PRIVACY POLICY
‍

Shair Salon (and) Shair Quiz

Last updated: 16 April 2026

‍

HELLO!

We want you to feel comfortable and informed about how we handle your personal information. That’s why we have this Privacy Policy, which explains how we at Shair Salon (and) Shair Quiz (ABN 84 364 377 601) (Shair, we, us or our) collect, hold, use and disclose personal information through our web-based platform at www.shair.com.au (the Platform).

Our Platform has two types of users, and we handle personal information a little differently for each:

• Clients — consumers who create an account, complete the hair quiz and build a Hair Profile; and
• Salons — hairdressers and salon businesses who register to receive and view Client Hair Profiles through their salon dashboard.

We are committed to complying with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) and, where applicable, the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

‍

1. WHAT PERSONAL INFORMATION DO WE COLLECT?

Information we collect from Clients

When you use the Platform as a Client, we may collect the following personal information:

1. your email address;
2. your username and password (stored securely in encrypted form);
3. your hair quiz responses, including information about your hair type, thickness, length, face shape, existing colour, desired colour, style preferences, likes and dislikes from previous hair services, and whether you have coloured your hair at home;
4. photographs you upload, including inspirational images or images of your own hair; and
5. information about how you use the Platform, including pages visited, features used and interactions.

Please note: We only require an email address and username/password to create an account. We do not collect your physical address, phone number, date of birth or payment information at this stage. The Quiz does not collect medical information, and we do not use images for diagnostic purposes.

Information we collect from Salons

When you register as a Salon, we may collect:

1. your salon or business name;
2. your contact email address;
3. your username and password (stored securely in encrypted form); and
4. information about how you use the Dashboard, including login activity and access patterns.

Information collected automatically

We use cookies and similar technologies on the Platform. Cookies are small data files that help our Platform work better. They may identify you and track the pages you visit, which helps us improve our Platform and your experience. You can manage your cookie preferences through your browser settings.

We may also collect technical information automatically, including your IP address, browser type, device type, operating system, and referring URLs.

2. HOW DO WE COLLECT YOUR PERSONAL INFORMATION?

We collect your personal information in the following ways:

1. directly from you when you create an account, complete the Quiz, upload images, or contact us;
2. automatically through cookies and similar technologies when you use the Platform; and
3. from third-party service providers, such as Google Analytics, which is used on our landing page to help us understand how visitors find and use our Platform. Google Analytics may collect information such as your IP address, browser type, and pages visited. You can opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on.

3. WHY DO WE COLLECT YOUR PERSONAL INFORMATION?

We collect your personal information for the following purposes:

1. to provide the Platform services, including generating your Hair Profile and enabling you to share it with Salons;
2. to create and manage your account;
3. to enable Salons to view Hair Profiles shared with them by Clients;
4. to communicate with you about your account, the Platform, or to respond to your enquiries;
5. to verify your identity for security purposes;
6. to improve and develop the Platform, including through analytics and usage data;
7. to send you updates about the Platform if you have opted in to receive them (you can unsubscribe at any time); and
8. to comply with our legal obligations.

We retain your personal information for as long as your account is active, or as necessary to provide you with the Platform services. Where your account is closed or data is deleted, we will retain the information for a period of 3 years from your last interaction with the Platform, unless a longer retention period is required by law or you request earlier deletion.

4. HOW IS PERSONAL INFORMATION SHARED?

Client to Salon data sharing

The core function of the Platform is to enable Clients to share their Hair Profile with Salons. When a Client chooses to share their Hair Profile with a Salon:

1. the Salon will be able to view the Client’s quiz results, Hair Profile summary, and any Uploaded Images through their Dashboard;
2. the Salon will only see the information included in the Hair Profile — they will not have access to the Client’s email address, username or password; and
3. each Salon can only access Hair Profiles that have been specifically shared with them. Our multi-tenant architecture ensures that each Salon’s data is segregated and one Salon cannot view another Salon’s Client Data.

You control who sees your data. As a Client, you choose which Salons to share your Hair Profile with. You can revoke access at any time.

Third-party service providers

We may share your personal information with third-party service providers who assist us in operating the Platform. These may include:

1. hosting and infrastructure providers located in Australia (Sydney);
2. analytics services (Google Analytics), used on the landing page only; and
3. email service providers for account communications.

We require our third-party service providers to handle your personal information in accordance with applicable privacy laws and only for the purposes for which we provide it to them.

Other disclosures

We may also disclose your personal information where:

1. we are required or authorised to do so by law, regulation, or court order;
2. it is necessary to enforce our Terms of Use or this Privacy Policy;
3. we reasonably believe that disclosure is necessary to protect the rights, property or safety of us, our users, or the public; or
4. you have provided your express consent to the disclosure.

Our Platform is hosted on servers located in Australia. Where we engage third-party service providers located overseas (for example, analytics services), we may disclose your personal information to those overseas recipients for the purposes described in this Privacy Policy.

We may disclose your personal information to third-party service providers located overseas for purposes such as hosting, data storage, or analytics. Our servers are located only in Australia.

