Harmony & Hue Privacy Policy

29 May

Last updated: September 6th 2026.

Harmony & Hue ("we", "us", "our") is committed to protecting your privacy. As a provider of cosmetic tattoo services, we collect and hold health information, which means we're bound by the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), regardless of business size. This policy explains what we collect, why, and how we look after it.

1. What we collect

Depending on your interaction with us, we may collect:

Contact details: name, phone number, email, address
Booking details: appointment type, date, time
Health and medical information: relevant medical history, medications, allergies, skin conditions, and anything else disclosed on your intake and consent form
Photos: before, during, and after treatment images for your client file, and for promotional use only where you've separately consented
Payment information: processed through [your payment processor, e.g. Squarespace Payments/Stripe], we do not store full card details ourselves
Emergency contact details

2. How we collect it

We collect this information directly from you through:

Our booking platform (Acuity Scheduling)
Our medical intake and consent form (Jotform)
Direct communication, such as email, phone, or in person

3. Why we collect it

We use your information to:

Confirm and manage your bookings
Assess your suitability for treatment and identify any contraindications
Provide safe, informed treatment tailored to your circumstances
Contact you regarding appointments, aftercare, or rescheduling
Where you've consented, use before/after photos for promotional purposes
Meet our legal and record-keeping obligations

We do not use your information for any purpose beyond what's outlined here without asking you first.

4. Storage and security

Your information is stored electronically through the platforms we use to run our business, including Acuity Scheduling and Jotform. Physical records, if any, are kept securely and access is limited to Harmony & Hue.

Overseas storage: Acuity Scheduling and Jotform are US-based platforms, which means your information may be stored or processed on servers located outside Australia. Both platforms maintain their own security and privacy standards; you can review their respective privacy policies for further detail.

5. Disclosure to third parties

We don't sell or trade your personal information. We may share limited information with:

The above-mentioned booking and form platforms, solely to operate our business
Payment processors, to complete transactions
Your GP or another healthcare provider, but only where you've given specific consent for us to do so
Authorities, where required by law

6. Access and correction

You can ask to see the personal information we hold about you, or ask us to correct it, at any time. Contact us using the details below and we'll respond within a reasonable timeframe.

7. Data breaches

If a data breach occurs that's likely to result in serious harm, we'll notify affected individuals and the Office of the Australian Information Commissioner (OAIC), in line with the Notifiable Data Breaches scheme.

8. Complaints

If you have concerns about how we've handled your personal information, please contact us first using the details below. If you're not satisfied with our response, you can lodge a complaint with the OAIC at oaic.gov.au.