Privacy Policy
Doventrix places particular importance on the protection of personal data entrusted during contact, information requests, and services provided at the institute. This policy describes the practices of collection, use, and retention of information, as well as the rights of data subjects. It applies to online and offline interactions, including via the website, telephone, and on-site reception.
Data Controller.Data is processed by Doventrix, located at 12 Victoria Street, Sydney NSW 2000, Australia, reachable at +61 2 8721 1903 and by email at Doventrix@gmail.com. The main purposes include appointment management, responding to requests, billing, customer relationship management, and compliance with legal obligations applicable to the beauty industry.
Data Collected.Information that may be collected includes identification and contact details (name, email, phone), booking data (date, time, desired service), payment-related information (depending on the method used), and exchanges necessary for the proper provision of the service. No so-called sensitive data is sought. Information voluntarily provided in messages must remain relevant to the request.
Legal Bases and Purposes.Processing is based, depending on the case, on the performance of pre-contractual and contractual measures (appointment and service management), legitimate interest (improving reception, preventing abuse, securing the website), or compliance with legal and accounting obligations. Data is used only for determined, explicit, and legitimate purposes and is not further processed in a manner incompatible with those purposes.
Retention Periods.Contact details and booking information are retained during the relationship and, thereafter, within the limits necessary for administrative management, accounting, and compliance with legal time limits. Transaction records are retained in accordance with applicable obligations. Messages received via forms or email may be retained for the time needed to process the request and then archived for a proportionate period.
Recipients and Sub-processors.Information is intended for authorized personnel of Doventrix. Technical service providers (hosting, email, payment solutions) may act as sub-processors, subject to appropriate confidentiality and security clauses. Data is not commercially transferred.
Security.Reasonable organizational and technical measures are implemented to reduce the risks of unauthorized access, disclosure, or alteration. These measures include access management, use of standard security tools, and awareness of personnel handling information.
Cookies and Trackers.The website may use functional and audience measurement cookies for service quality purposes. On the first visit, a banner allows you to express a choice, which can be modified later by deleting cookies from your browser. Technical cookies necessary for operation cannot be disabled through the website interface. For more information, refer to the banner and browser settings.
Your Rights.In accordance with applicable regulations, data subjects have rights of access, rectification, erasure, restriction, objection on legitimate grounds, and, where applicable, the right to data portability. Proof of identity may be required to process certain requests. Requests should be sent to Doventrix@gmail.com or by mail to the institute's postal address.
Transfers Outside Australia.Data is not transferred outside Australia unless a technical provider requires it and applies appropriate safeguards (standard contractual clauses or adequacy decision). In such a case, information is provided at the appropriate time.
Updates.This policy may evolve to reflect legal, technical, or organizational adjustments. The current version is published on this page with its update date. In the event of a substantial change directly impacting data subjects' rights, appropriate information will be provided.
Contact.For any questions regarding data protection or to exercise your rights, you can write to Doventrix@gmail.com or call +61 2 8721 1903. A response will be provided within a reasonable time, taking into account the nature of the request and regulatory constraints.