Privacy policy

Glamin is run by [company name] (ABN [ABN]). This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Two kinds of information

• Our customers’ information. Hair and makeup artists and their teams who sign up for Glamin. We are responsible for this information.
• Their clients’ information. Brides, wedding parties and other clients whose details an artist keeps in Glamin. The artist decides what to collect and why, and is responsible for it; we hold and process it for them. If you are an artist’s client, please contact the artist first about your information. We will help them respond.

What we collect

• Account details: your name, email address and password (stored only as a secure hash), and the business details you enter, such as business name, ABN, address, phone, logo and bank details for your invoices.
• Billing details: your plan and payment history. Card details are entered on Stripe’s pages and held by Stripe, never by us.
• What you keep in Glamin: enquiries, clients, bookings, quotes, agreements, invoices, payments, notes, photos and files, emails sent through Glamin, and venue and vendor details.
• Health information: an artist can record a client’s allergies or skin sensitivities, only after recording that the client agreed. This is sensitive information. We encrypt it separately, show it only to the artist and the team members on that client’s booking, log each time it is viewed, and never include it in calendar feeds or in day sheets saved on phones.
• Technical information: sign-in records, error logs and the pages you use, to keep Glamin secure and working. We use only the cookies needed to keep you signed in. We do not use advertising or tracking cookies.

How we use it

To provide Glamin: to run your account, store and show your information, send emails you ask us to send, take payments for your plan, keep the service secure, fix problems and answer support requests. We send you service messages about your account. We will only send you marketing with your consent, and every marketing email has an unsubscribe link (Spam Act 2003). We do not sell personal information.

Who we share it with

We use trusted service providers to run Glamin, under contracts that require them to protect your information:

• Supabase (database, sign-in and file storage), hosted in Sydney, Australia.
• Vercel (runs the website), which may process requests in the United States and other countries.
• Resend (sends email), in the United States.
• Stripe (plan payments, and card payments to artists who connect their own Stripe account), in Australia and the United States.

Because some of these providers are overseas, your information may be handled in the United States. We take reasonable steps to make sure they treat it in line with the Australian Privacy Principles. We may also disclose information when the law requires it.

How we protect it

Information is encrypted in transit and at rest. Each business’s information is kept separate by database rules, team members see only what their role allows, and health information has its own encryption key. We keep encrypted backups for 30 days. If a data breach is likely to cause serious harm, we will notify the people affected and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme, and tell affected artists so they can inform their clients.

How long we keep it

While your account is open. If you cancel, your account becomes read-only and your information stays available to you. If you ask us to close your account, we delete your information within 30 days, and it leaves our backups within a further 30 days, unless we must keep something by law (such as payment records for tax).

Your rights

You can see and correct most of your information in Glamin yourself, and export your clients, bookings, enquiries, invoices and payments as spreadsheets. To ask for a full copy, a correction or deletion, email [privacy email]. We will respond within 30 days. If you are an artist’s client, ask the artist; artists can delete a client’s health information at any time.

Complaints

Please contact us first at [privacy email] and we will try to fix it. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

We will post any changes here and tell customers by email if they are significant.