Last updated: 24 September 2026

This Privacy Policy explains how ARIA HAIR (ABN 29 622 728 349) ("we", "us" or "our") collects, uses, discloses and protects your personal information when you visit our salon at 4/713-715 Military Road, Mosman NSW 2088, book or receive our services, make a purchase, visit our website at www.ariahair.com.au, or otherwise communicate with us (together, our "Services").

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our Services, you acknowledge that your personal information will be handled as described in this policy.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or to legal and regulatory requirements. The current version will always be available on our website, with the "Last updated" date shown at the top.

What personal information we collect

"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable. Depending on how you interact with us, we may collect:

• Contact details: your name, phone number, email address and postal address.

• Booking and appointment information: your appointment history, services booked, stylist preferences, deposits paid, cancellations and notes you provide when booking.

• Service and consultation records: information about your hair and scalp, colour history and formulas, extension type, shade, method and maintenance history, and product recommendations, so we can deliver consistent, tailored results.

• Health-related information: where relevant to your safety, such as allergies, sensitivities, patch test results or scalp conditions. This is sensitive information, and we only collect it with your consent and where it is reasonably necessary to provide our services safely.

• Photos: before and after photos of your hair, taken with your permission (see "Photos and social media" below).

• Payment and order information: billing and shipping details and payment confirmations. Card payments are processed securely by our payment providers, and we do not store your full card details.

• Account information: if you create an account with us or our booking platform, your login details and account preferences.

• Communications: information you include when you contact us by phone, email, social media or through our website.

• Website usage data: information about how you use our website, such as your device and browser type, IP address and the pages you visit, collected through cookies and similar technologies.

How we collect your personal information

We collect most personal information directly from you, including when you book an appointment, attend a consultation or service, buy products or gift cards, subscribe to our emails, enter a promotion, or contact us.

We may also collect personal information from third parties, such as our online booking platform (Phorest), payment processors, website and email service providers, and social media platforms when you interact with us there. If someone books an appointment or buys a gift card on your behalf, we may receive your details from them.

Where it is lawful and practicable, you may deal with us anonymously or using a pseudonym, for example when making a general enquiry. However, we need your name and contact details to make a booking or provide our services.

How we use your personal information

We use your personal information to:

• book, confirm, manage and remind you of appointments, and manage deposits and our cancellation policy;

• provide our hair, colour and extension services safely and consistently, including keeping records of your consultations, formulas and extension details;

• process payments, orders, gift cards and memberships;

• respond to your enquiries and provide customer support;

• send you marketing communications, where you have agreed to receive them;

• improve our services, website and client experience;

• protect our business, clients and team, including detecting and preventing fraud; and

• comply with our legal obligations.

We will only use or disclose your personal information for another purpose if you consent, if you would reasonably expect it, or if it is required or permitted by law.

Photos and social media

We may take before and after photos to record your results and plan future appointments. We will only use photos in which you can be identified on our website, social media or marketing with your consent. You can withdraw your consent at any time by contacting us, and we will stop using the photo in future content. We may not be able to remove content that has already been shared by others.

Marketing

With your consent, we may send you news, offers, promotions and updates by email and SMS, including through our booking platform, Phorest. We may also use your appointment history to send you relevant offers or reminders about services you may be due for. Every marketing message includes a simple way to unsubscribe, in line with the Spam Act 2003 (Cth). If you unsubscribe, we may still contact you about your appointments, purchases or account.

Cookies and tracking technologies

Our website uses cookies and similar technologies to operate the site, remember your preferences, understand how visitors use it, and, where applicable, measure and tailor our advertising. Some of these technologies are provided by third parties, such as our website platform and analytics or advertising providers.

Most browsers let you refuse or delete cookies through their settings. Blocking cookies may affect how parts of our website work.

Automated decision-making

We do not use computer programs to make, or substantially assist in making, decisions that could significantly affect your rights or interests. If this changes, we will update this Privacy Policy to explain the kinds of personal information used and the kinds of decisions made.

How we disclose your personal information

We do not sell your personal information. We may disclose it to:

• service providers who help us run our business, such as our online booking platform (Phorest), website host (Squarespace), payment processors, email and SMS providers, IT and data storage providers, and professional advisers;

• our related businesses, including ARIA Hair Extensions, where reasonably necessary to provide our services, for example to order your extensions;

• anyone you authorise us to share information with; and

• government authorities, courts or others where required or permitted by law.

We require our service providers to handle personal information only for the purposes we engage them for and to protect it appropriately.

Overseas disclosure

Some of our service providers, such as our website and booking platforms, store or process information outside Australia, including in the United States. Where we disclose personal information overseas, we take reasonable steps to ensure it is handled in a way consistent with the Australian Privacy Principles.

Children

We provide services to children, but our website and online booking are intended for adults. For clients under 18, we collect personal information from, and communicate with, a parent or guardian. We do not knowingly collect personal information directly from children online. If you believe a child has given us personal information without a parent or guardian's involvement, please contact us and we will delete it.

Security and retention

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. This includes using reputable service providers, restricting access to our team members who need it, and using secure systems. No method of transmission or storage is completely secure, so we recommend you do not send sensitive information to us through unsecured channels.

We keep personal information only for as long as we need it for the purposes described in this policy or to meet our legal obligations. When it is no longer needed, we take reasonable steps to securely destroy or de-identify it.

Data breaches

If a data breach involving your personal information is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

Accessing and correcting your information

You can ask to access the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. You can also ask us to delete information we no longer need. To make a request, email us at hello@ariahair.com.au. We may need to verify your identity first.

We will respond within a reasonable time, usually within 30 days. We do not charge for making a request, but may charge a reasonable fee for providing access in some cases. If we refuse your request, we will explain why in writing and let you know how to complain.

Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us using the details below. We will acknowledge your complaint, investigate it, and aim to respond in writing within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.

Contact us

For questions about this Privacy Policy or your personal information, please contact:

ARIA HAIR

4/713-715 Military Road, Mosman NSW 2088

Email: hello@ariahair.com.au

Phone: (02) 9327 3545