Privacy Policy

Vision Barbershop ("we", "us", "our") respects your privacy. This policy explains what personal information we collect, why we collect it, how we use and store it, and how you can access, correct, or complain about the handling of your information. It is written to align with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). It should be read together with our Website Terms of Use.

Businesses with annual turnover under $3 million are generally exempt from the APPs under the Act's small business exemption. We publish this policy as good practice and to be transparent with our customers regardless of whether that exemption applies to us.

1. Information we collect

• Booking details — when you book an appointment through our Square booking widget, Square collects your name, email, phone number, and appointment details on our behalf. We may receive a copy of this information (e.g. via webhook) to manage bookings.
• Contact enquiries — if you contact us directly (phone, email, social media, or an in-person visit), we collect whatever information you choose to share.
• Payment information — we do not collect or store payment card details ourselves. Payments are processed by Square, which has its own privacy policy.
• Google reviews of our business — we display Google reviews of Vision Barbershop on this site, retrieved via Google's Places API. This review content (e.g. a reviewer's name, photo, and review text) is chosen by the reviewer to be public on Google; we don't collect it from you, and it's governed by Google's own privacy policy.

2. How we use your information

We use personal information to:

• schedule, manage, and remind you of appointments;
• respond to enquiries and provide customer service;
• send you service-related communications (e.g. booking confirmations); and
• send marketing communications, but only if you've opted in — you can unsubscribe at any time using the link in any message, or by contacting us directly. This is consistent with the Spam Act 2003 (Cth), which requires consent, identification, and an unsubscribe option in every commercial electronic message.

3. Who we share it with

We disclose personal information to the service providers we use to run the business and this website, including:

• Square — booking and payment processing;
• Supabase — our database and authentication provider;
• Vercel — our website hosting provider; and
• Google — to retrieve and display public Google reviews of our business via the Places API (this is about displaying review content, not about sharing your personal information with Google).

We don't sell personal information, and we don't share it with third parties for their own marketing purposes.

4. Storage location and overseas disclosure

Some of the service providers listed above may store or process information on servers located outside Australia (including in the United States). Where this occurs, we take reasonable steps to ensure the overseas recipient handles personal information consistently with the APPs, as required by APP 8.

5. Cookies and website analytics

Our website itself does not currently use advertising or tracking cookies. Our authentication provider (Supabase) may set a functional cookie/local storage token to keep an admin session signed in — this is not used for tracking or advertising. If we add analytics or marketing cookies in future, we'll update this policy.

6. Data security

We store information with reputable providers who apply industry-standard security controls (encryption in transit, access controls, and row-level access restrictions on our database). No method of transmission or storage is 100% secure, but we take reasonable steps to protect the information we hold.

7. Access, correction, and complaints

You can ask us for access to, or correction of, the personal information we hold about you. To do this, or to make a complaint about how we've handled your information, contact us using the details below. We'll respond within a reasonable time.

If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

8. Children's privacy

Our services are not directed at children, and we don't knowingly collect personal information from children without parental involvement.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision.

10. Contact us

For privacy questions, access/correction requests, or complaints: Visionbarbershopmelb@gmail.com, 731 Mountain Hwy, Bayswater VIC 3153.