Privacy Policy.

Vynl Nail Studio (“Vynl”, “we”, “us”, or “our”) is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our website, book an appointment, or otherwise engage with us.

We operate in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our services or website, you agree to the practices described in this policy.

1. What Personal Information We Collect

We may collect the following types of personal information:

• —

  Identity information: Your full name and preferred pronouns.

• —

  Contact details: Email address and phone number.

• —

  Booking information: Appointment date, time, service selected, and any notes or preferences you provide.

• —

  Payment information: Payment card details processed securely via our third-party payment provider (Square or Stripe). We do not store full card numbers on our systems.

• —

  Health & safety disclosures: Any allergy or skin condition information you voluntarily disclose for the safe delivery of nail services.

• —

  Communications: Messages, enquiries, or feedback you send to us via email, contact forms, or social media.

• —

  Technical data: IP address, browser type, device identifiers, and pages visited, collected via cookies and analytics tools.

2. How We Collect Your Information

We collect personal information through the following channels:

• —

  Online booking forms on this website or via our Square booking page.

• —

  Enquiry or contact forms submitted through this website.

• —

  Direct communications via email, phone, or Instagram DM.

• —

  Automatic collection of technical data via cookies, analytics, and log files when you browse our website.

• —

  Social media interactions on our Instagram and TikTok accounts.

3. How We Use Your Information

We use your personal information only for legitimate business purposes, including:

• —

  Confirming, managing, and fulfilling your appointment bookings.

• —

  Processing payments and issuing receipts or refunds where applicable.

• —

  Communicating with you about your booking, any changes, or follow-up care.

• —

  Providing health and safety accommodations based on disclosures you make.

• —

  Sending marketing communications, promotional offers, or service updates — only where you have opted in to receive them.

• —

  Improving our website, services, and customer experience through analytics.

• —

  Complying with our legal obligations.

4. Third-Party Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with the following service providers solely to deliver our services:

• —

  Booking platform (Square): To process appointment bookings and deposit payments. Square's privacy policy governs their handling of your data.

• —

  Payment processor (Stripe / Square): To securely process payment card transactions. Your card details are transmitted directly to the payment processor and are not stored on our servers.

• —

  Email / communication services: To send booking confirmations, reminders, and notifications.

• —

  Website analytics: To understand how visitors use our website. Analytics data is aggregated and anonymised where possible.

We may also disclose your information if required to do so by law, court order, or government authority, or where we believe disclosure is necessary to protect our rights or the safety of others.

5. Data Security & Storage

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include:

• —

  HTTPS encryption for all data transmitted through our website.

• —

  Access controls limiting who can view personal information within our systems.

• —

  Use of reputable, security-certified third-party platforms (Square, Stripe) for payment processing.

• —

  Regular review of our data handling practices.

Your data is stored on servers located in Australia or in countries with comparable privacy protections. We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

6. Your Rights Under the Australian Privacy Principles

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• —

  Access: Request access to the personal information we hold about you.

• —

  Correction: Request that we correct any personal information that is inaccurate, out of date, incomplete, or misleading.

• —

  Anonymity: Where lawful and practicable, interact with us anonymously or using a pseudonym.

• —

  Opt out of marketing: Withdraw consent for marketing communications at any time.

• —

  Complaint: Lodge a complaint with us if you believe we have handled your personal information in breach of the Privacy Act. If unsatisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

7. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and understand visitor behaviour. Cookies are small text files stored on your device.

You can configure your browser to refuse cookies or to alert you when cookies are being sent. However, some parts of our website may not function properly if you disable cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The revised policy will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.