Privacy policy

Last updated: [date]

Eyroxis is operated by [company name] (ABN [number]) ("we", "us"). We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Two kinds of information

Salon account holders (owners and staff): we collect your name, email address, business details and how you use Eyroxis, to provide and bill for the service.
Salon clients (people who book an appointment): the salon you book with collects your name, email, mobile number, appointment history and any notes. The salon decides how it uses this information; we store and process it on the salon's behalf so they can manage bookings and send you confirmations and reminders.
Client accounts (optional): if you sign in at /account, we keep your email, and the name, mobile and birthday you save, to show your bookings at every salon on Eyroxis that has your email and to fill in booking forms. Each salon still sees only its own bookings with you.

How we use information

To make and manage bookings, and send confirmations and reminders by email or SMS.
To operate, secure and improve Eyroxis, and to provide support.
To meet legal obligations. We do not sell personal information.

Where it is stored

Data is stored with our hosting and database providers in Sydney, Australia. Some service providers (for example, email and SMS delivery) may process information overseas, including in the United States, under contracts that require them to protect it.

Security and retention

We use encryption in transit, hashed passwords, access controls and backups. We keep information only as long as it's needed, then delete or de-identify it:

Clients of a salon: personal details (name, contact details, notes and forms) are removed after a period with no visits, set by the salon between 5 and 10 years (7 years unless the salon chooses otherwise). The salon is told 30 days before and can keep a client's details if it needs them. A client can also ask the salon to delete their details at any time.
Sales and appointment records stay for the salon's tax and business records (at least 5 years, as Australian tax law requires), without the client's name once their details are removed.
Copies of emails and texts sent to clients: the subject and wording are removed after 3 months, and the remaining record (the address or number it went to, when, and whether it was delivered) is deleted after 24 months; technical error logs after 90 days. Requests to stop marketing emails are always remembered.
Closed salon accounts are deleted 30 days after closing.

Access, correction and complaints

You can ask to access or correct your personal information, or make a complaint, by contacting [privacy email]. If you are a salon client, you can also contact the salon directly. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).