1. Collection of Personal Information
1.1 Type of Information
Clients’ personal information is usually collected through information provided by you on your client cards and through promotions, competitions and consumer queries. The information may include:
• your name, postal address, contact number(s) and email address
• information about your preference for products or services we offer from time to time
• information on any health conditions you may have
• your credit card details
• information on the products and services we have provided to you
• details of any prizes you may have won
• a record of any queries you have made
endota will only collect any other personal information, including sensitive information in accordance with the Act.
endota may use ‘cookies’ on our website. Cookies are an industry standard and most major websites use them. A cookie is a small text file that our website may place on your computer. Usually, cookies are used as a means for our website to remember your preferences. As such, cookies are designed to improve your experience of our website.
In some circumstances, cookies may collect and store personal information about you. endota extends the same privacy protection to your personal information, whether gathered via cookies or from other sources. Most internet browsers are pre-set to accept cookies, however you can adjust your Internet browser to disable cookies or to warn you when cookies are being used. However, if you disable cookies, you may not be able to access certain areas of our website or take advantage of the improved website experience that cookies offer.
2. Use and Disclosure
endota collects personal information directly from you wherever possible, however sometimes we may collect personal information about you from a third party, e.g. a friend who has provided your details to us so we can send you a voucher, or a friend who has entered your name and email address as part of a competition. This information is used for the following purposes:
• to contact you directly about endota, its brands, special offers, samples and other promotions
• to reward you for being a loyal endota customer
• to approve transactions you wish to make
• to confirm your identity
• to provide you with products and services you have requested
• to follow up or pursue any queries you make
• to conduct consumer research
• to notify you of the outcome of competitions or other promotions
endota collects your credit card details to secure your booking for a treatment. Our Cancellation Policy applies to all bookings. We may deduct any applicable cancellation fee from your credit card without prior notice to you, if you fail to comply with our Cancellation Policy.
2.2 Disclosure and Use of Information by Third Parties
Except where you are otherwise notified, endota does not sell, rent or otherwise make available any personal information to third parties.
endota does however outsource certain business functions to third party organisations from time to time. Solely for the purpose of such organisations providing services to endota, personal information may be transferred to or handled by the following parties as required:
• our related companies
• organisations which provide services to us, such as mailing houses, promotion and
advertising agencies and consumer research agencies
• credit reference agencies or other credit providers
• government or statutory authorities.
These parties may directly contact you on behalf of endota and may also store your personal information on their computer servers or databases on behalf of endota as part of the services rendered to endota
2.3 Third Party Sites
3. Data Quality
endota takes all reasonable precautions to ensure that the personal information we collect, use and disclose is accurate, complete and up-to date. However the accuracy of that information depends to a large extent on the information you provide. That’s why we recommend that you contact us and:
• let us know if there are any errors in your personal information; and
• keep us up to date with changes to personal information such as your name and address.
4. Data Security
endota is dedicated to keeping personal information secure. This includes physical security, computer and network security, communications security and personnel security.
endota only retains your credit card or account information to secure your appointment booking for spa treatments authorised by you. After the spa treatment appointment has been completed or cancelled, your credit card information is destroyed after any cancellation fees have been deducted (if applicable) to ensure these details cannot be used in the future unless you provide us with the details again.
endota complies with permission based direct marketing requirements under the Act and the Spam Act 2003. When collecting your personal information, we must request your permission to use that information to send you information on products and promotions or have our associates send you marketing material. We must give you the opportunity to “opt out” of receiving such marketing material. Where you indicate your consent, endota may enter your details into a database for the purpose of contacting you directly about endota, its brands, special offers, samples, consumer research and other promotions.
6. Competitions and Trade Promotions
The most frequent method by which we collect your personal information is via bookings for spa treatments, your client card which is completed at your first spa visit, competitions or other trade promotions.
For the purposes of competitions and trade promotions, the following special conditions apply to the collection, use and disclosure of your personal information:
All entries become the property of endota (and any third parties conducting joint promotions with endota).
Winners’ details and a description of the prizes will be entered on a database to comply with record-keeping requirements of relevant Australian State and Territory trade promotion legislation. Your personal information may also be published in a newspaper or other media in accordance with the terms and conditions of each promotion.
7. Openness, Access and Correction
You can request information in general from endota about the sort of personal information we hold on you, for what purposes we hold it and how we collect, hold, use and disclose your personal information, by sending us a written request addressed to the Privacy Officer or to the Spa Director of each individual Endota Spa.
You can advise us if you would prefer not to be directly contacted by us by sending us a written request addressed to the Privacy Officer or to the Spa Director of each individual Endota Spa.
You can access personal information endota holds on you by sending a written request addressed to the Privacy Officer or to the Spa Director of each individual Endota Spa. If the information held is inaccurate, incomplete or not up to date you may request endota to correct the information. We may refuse to grant you access to the information if the Act permits or requires such refusal.
To make a written request to the Privacy Officer as detailed above or if you are concerned about a possible interference with your privacy, please contact the endota Privacy Officer at:
Endota (No. 1) Pty Ltd
Att: Privacy Officer
PO Box 71
McCRAE VIC 3938
Facsimile: (03) 9811 0666
Where it is lawful and practicable to do so, customers may transact business with endota without providing personal information.
9. Transborder Data Flows
endota will only transfer personal data overseas in circumstances where it is permitted by the Act.
10. Additional Information
Further information on privacy is available at the website of the Office of the Federal Privacy Commissioner http://privacy.gov.au/.