Before we disclose your personal information to an overseas recipient, we will take reasonable steps to ensure they do not breach the Australian Privacy Principles. This may involve:

1. entering into contractual arrangements that require the overseas recipient to handle your personal information in accordance with the APPs;
2. verifying that the recipient is subject to laws or binding schemes that provide substantially similar privacy protections; or
3. obtaining your express consent to the disclosure after informing you that the overseas recipient may not be required to comply with the APPs.

5. DATA SECURITY

We take the security of your personal information seriously. We implement and maintain appropriate technical, security and organisational measures to protect your personal information against unauthorised or unlawful access, use, disclosure, alteration, loss or destruction. These measures include:

1. encryption of passwords and sensitive data;
2. secure authentication systems for both Client and Salon accounts;
3. multi-tenant data segregation ensuring each Salon can only access their own Client Data;
4. regular security reviews and updates; and
5. access controls limiting who can access personal information to authorised personnel only.

While we take all reasonable steps to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. You acknowledge that there is always some risk associated with the electronic transmission or storage of personal information.

6. ACCESSING, CORRECTING OR DELETING YOUR INFORMATION

You have the right to access, correct or delete the personal information we hold about you. You can:

1. access and update your account information directly through the Platform;
2. request deletion of your account and all associated data, including your Hair Profile, quiz results and Uploaded Images; and
3. contact us at hello@shair.com.au to make any access, correction or deletion request.

We will respond to your request within a reasonable timeframe and in accordance with the APPs. In most cases, we will action your request free of charge. However, we may charge a reasonable fee for requests that are manifestly unfounded or excessive. We will not refuse a request unless we are permitted to do so by law, and we will provide you with our reasons if we do.

7. MINIMUM AGE REQUIREMENT

Our Platform is intended for use by individuals who are at least 16 years of age. This reflects that some of our users, including hairdressing apprentices and their clients, may be 16 years old.

By creating an account, you confirm that you are at least 16 years of age. We will include a mandatory confirmation step during the account registration process requiring you to confirm: “I confirm that I am at least 16 years old.”

If you are under 16 years of age, you must not create an account or provide us with any personal information without the consent of a parent or guardian. If we become aware that we have collected personal information from a person under 16 without verifiable parental or guardian consent, we will take reasonable steps to delete that information as soon as practicable.

If you are a parent or guardian and believe that your child under 16 has provided us with personal information without your consent, please contact us at hello@shair.com.au.

8. ADDITIONAL PROVISIONS FOR EUROPEAN CITIZENS

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have certain rights and protections under the General Data Protection Regulation (GDPR) or its UK equivalent, the Data Protection Act 2018. We take these rights seriously and will always do our best to protect your personal information.

Our role

We are a ‘controller’ under the GDPR as we collect, use and store your personal information to provide you with the Platform services.

Lawful basis for processing

We process your personal information on the following lawful bases:

1. Consent — where you have given us valid express consent to use your personal information, we will rely on that consent and only use it for the specific purpose for which consent was given;
2. Performance of a contract — where processing is necessary to perform our agreement with you, including providing the Platform services;
3. Legitimate interests — where processing is necessary for our legitimate interests, such as improving and securing the Platform, provided those interests do not override your fundamental rights; and
4. Legal obligation — where we need to comply with the law or act in an emergency.

Your rights under the GDPR

As an EEA or UK resident, you have the following rights:

1. the right to be informed about how we collect and use your personal information;
2. the right of access to the personal information we hold about you;
3. the right to rectification of inaccurate or incomplete personal information;
4. the right to erasure (‘right to be forgotten’);
5. the right to restrict processing of your personal information;
6. the right to data portability;
7. the right to object to processing; and
8. the right not to be subject to automated decision-making.

To exercise any of these rights, please contact us at hello@shair.com.au. In some circumstances where we have a legal basis to do so, we may continue to process your information after you have withdrawn consent, for example if it is necessary to comply with an independent legal obligation or to protect our legitimate interest in keeping our services secure.

9. COMPLAINTS

If you have any concerns about how we have handled your personal information, please contact us at hello@shair.com.au. We will investigate your complaint and respond to you within a reasonable timeframe.

If you are not satisfied with our response, you can also lodge a complaint with the Office of the Australian Information Commissioner:

Phone: 1300 363 992

Online: www.oaic.gov.au (go to the ‘Lodge a Privacy Complaint with us’ page)

Post: Office of the Australian Information Commissioner, GPO Box 5218, Sydney, NSW 2001

If you are an EEA or UK resident, you also have the right to lodge a complaint with your local data protection authority.

10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our practices, the Platform or legal requirements. If we make material changes, we will notify you by posting a notice on the Platform or emailing you. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after any changes constitutes acceptance of the updated Privacy Policy.

11. CONTACT US

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at:

Sharon Douglas t/as Shair Salon (and) Shair Quiz

ABN 84 364 377 601

Email: hello@shair.com.au

Website: www.shair.com.au

‍

Thank you for trusting us with your information. We promise to look after it!