Effective date: 26 January 2026

Welcome to Colour My Canvas. We respect your privacy and are committed to protecting your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). [oaic.gov.au]

• Name
• Email address
• Phone number
• Postal address
• Booking details

• Photos you provide or consent to us collecting
• Hair, skin and eye colour observations
• Undertone assessments

Sensitive information may include allergies, skin conditions or similar details that relate to your consultation. We only collect this information with your consent.

• Partial payment details processed securely through Square
• Bank transfer confirmations (no bank login information is received or stored)

• IP address
• Browser information
• Website interactions
  Some online identifiers may be considered personal information. 

We collect information when you:

• Make a booking
• Contact us directly
• Use our website
• Participate in consultations
   

If we receive information without requesting it, we handle it in accordance with APP 4 and delete it if appropriate.

We use your personal information to:

• Provide colour analysis services
• Manage bookings and payments
• Communicate appointment reminders and follow-up resources
• Improve customer experience and website functionality
• Send marketing communications (optional; you can unsubscribe anytime)
  Direct marketing is handled in line with APP 7

We only use your information for purposes you would reasonably expect, with your consent, or where permitted by law. 

Where lawful and practical, you may interact with us anonymously. Some services, such as bookings and payments, require accurate identity details. 

You may receive newsletters or updates from us. You can opt out at any time.
We do not use sensitive information for marketing without consent. 

Our website may use cookies and analytics tools. You can disable cookies in your browser settings, although some website functions may be limited.
Some online identifiers can qualify as personal information. 

We do not use or disclose government identifiers (such as Medicare or licence numbers) as our own identifiers except where permitted by APP 9. 

We work with trusted external providers so we can deliver services efficiently:

Securely processes card payments. We do not store your full card details.

If you choose to pay via direct bank transfer, we only receive transfer confirmations.

Such as:

• Booking platforms
• Email and SMS communication tools
• Cloud storage providers
• Website hosting and analytics services

We take reasonable steps to ensure third parties comply with privacy protections similar to the APPs. 

Some service providers may store data overseas.
Before disclosing personal information overseas, we ensure the recipient meets APP‑comparable protections, or we obtain your consent, or another exception applies.
If practicable, we will advise you of the relevant countries. 

We take reasonable steps to ensure the information we hold is accurate and up to date. Please contact us if your details need updating. 

We use reasonable safeguards to protect your information from:

• Misuse
• Loss
• Unauthorised access
• Modification or disclosure
   

You may request access to the personal information we hold about you.
We usually respond within 30 days in line with APP 12.
Identity verification may be required.
We do not charge for making a request.

If information we hold is inaccurate, incomplete or outdated, you may request correction.
We will action requests within a reasonable timeframe and free of charge.
If we refuse, we will explain why and outline complaint options.
Handled in accordance with APP 13.

Our services are designed for adults.
If you are under 18, consent should be provided by a parent or guardian.

We keep personal information only for as long as necessary to provide services or meet legal requirements.
After this, we securely destroy or de‑identify the information. 

If you have a privacy concern, please contact us.
We aim to respond within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC): [oaic.gov.au]

• Email: enquiries@oaic.gov.au
• Phone: 1300 363 992
• Website: https://www.oaic.gov.au

Many small businesses under $3 million turnover are not legally required to comply with the Privacy Act unless they meet specific conditions, but Colour My Canvas chooses to follow the APPs to uphold strong privacy standards. [oaic.gov.au]

We may update this Privacy Policy from time to time.
The latest version will always be available on our website.
Significant updates will be communicated where appropriate.