Privacy Policy

1. Who We Are

This Privacy Policy applies to personal information collected by Hairbrise, through our website www.hairbrise.com, our online checkout, our consultation bookings, our customer service email, and any other interaction you have with Hairbrise.

2. Personal Information We Collect

We may collect the following personal information from you:

• Identity information: name, gender (if you choose to share), date of birth (only if relevant to age-restricted purchases or NDIS-related transactions);
• Contact information: email address, phone number, billing address, delivery address;
• Order information: details of Products purchased, order history, communications with our customer service team;
• Consultation information: notes about your hair and styling preferences, head measurements, photos taken with your consent for fitting purposes;
• Payment information: limited card details (last four digits, card brand) — full payment card numbers are collected and stored by Stripe, not by Hairbrise;
• Website usage information: IP address, browser type, device type, pages visited, referring website (collected automatically through cookies and analytics tools);
• Marketing preferences: whether you have opted in to receive emails or other marketing communications.

We do not knowingly collect sensitive information (as defined in the Privacy Act 1988) such as health information unless you voluntarily disclose it to us in connection with a consultation, and only with your consent.

3. How We Collect Personal Information

We collect personal information directly from you when you:

• Place an order on our website;
• Book a consultation;
• Contact us by email, phone, or social media;
• Sign up for our mailing list;
• Browse our website (through cookies and similar technologies).

Where you provide us with personal information about a third party (for example, a delivery to a friend or family member), you confirm that you have authority from that person to do so.

4. How We Use Your Personal Information

We use your personal information to:

• Process and fulfil your orders, including arranging delivery;
• Provide consultation services and recommend suitable Products;
• Process payments through our payment processor;
• Communicate with you about your order, including delivery updates and aftercare;
• Respond to enquiries, complaints, and returns requests;
• Send you marketing communications, where you have consented (you can unsubscribe at any time);
• Improve our website, products, and customer service;
• Comply with our legal obligations (including tax and consumer law obligations); and
• Detect and prevent fraud or misuse of our services.

5. Who We Share Your Personal Information With

We do not sell your personal information. We share it only with:

• Stripe (payment processing) — Stripe handles your payment card information in accordance with their own privacy policy and PCI-DSS;
• Australia Post and courier providers — to deliver your order to the address you provided;
• Email and marketing service providers — where you have opted in (for example, an email platform used to send our newsletter);
• Website hosting and analytics providers — including providers of cookie and analytics tools that help us understand how the website is used.

Some of these providers may store data overseas (for example, Stripe stores some information outside Australia). Where this occurs, we take reasonable steps to ensure the recipient is bound by privacy obligations broadly comparable to the Australian Privacy Principles.

6. Cookies and Website Analytics

Our website uses cookies and similar technologies to operate the site, remember your preferences, and analyse website traffic. Most browsers allow you to refuse cookies or alert you when cookies are used; however, parts of the website may not function correctly if cookies are disabled.

We may use third-party analytics services (such as Google Analytics) to understand visitor behaviour. These services collect information in an aggregated form. If you do not want your visit to be recorded, you can opt out using your browser settings or industry opt-out tools.

7. Marketing Communications

We will only send you direct marketing where you have provided your consent (for example, by subscribing to our mailing list at checkout). Every marketing email will include a clear unsubscribe link, in accordance with the Spam Act 2003 (Cth). You can also unsubscribe at any time by emailing us.

8. How We Store and Protect Your Information

We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification, and disclosure. Measures include:

• Storing data on secure platforms with reputable providers;
• Limiting access to personal information to people who need it;
• Using strong passwords and multi-factor authentication where available;
• Not storing full payment card numbers (this is handled by Stripe).

9. How Long We Keep Your Information

We keep your personal information only for as long as we reasonably need it for the purposes set out above and to comply with our legal obligations. When we no longer need it, we will take reasonable steps to destroy or de-identify it.

10. Your Rights — Access, Correction, and Complaints

You have the right to:

• Ask what personal information we hold about you and request a copy;
• Ask us to correct information that is inaccurate, out of date, or incomplete;
• Withdraw consent to marketing at any time;

11. Children

Hairbrise's services are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18 without parental consent.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version will be available on our website at www.hairbrise.com. Material changes will be notified to you where reasonably practicable.