Privacy policy

Looking after you means looking after your information too. This policy explains, in plain language, what we collect when you visit the spa or our website, why we collect it, and the choices you have.

Who we are

Serenive Beauty & Spa is a day spa at 16 Frost Rd, Salisbury SA 5108, operated by Rebecca Handyside (ABN 61 463 662 718). In this policy, “we”, “us” and “Serenive” mean the spa and the people who work in it.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Because some treatments involve asking about your health, we treat that information with the extra care the Act requires for health information.

What we collect

We only collect what we need to look after you well and run the spa.

Contact details: your name, phone number and email address, and your postal address if you give it to us.
Booking details: the treatments you book, when you visit, your preferences, and notes that help us give you a better treatment next time.
Health information: before some treatments we ask about allergies, skin conditions, medications, recent procedures, pregnancy and anything else that could affect how we treat you safely. We collect this only with your consent and only where it is relevant to your treatment.
Payment details: payments and deposits are processed by Square. We see your name, the amount and the last digits of your card. We never see or store your full card number.
Gift card details: the names and email addresses of the buyer and the recipient.
Messages: anything you send us through the website’s contact form, by email, by phone or on social media.

You can deal with us without giving your name, for example when you ask a general question. For bookings and treatments we need to know who you are.

How we use it

To take, confirm and remind you about bookings.
To give you treatments safely and tailor them to you.
To take payments, deposits and gift card purchases, and to issue receipts.
To answer your questions and messages.
To send you our newsletter and offers, if you have asked for them.
To keep the spa running: records, insurance, and meeting our legal obligations.

We do not sell your information, and we do not share it with anyone for their own marketing.

A small number of trusted services help us run the spa. Each one only receives what it needs to do its job.

Square runs our bookings, payments and gift cards. When you book or pay, Square’s own privacy policy also applies.
Google Workspace provides our email and calendars.
Cloudflare hosts our website, delivers messages from our forms and provides our privacy-friendly site analytics.
Me² (Me Squared Agency, Adelaide) builds and maintains our website and may see form submissions while supporting it.
Social platforms such as Instagram and Facebook receive the messages you send us there.

Some of these providers store information on servers outside Australia, including in the United States. We choose providers that commit to protecting personal information to a standard comparable to Australian law.

We may also share information if the law requires it, or to protect someone’s safety.

Newsletters and marketing

We only send our newsletter to people who have asked for it, for example by joining through the website or at the spa. Every email includes a way to unsubscribe, and you can also tell us at any time by replying or emailing hello@serenive.com.au. We follow the Spam Act 2003 (Cth).

Booking confirmations and reminders are not marketing; you will receive them whenever you have an appointment with us.

Our website

Our website is designed to collect as little as possible.

No tracking cookies. We use Cloudflare Web Analytics, which counts visits without cookies and without identifying you.
Forms. When you use the contact or newsletter forms, we receive what you type, along with the time and the network address the message came from, which helps us filter out spam.
Booking. Online booking is provided by Square and opens from our website. Square may set its own cookies when you use it.
Links. Our website links to other sites, such as Google Maps and social media. Their privacy policies apply once you leave ours.

How long we keep it

We keep your client record, including treatment notes and health information, for as long as you are a client and for as long as we need it to treat you safely, meet insurance and legal requirements and resolve any concerns. Messages sent through the website’s contact form are emailed to us and kept in our inbox like any other email; the website’s own copy is deleted automatically after 90 days. Newsletter sign-ups are kept until you unsubscribe. When information is no longer needed, we delete it or make it anonymous.

Keeping it safe

Client records are held in secure, password-protected systems with access limited to the people who need it. Paper forms are stored securely at the spa and are not left where others can see them. No system is perfectly secure, but we take reasonable steps to protect your information from misuse, loss and unauthorised access, and we would tell you and the regulator if a breach was likely to cause you serious harm.

Your choices

You can ask to see the personal information we hold about you, and to have it corrected if it is wrong or out of date.
You can unsubscribe from our newsletter at any time.
You can ask us to delete your information. We will do so unless we need to keep it for a legal or safety reason, and we will tell you if that is the case.
You can choose not to give us some information, though it may limit the treatments we can safely offer.

To ask for any of these, contact us using the details below. We will respond within 30 days and we do not charge for these requests.

Questions and complaints

If you have a question about this policy, or you think we have not handled your information properly, please tell us first. We take it seriously and will try to put it right.

Serenive Beauty & Spa
16 Frost Rd, Salisbury SA 5108
(08) 8182 4682
hello@serenive.com.au

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

We may update this policy from time to time. The latest version is always on this page, with the date it was last changed.