Privacy Policy

1. Introduction

Pampr Pty Ltd ("Pampr", "we", "us") is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Policy explains how we collect, use, store, and disclose personal information through the Pampr platform (the "Platform").

2. Information We Collect

We may collect:

• Account information: name, email, phone number, password (encrypted).
• Booking information: appointment details, service history, favourites.
• Payment information: processed by Stripe. Pampr does not directly store full card numbers.
• Profile information (studios): business name, services, pricing, portfolio photos, linked social media handles.
• Technical information: device, browser, IP address, and usage data, for security purposes.

We do not collect or store health, medical, or allergy information. Clients are asked to communicate this directly to their studio.

3. How We Use Your Information

We use personal information to:

• create and manage your account;
• facilitate bookings between clients and studios;
• process payments via Stripe;
• send booking confirmations and reminders;
• improve and secure the Platform;
• respond to support requests;
• comply with legal obligations.

4. Sharing Your Information

• With the other party to a booking: for example, a studio receives a client's name and contact details necessary to fulfil the booking, and vice versa.
• With Stripe, for payment processing. Stripe's own privacy policy applies to information you provide directly to Stripe.
• With service providers who help us run the Platform (for example, hosting providers), under confidentiality obligations.
• Where required by law, or to protect the rights, safety, or property of Pampr, our users, or others.

We do not sell your personal information to third parties.

5. Overseas Disclosure

Some service providers (including Stripe and our cloud hosting provider) may store or process data outside Australia, such as in the United States. Where this occurs, we take reasonable steps to ensure your information is handled in a manner consistent with the APPs.

6. Data Security

We use reasonable technical and organisational measures to protect your personal information, including encryption and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal information for as long as your account is active, and for a reasonable period afterwards to meet legal, accounting, or dispute-resolution requirements, after which it is securely deleted or de-identified.

8. Cookies

We use only the cookies necessary to keep you signed in and remember your preferences on the Platform. We do not use advertising or tracking cookies.

9. Your Rights

Under the Privacy Act, you may:

• request access to the personal information we hold about you;
• request correction of inaccurate information;
• make a complaint about how we have handled your information.

To exercise these rights, contact us at support@pampr.au. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10. Children's Privacy

The Platform is not intended for use by anyone under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified via the Platform or email. The "last updated" date above reflects the most recent version.

12. Contact Us

For privacy questions or requests, contact us at support@pampr.au.