Privacy Policy

1. About this policy

Velvet Moth respects your privacy. This policy explains the kinds of personal information we may collect, why we collect it, how we use and protect it, and the choices available to you.

2. Information we may collect

Depending on how you use our website and services, we may collect:

• your name, email address, mobile number, suburb and postcode;
• appointment, service and booking details;
• information you provide in enquiries or salon consultations;
• photos or other material you choose to provide for a consultation;
• opening-list preferences, access-code records and marketing consent;
• messages sent through our website, email, SMS or Facebook Messenger;
• payment and transaction references where relevant, but not full card details;
• technical and security information such as timestamps, hashed contact identifiers, rate-limit records and device/request fingerprints used to prevent abuse.

3. Why we collect and use information

We may use personal information to:

• provide, manage, confirm, change or cancel appointments;
• respond to enquiries and provide service-selection assistance;
• operate our opening list and verify email addresses;
• send appointment confirmations, reminders and other service messages;
• send marketing only where we have an appropriate basis to do so, and honour opt-outs;
• process or reconcile payments and refunds;
• protect the website, clients and business from fraud, spam and misuse;
• maintain business, legal and audit records; and
• improve our services and website.

4. Marketing and unsubscribe choices

We keep broader salon marketing consent separate from ordinary booking and service communications. Marketing emails will identify Velvet Moth and include a clear unsubscribe option. You can also contact us at any time to withdraw marketing consent.

Unsubscribing from marketing does not prevent us from sending genuinely necessary service messages about an appointment or request you have made, provided those messages are not used to promote other goods or services.

5. How information is stored and protected

We use reasonable administrative and technical safeguards designed to protect personal information. Access to salon administration systems is restricted. Some identifying values used for matching, verification and abuse prevention are stored as cryptographic hashes rather than plain values.

No internet service can guarantee absolute security. If we become aware of a data incident, we will assess and respond to it in accordance with applicable law.

6. Service providers and overseas processing

We use specialist technology providers to operate the website and salon systems. These may include Vercel for hosting, Neon for database and authentication services, Resend for email, ClickSend for SMS, Square for payment-related services, Meta for Messenger, and OpenAI where an AI-assisted feature is used.

Some providers may store or process information outside Australia, including in the United States or other locations in which those providers or their subprocessors operate. Provider locations and subprocessors can change over time.

7. AI-assisted features

Some optional features may use automated or AI-assisted processing to help organise an enquiry or suggest which listed salon service may fit a request. These tools do not create a confirmed booking by themselves. Where human review is needed, the request may be referred to salon staff.

8. Access and correction

You may contact us to ask what personal information we hold about you or to request correction of inaccurate information. We may need to verify your identity before acting on a request.

9. Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, to operate the salon, resolve disputes, prevent abuse, and satisfy legal, accounting or record-keeping requirements. Different categories of information may have different retention periods.

10. Cookies and similar technology

The website may use essential cookies or similar technology for authentication, security and core functionality. If non-essential analytics or advertising technology is introduced later, this policy and any required consent controls will be updated.

11. Complaints and contact

If you have a privacy question, concern or complaint, email velvetmothsalon@gmail.com. We will review the issue and respond within a reasonable time.

12. Changes to this policy

We may update this policy when our services, technology or legal obligations change. The current version will be published on this website with its last-updated date.