This Privacy Policy outlines how Dip Bathhouse (“we”, “us”, “our”) collects, uses, stores, discloses, and protects personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
By using our services, website, or booking systems, you agree to the terms of this Privacy Policy. This Privacy Policy forms part of, and should be read alongside, the Dip Bathhouse Terms of Service, the Dip Bathhouse Cancellation & Rescheduling Policy, and the Client Entry Waiver, Release & Assumption of Risk.
We may collect the following types of personal information:
Health information disclosed via our Client Entry Waiver or consultation forms (such as pregnancy, cardiovascular conditions, or other medical information) is “sensitive information” under the Privacy Act and is subject to a higher standard of protection, as set out in Section 4 below.
We collect information when you:
Health information you disclose to us — including via the Client Entry Waiver, consultation forms, or verbally to staff — is collected only with your consent, given at the time you complete the relevant form or disclose the information.
We collect health information solely to:
We do not use health information for any marketing purpose. You may decline to disclose health information, but doing so may affect our ability to safely provide certain services to you, and Dip Bathhouse may decline to provide a service where it cannot adequately assess risk as a result.
We collect and use your information to:
We do not sell or rent your personal information.
We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, or disclosure, including:
We retain personal information only for as long as reasonably necessary for the purposes it was collected, or as required by law. As a general guide:
Where you request deletion of your personal information and we are not required by law to retain it, we will take reasonable steps to delete or de-identify it.
In the event of a data breach involving your personal information that is likely to result in serious harm, Dip Bathhouse will comply with the Notifiable Data Breaches scheme under the Privacy Act, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.
We may disclose your information to:
We use third-party service providers, including our booking platform, Fresha, to manage bookings, payments, and client records. These providers may store or process personal information on servers located outside Australia, including in jurisdictions such as the United Kingdom, the European Union, or the United States, depending on the provider’s infrastructure.
Where your personal information is disclosed to an overseas recipient, we take reasonable steps to ensure that recipient is subject to privacy protections that are at least comparable to the Australian Privacy Principles, including by relying on our service providers’ own data protection commitments and contractual terms. However, in some circumstances, Australian Privacy Principle 8.1 may not apply to a particular disclosure where an exception under the Privacy Act applies (for example, where you have consented to the disclosure by using a service that requires it).
You may request access to, or correction of, your personal information by contacting us at: [email protected]
We will respond to access and correction requests within a reasonable period, generally within 30 days. We may need to verify your identity before providing access to or correcting your information.
We may send you updates, offers, or promotions. You may opt out at any time using the unsubscribe link or by contacting us. We do not use health or sensitive information for marketing purposes.
Our website may use cookies and analytics tools to improve user experience. You can adjust your browser settings to disable cookies. Disabling cookies may affect the functionality of our website or booking system.
If you have a concern about how we have handled your personal information, you may lodge a complaint with us at [email protected]. We will investigate and respond within a reasonable timeframe. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
We may update this policy periodically. The latest version will always be available via our website. Continued use of our services following a published update constitutes acceptance of the updated policy.