Privacy Policy

1. Introduction

At Beauty Industry Leaders (we, us, our) we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, hold, use, disclose and secure personal information in connection with our website [beautyindustryleaders.com.au] (Website) and related services (Services). It also explains your rights in relation to your personal information.

We are bound by the Privacy Act 1988 (Cth) and the APPs, and we endeavour to manage personal information in accordance with those obligations.

2. Who we are & contact details

The Website is operated by:

Beauty Industry Leaders / Samantha Kennedy

ABN: 52669895644

Address: 3 Chester Pass Road, Orana, WA 6330

Email: [email protected]

If you have any questions about this Privacy Policy, or you wish to make a privacy-related request, please contact us using the details above.

3. What personal information we collect

We may collect personal information from you including (without limitation):

Name
E-mail
Postal address
Phone number
Payment information (if you purchase products or services via our Website)
Date of birth (where relevant for age-verification or promotions)
Photographs and/or videos (if you submit user content, testimonials or participate in promotions)
Browsing/activity data (via cookies and analytics tools)
Any other information you provide to us in forms, surveys or communication with us

4. How and when we collect personal information

We collect personal information when you interact with us, for example:

When you register for an account or sign up to our newsletter
When you purchase products or services via our Website
When you submit an enquiry, participate in promotions, share testimonials or user-generated content
When you browse our Website: we use cookies, analytics and tracking technologies (see Section 10)
From third-party sources if you authorise them (for example social media login) or we otherwise lawfully obtain the information

5. Purposes for which we collect, hold, use and disclose personal information

We collect, hold, use and disclose your personal information for the following purposes:

To deliver our Services, process transactions, fulfill orders and manage payments
To communicate with you about your account, orders, requests or enquiries
To send you marketing material (where you have opted in or where otherwise lawful) about our products, services, loyalty programs, promotions, events or relevant industry news
To personalise your experience on our Website (including recommendations and offers)
To improve our Website and Services (including analytics, research, testing)
To comply with legal, regulatory or audit obligations
Any other purpose disclosed to you at the time of collection

If we intend to use or disclose your personal information for a purpose other than those above, we will ask for your consent (where required) or otherwise rely on an applicable exception under the Privacy Act.

6. Disclosure of personal information to third parties

We may disclose your personal information to:

Our service providers, contractors and third-party vendors (for example payment processors, web hosting, marketing platforms, analytics providers, fulfilment/dispatch partners)
Our professional advisers (lawyers, accountants)
Compliance, regulatory and law enforcement authorities where required or permitted by law
Related entities within our corporate group
Third parties in connection with a business sale, merger or restructure (subject to confidentiality)
and any other entity for which you have provided consent.

Where we disclose personal information to overseas recipients (for example data storage or processing outside Australia), we will ensure we have appropriate safeguards in place consistent with APP 8 (Cross-border disclosure).

7. Data quality, security and retention

We will take reasonable steps to ensure that the personal information we collect is accurate, complete and up-to-date (in accordance with APP 10).

We will take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure (in accordance with APP 11).

We retain personal information as long as necessary to fulfil the purposes for which it was collected, or as required by law. When we no longer require the information, we will either securely delete or de-identify it (in accordance with APP 11).

8. Access and correction of your personal information

Under APP 12 and APP 13 you have a right to request access to your personal information we hold, and request corrections if you believe it is inaccurate, incomplete or out-of-date.

If you wish to access or correct your personal information, please contact us at the contact details provided above. We may charge a reasonable fee for providing access if permitted by law, and we may refuse access in certain circumstances allowed under the Privacy Act.

9. Complaints and dispute resolution

If you believe we have breached the APPs or this Privacy Policy in how we handle your personal information, please contact us in writing and we will investigate and respond within a reasonable time.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC). The OAIC’s contact details can be found on its website.

10. Cookies, tracking and automated decision-making

We use cookies, web beacons, analytics tools (such as Google Analytics), and other similar technologies to collect information about visits to our Website, usage patterns, device/browser type, geographic location, referral source, and other browsing information. This information may include identifiers and may be aggregated or anonymised.

You may disable cookies via your browser settings, but note that this may affect your ability to use certain features of the Website.

We may also use automated technologies (algorithms, profiling) to personalise your experience, recommend content or marketing material. If you wish to opt-out of automated decision-making, please contact us.

11. Marketing communications

If you have subscribed to our newsletter, opted in to receive marketing communications, or are a customer, we may send you promotional material about our products, services, events, industry updates and special offers. You may opt-out or unsubscribe from marketing communications at any time by following the unsubscribe link in the communication or by contacting us.

If you opt-out, we may still send you non-promotional communications (such as service or account-related messages) which are necessary for us to provide our Services.

12. Sensitive information

Where relevant to our Services, we may collect sensitive information (for example health or biometric data, ethnicity, religious beliefs or trade union membership). Sensitive information is subject to stricter handling under the Privacy Act. We will only collect sensitive information where you have provided explicit consent and such collection is reasonably necessary for our functions or services.

13. International transfers / cross-border disclosure

If your personal information is disclosed or stored outside Australia, we will take reasonable steps to ensure the overseas recipient is subject to obligations comparable to the APPs or otherwise has adequate safeguards in place.

14. Minors and parental consent

Our Website and Services are generally directed at adults aged 18 years and over. If you are under 18, you should obtain the consent of your parent or guardian before providing personal information to us.

15. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time (for example to reflect changes in our practices, regulatory requirements or technological developments). The updated version will be posted on our Website with the “Effective date” updated accordingly. Your continued use of the Website or our Services after the effective date constitutes acceptance of the updated policy.

16. Privacy Impact Assessments & Data Breach Response

We maintain a privacy-management framework consistent with good practice and guidance from the OAIC. In the event of an eligible data breach (as defined in the Privacy Act), we will follow our internal data-breach response procedures, notify the affected individuals and the OAIC when required by law.