Free Cookie Policy Generator for Salon / Spa — Australian Privacy Act Compliant

🇦🇺 Key Australian Privacy Act Requirements

Australia's Privacy Act 1988 and its 13 Australian Privacy Principles (APPs) regulate how organizations with annual turnover over AUD $3 million collect, use, and disclose personal information. The OAIC (Office of the Australian Information Commissioner) enforces the law and can issue fines up to AUD $50 million for serious and repeated breaches.

• Notify individuals about data collection at or before the time of collection
• Only collect personal information that is reasonably necessary
• Provide individuals with access to their personal information
• Take reasonable steps to protect personal information from misuse or unauthorized access
• Notify the OAIC and affected individuals of eligible data breaches (Notifiable Data Breaches scheme)
• Cross-border disclosure requires that overseas recipients comply with the APPs

Salon / Spa — Specific Considerations

Salons and spas collect client contact information, service preferences, health and allergy information relevant to treatments, and payment details. Some treatments require detailed health intake forms — allergy history, medications, skin conditions — which constitute sensitive health data. Appointment booking systems typically involve third-party platforms with their own data practices.

Data typically collected by Salon / Spa businesses: client name and contact info, appointment history, treatment preferences, health and allergy information, before/after photos (with consent), payment information

• Health and allergy intake data as sensitive personal data
• Before/after photo consent and usage rights
• Third-party booking platform data sharing
• Loyalty and referral program data
• Staff access to client health records