Privacy Policy

Introduction

CottesGlow ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (the "Site") or use our spa services at Cottesloe Central, Shop 18, 460 Stirling Hwy, Peppermint Grove WA 6011 ("CottesGlow", "the Salon").

By using our website or reserving a service with us, you agree to the practices described in this policy. If you do not agree with this policy, please do not use our website or services.

Information We Collect

We may collect personal information that you voluntarily provide to us, including:

• Your name, email address, and phone number
• Details related to reservations, enquiries, or treatment preferences
• Any information you choose to share during a consultation or appointment

How We Use Your Information

We use the information we collect to:

• Respond to enquiries and communicate with you about appointments, treatments, and services
• Manage reservations, send service confirmations or reminders, and provide customer support
• Improve our website, services, and client experience
• Comply with legal, tax, and regulatory obligations
• Protect the safety, rights, and property of CottesGlow, our clients, staff, and website users

We will only use your information for the purpose it was collected, or a purpose you would reasonably expect, unless we have your consent or are required by law to do otherwise.

Reservation & Health Information

If you provide health related or skin related information for treatment purposes (for example, during a consultation or in response to a treatment questionnaire), we use that information only to deliver safe, appropriate, and personalised spa services, and only share it with the therapist(s) directly involved in your care.

We ask that you do not submit sensitive medical information through our general website contact form unless necessary. For treatment specific details, please discuss them directly with our team during your consultation or appointment, where this information can be recorded and stored appropriately.

Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes outlined in this policy, including any legal, accounting, or reporting requirements. Reservation and payment records processed through Square are retained in accordance with Square's own data retention practices. Contact form enquiries are generally retained for as long as needed to resolve your enquiry, and may be deleted periodically thereafter.

Cookies & Analytics

We use essential cookies (and similar local storage) so our website can remember your cookie preferences and support core site functionality.

With your consent via our cookie banner (“Accept All”), we may in future use non essential cookies or analytics tools (such as website usage analytics) to understand how visitors use the site and improve it. These tools will not load or run unless you have actively accepted non essential cookies.

You can change your cookie preference at any time by clearing your browser's site data for this domain, which will cause the cookie banner to reappear.

Please note that Square may set its own cookies when you follow a service link. We encourage you to review Square's Privacy Policy for details on how it handles cookies and data.

Sharing Your Information

We do not sell your personal information to third parties.

We may share your information with trusted service providers who help us operate our website and business, including:

• Square, Inc. (for service reservations and payment processing)
• Email or communication service providers, where used to respond to enquiries
• Analytics providers, only once you have consented to non essential cookies (see above)

We may also disclose your information where required by law, or where necessary to protect the rights, safety, or property of CottesGlow, our clients, staff, or the public.

Overseas disclosure. Some of our service providers (including Square) may store or process information outside Australia. Where this occurs, we take reasonable steps to ensure your information continues to be handled in a manner consistent with the Australian Privacy Principles, to the extent applicable.

Data Security

We take reasonable steps to protect your personal information from unauthorised access, loss, misuse, or disclosure, including relying on reputable third-party providers (such as Square) who maintain their own industry-standard security measures. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Your Rights

Subject to applicable Australian privacy law, you may request to:

• Access the personal information we hold about you
• Correct any inaccurate or outdated information
• Request deletion of your personal information, where reasonably practicable and not in conflict with our legal obligations

To make a request, please contact us using the details below. We will respond within a reasonable timeframe.

If you no longer wish to receive marketing or promotional communications from us, you may opt out at any time by contacting us directly or using any unsubscribe option provided in the communication itself.

Complaints

If you have concerns about how we have handled your personal information, please contact us first using the details below so we can try to resolve the issue directly.

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

Third Party Links

Our website may contain links to third party websites, such as social media platforms (Instagram, Facebook) and Square's reservation service. We are not responsible for the privacy practices or content of those external sites, and we encourage you to review their privacy policies separately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes your acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us: