Contacting us directly
• Updating your communication preferences in your booking account

12. Children's Privacy

Our services are intended for individuals 16 years and older. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have privacy concerns, please contact us:

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending you an email. The "Last Updated" date at the top of this policy indicates when it was last revised.

15. Privacy Complaints

If you believe we have breached your privacy rights, you may lodge a complaint with:

• Australia: Office of the Australian Information Commissioner (OAIC)
  www.oaic.gov.au
• EU: Your local Data Protection Authority