PRIVACY POLICY
Who we are
La Signora Brows & Beauty (ABN 32 238 534 147) is a private, appointment-only beauty studio operated by Vasilka Bartolic as a sole trader at 20 Shearwater Drive, Mount Martha VIC 3934. We provide brow styling, lash services and cosmetic tattooing. Because some of our services involve collecting health information, we handle your personal information in line with the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Health Records Act 2001 (Vic). This policy explains what we collect, why, where it is stored, and your rights. If there is any inconsistency between the Privacy Act 1988 (Cth) and this policy, the Privacy Act prevails to the extent of the inconsistency.
What we collect
Contact and identity details: your name, phone number, email address and date of birth. Health information: medical history relevant to your treatment, including allergies, medications, skin conditions, pregnancy status and prior cosmetic tattooing. This is collected through consultation and consent forms before treatment.
Treatment records: notes about the services you receive, pigments and products used, and healing progress.
Photographs: before and after photos of the treatment area, taken for your clinical record.
Payment information: saved-card booking security, optional prepayments and completed-service payments are processed securely by Fresha Payments. We do not see or store your full card details.
Website and enquiry data: information you submit through our contact form, and standard analytics collected by our website platform.
Why we collect it
We collect this information to deliver treatments safely and lawfully: to check suitability and contraindications before a service, to keep accurate clinical records, to manage bookings, saved-card security, optional prepayments, reminders and payments, to meet our insurance and legal obligations, and, only with your separate consent, to send marketing communications or share your photos publicly. If you choose not to provide health information we ask for, we may not be able to safely provide the treatment. Because our services involve health and medical risks, it is not practical or safe for you to interact with us anonymously or using a fake name. We must know your true identity to safely provide treatments, maintain accurate clinical records, and validate your consent.
Where your information is stored
Fresha, our booking and client-record system, is the system of record for your profile, appointment history, consent forms, treatment records and clinical photos. Our email runs on Microsoft 365 and our website on Squarespace. Photos are stored securely on the platforms we use to run the business — Fresha, our website (Squarespace) and our social media platforms (Instagram, Facebook, TikTok, Pinterest and YouTube). Your clinical before-and-after photos are held in Fresha, our booking platform. Where you have signed a photo release, portfolio copies of your completed results may also be published on our Fresha booking profile, our website or our social media.
We are a cloud-based business. La Signora Brows & Beauty is Australian owned and operated, our domain (lasignorabrowsandbeauty.com.au) is registered in Australia, and our accounts are held under our Australian business details. Some of your information is stored in Australia — for example, our Microsoft 365 email is held at rest in Microsoft's Australian data centres. Our other providers are established global cloud platforms that store data on secure servers located overseas: Fresha in the United Kingdom and the European Union, and Squarespace, Meta (Facebook and Instagram), Google (including Google Business Profile and YouTube), TikTok and Pinterest primarily in the United States and Europe. Each provider handles personal information under its own privacy and data-retention policy, which is published on its website, and maintains security and privacy standards designed to meet laws such as the EU GDPR. We take reasonable steps to ensure these providers protect your personal information to a standard consistent with Australian privacy law.
Photographs and your choice
Before and after photos form part of your clinical record and are required for safe treatment and insurance purposes. Whether they are ever used publicly is entirely your choice, made through a separate, optional Photo and Video Release. If you do not sign the release, your photos remain in your clinical record only and are never published on our Fresha booking profile, website or social media. You can withdraw your release at any time by contacting us, and we will remove your images from future marketing use.
How long we keep it
We keep client records, including health information and clinical photos, for a minimum of 7 years from your last visit or contact, as required for health records in Victoria. For clients under 18, records are kept until the client turns 25. After the retention period, records are securely deleted.
Who we share it with
We do not sell or rent your personal information. We share it only with the service providers named above so they can operate our systems, with our insurer or legal advisers if required to respond to a claim, and with regulators or authorities where the law requires it.
Marketing communications
Booking confirmations, reminders and aftercare messages are sent as part of providing your service. Marketing messages are only sent with your consent, and every marketing email or SMS includes a way to opt out. Opting out of marketing does not affect booking-related messages.
Cookies and analytics
Our website uses cookies and standard analytics provided by Squarespace to understand how visitors use the site. We also use advertising and analytics tools from Meta (Facebook and Instagram) and Google — including the Meta Pixel and Google Analytics and Ads tags — to measure how our ads and website perform and to show relevant advertising. These tools may set cookies and collect information about your visit and device. You can control cookies through your browser settings, and you can opt out of personalised advertising through your Meta and Google account settings.
Security
Access to client records is limited to the business owner, protected by strong passwords and two-factor authentication. Client photos are kept only within the business platforms we use, never in personal photo libraries or personal accounts. In the unlikely event of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.
Access, correction and complaints
You can ask to access or correct the personal information we hold about you at any time by emailing hello@lasignorabrowsandbeauty.com.au. Please let us know if your contact details or medical history change so we can keep your records accurate, complete, and up to date. We will respond within 30 days. If you have a privacy concern, please contact us first so we can try to resolve it. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992) or, for health information in Victoria, the Health Complaints Commissioner (hcc.vic.gov.au, 1300 582 113).
Contact
La Signora Brows & Beauty, ABN 32 238 534 147, 20 Shearwater Drive, Mount Martha VIC 3934. Email hello@lasignorabrowsandbeauty.com.au or phone 0400 368 789.
Changes to this policy
We may update this policy from time to time. The current version will always be published on this page. Effective date: 1 March 2026.