Privacy Policy

Last updated: 1 January 2025

This Privacy Policy explains how Chindavid Thai Massage and Spa Pty Ltd (ABN 82 702 495 378) (“we”, “us” or “our”), trading as Chindavid Thai Massage and Spa in Melbourne VIC, collects, holds, uses and discloses personal information. It applies to all personal information handled by us, including information collected through our website at https://chindavidthaimassage.site, by email, and when you visit our premises or book an appointment.

1. Our commitment to the Australian Privacy Principles

We are bound by the Privacy Act 1988 (Cth) (the Privacy Act) and the thirteen Australian Privacy Principles (APPs) contained within it. We take our obligations under the APPs seriously and handle personal information in accordance with those principles at all times.

2. Personal information we collect

The kinds of personal information we may collect include:

• Your name and contact details, including your email address;
• Appointment preferences, booking history and treatment selections;
• Relevant health information you choose to share with us, such as injuries, medical conditions, allergies, pregnancy or medications, so that our therapists can provide treatments safely;
• Billing and payment information necessary to process transactions;
• Records of your communications with us, including enquiries and feedback; and
• Technical information such as your IP address, browser type and pages visited, collected when you use our website.

We only collect personal information that is reasonably necessary for our functions and activities as a Thai massage and day spa provider.

3. Health and sensitive information

Health information is treated as sensitive information under the Privacy Act and attracts a higher level of protection. We will only collect health information with your consent, and only where it is reasonably necessary for us to provide safe and appropriate massage or spa treatments. You are not obliged to disclose health information; however, declining to do so may limit our ability to tailor or safely deliver certain treatments.

4. How we collect personal information

We collect personal information in the following ways:

• Directly from you when you make a booking, submit an enquiry, complete an intake or consent form, or contact us by email;
• When you visit our premises in Melbourne VIC;
• Through our website, including any enquiry or quote forms you submit; and
• From third parties where you have consented to that collection, or where otherwise permitted by the Privacy Act.

Where it is reasonable and practicable to do so, we collect personal information directly from you.

5. Why we collect, hold, use and disclose personal information

We collect, hold, use and disclose personal information for purposes including:

• Providing Thai massage and day spa services to you;
• Managing appointments, bookings and cancellations;
• Responding to enquiries and providing quotes for our services;
• Processing payments and maintaining accurate business records;
• Meeting our legal, regulatory, insurance and record-keeping obligations; and
• Improving our services and our website.

We will not use or disclose personal information for any purpose other than the primary purpose of collection, unless you have consented to that use or disclosure, or the use or disclosure is permitted or required by law.

6. Disclosure of personal information to third parties

We do not sell or rent personal information. We may disclose personal information to third parties where reasonably necessary for the purposes set out in this policy, including:

• Service providers who assist us with website hosting, email communication, payment processing or administrative functions;
• Professional advisers such as accountants, insurers or legal advisers; and
• Government agencies, regulators or law enforcement bodies where we are required or authorised by law to do so.

Where we engage third-party service providers, we take reasonable steps to ensure they handle personal information in a manner consistent with this policy and the Australian Privacy Principles.

7. Overseas disclosure

Some of our service providers, such as website hosting and email service providers, may store or process personal information on servers located outside Australia. Where personal information is disclosed to an overseas recipient, we take reasonable steps to ensure that the recipient handles that information in accordance with the Australian Privacy Principles, or that the disclosure is otherwise permitted under the Privacy Act.

8. Direct marketing

We may use personal information such as your email address to send you updates about our treatments, promotions or special offers. Every direct marketing communication will include a simple way for you to opt out of receiving future communications. You may also ask us at any time to stop sending you marketing material by emailing us using the contact details in section 13, and we will act on your request promptly and free of charge.

9. Cookies and website analytics

When you visit our website, we may use cookies and similar technologies to improve your browsing experience and to understand how the site is used. Cookies are small files stored on your device. You can configure your browser to refuse cookies or to alert you when cookies are being used; however, some parts of the website may not function fully without them.

10. Security of personal information

We take reasonable steps to protect personal information we hold from misuse, interference, loss and from unauthorised access, modification or disclosure. These steps include secure storage systems, access limited to personnel who need the information to perform their duties, and appropriate technical and organisational safeguards. When personal information is no longer required, and its retention is not required by law, we take reasonable steps to destroy or de-identify it.

11. Notifiable Data Breaches

Under the Privacy Act, we have obligations under the Notifiable Data Breaches scheme. If a data breach occurs that is likely to result in serious harm to individuals whose personal information is involved, we will assess the breach and, where required, notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable.

12. Access to and correction of your personal information

Under the Australian Privacy Principles, you have a right to request access to the personal information we hold about you, and to request corrections if you believe the information is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond to such requests within a reasonable period. In limited circumstances, we may decline a request where permitted by the Privacy Act; if so, we will explain the reasons and how you may complain about our decision. We may charge a reasonable fee for providing access to personal information, but we will not charge a fee for lodging a request for access or correction.

13. Privacy enquiries and complaints

If you have any questions about this Privacy Policy, wish to request access to or correction of your personal information, or wish to make a complaint about how we have handled your personal information, please contact our Privacy Officer:

Privacy Officer
Chindavid Thai Massage and Spa Pty Ltd
ABN 82 702 495 378
Melbourne VIC
Email: ceo@chindavidthaimassage.online

We take privacy complaints seriously. If you make a complaint, we will acknowledge it promptly, investigate the matter and respond to you in writing within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

14. Anonymity

Where it is lawful and practicable, you may deal with us anonymously or using a pseudonym, for example when making a general enquiry about our services. However, we generally require your name and relevant details in order to make bookings and provide treatments safely.

15. Links to other websites

Our website may contain links to third-party websites for your convenience. Those websites are not governed by this Privacy Policy, and we are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any website you visit.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The current version will always be published on this page, together with the date of the most recent update. Continued use of our website or services after any changes take effect constitutes acceptance of the updated policy.

Read our Terms of Service or contact us if you have any questions.