Privacy Policy & Data Protection

The Empire Beauty Bar (“The Empire”, “we”, “our”, or “us”) operates premier luxury unisex salon ateliers and beauty sanctuaries across Australia (Westfield Carousel, The Empire Yanchep, Westfield Tea Tree Plaza) and India (Club O7, Wyndham, Shela, Ahmedabad).

This Privacy Policy sets out our principles, protocols, and lawful practices for handling your personal data in strict compliance with:

• Digital Personal Data Protection Act, 2023 (DPDP Act 2023 – India): Governing digital personal data processed in connection with appointments, client records, and service interactions in India.
• Privacy Act 1988 & Australian Privacy Principles (APPs – Australia): Regulating the collection, storage, and cross-border protection of client records across Australian studios.

To deliver an immaculate salon experience and maintain clinical hygiene standards, we collect only necessary personal data provided during appointment reservation:

• Identity & Contact Information: Full name, mobile telephone number (for SMS or WhatsApp reservation confirmations), and email address (for formal booking summaries and calendar notifications).
• Salon Reservation Details: Chosen studio atelier, requested service or combo package (e.g., Hair Couture, Bespoke Facials, Nail Artistry, Bridal Makeup, Bridal Henna, or Spa Therapies), requested appointment date and time, and assigned stylist preferences.
• Treatment & Health Preferences (Voluntary): Voluntary disclosures regarding skin sensitivities, allergies, hair history, or prior patch-test records to safeguard your wellness during hair color, chemical, or facial treatments.
• Digital Telemetry: Anonymized technical logs, IP address, device viewport, and browser telemetry collected securely to prevent fraudulent bookings and maintain site performance.

Under the Digital Personal Data Protection Act, 2023, consent must be itemized, informed, specific, unbundled, and easily revocable:

• Appointment Fulfilment Consent (Required): When you reserve an appointment via our booking gateway, you expressly authorize our concierge and branch stylists to process your contact details and requested treatments to schedule, confirm, and perform your salon booking.
• Promotional & Marketing Consent (Strictly Optional): We enforce an unbundled, separate checkbox for marketing communications. Consenting to promotional messages is entirely voluntary and is never a prerequisite to receiving salon services. If opted in, you may receive curated beauty atelier updates, VIP seasonal promotions, and salon invitations via WhatsApp, SMS, or Email.
• Right to Withdraw Consent: You possess the unconditional legal right to withdraw your consent at any time without fees. Upon withdrawal, all non-essential promotional outreach ceases immediately.

We process client data solely for legitimate, transparent, and proportionate salon purposes:

• Directly communicating appointment status, rescheduling, and confirmations via Email, SMS, or WhatsApp.
• Personalizing atelier treatments according to individual client preferences, hair textures, or skin sensitivities.
• Generating verified booking and revenue reports for internal studio operational efficiency.
• Complying with statutory tax, financial, and salon health & safety requirements in Australia and India.
• Protecting the integrity of our booking platform against spam, robotic submissions, and malicious intrusions.

We deploy rigorous technical safeguards to ensure that your personal information is shielded from unauthorized access, breach, alteration, or loss:

• Cryptographic Security: All client communications and form submissions are protected with high-grade Transport Layer Security (TLS 1.3 / SSL encryption).
• Enterprise Cloud Database: Salon records are stored in Supabase enterprise database systems protected with Row-Level Security (RLS) policies and encrypted at rest.
• Branch Isolation & PIN Gateway: Branch access is isolated via unique 6-digit studio PIN gateways, ensuring studio staff can only review bookings assigned to their specific salon atelier.
• Technology Management: Systems, infrastructure, and web applications are professionally architected, secured, and maintained by our certified technology partner SparxMedia (www.sparxmedia.in).

Both Indian and Australian privacy laws confer clear statutory rights to data principals:

• Right to Access: You may request a summary of the personal data we hold and process regarding your salon visits.
• Right to Correction & Erasure: You may request the rectification of inaccurate details or the erasure of your profile and history from our active booking directory (“Right to be Forgotten”).
• Right of Grievance Redressal: You have the right to register concerns or complaints directly with our Data Grievance Concierge.
• Right to Nominate: Under the DPDP Act 2023, you have the right to nominate an individual to exercise these rights on your behalf in the event of death or incapacity.

To exercise any of your statutory rights, withdraw promotional consent, or inquire about your data records, please reach out to our dedicated salon privacy desk: