Privacy Policy

At Mesa, your privacy is respected as deeply as your experience with us. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you visit our website, engage with our services, or make a booking. We are committed to handling your information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

We collect personal information that is reasonably necessary to provide our services and ensure your safety and comfort. This may include your name, contact details, date of birth, and relevant health information required for treatments. Information may be collected via our website, booking platform, in-studio forms, or direct communication with our team.

Where practical, you may choose not to provide certain information; however, this may limit our ability to deliver treatments safely or manage your booking effectively.

Your personal information is used to:

• Manage and confirm bookings 
• Deliver safe, appropriate, and personalised treatments 
• Communicate appointment details, updates, and relevant offerings 
• Process payments and Gift Voucher redemptions 
• Comply with legal and regulatory obligations 

We only use your information for the purpose for which it was collected, or for related purposes you would reasonably expect.

We use Fresha to manage appointments and client records. By making a booking, your information may be stored within this platform in accordance with its privacy and security practices.

We may also engage trusted third-party providers for payment processing, communications, and operational support. These providers are required to handle your personal information in accordance with applicable privacy laws and maintain appropriate security standards.

Some third-party services may store data overseas. Where this occurs, we take reasonable steps to ensure your information is handled in accordance with Australian privacy requirements.

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure, in line with APP 11. Information is stored securely within controlled digital systems and, where applicable, in secure physical formats with restricted access.

Health and treatment-related information is considered sensitive information under the Privacy Act and is handled with the highest level of confidentiality. This information is collected only where necessary and is used solely to ensure safe and appropriate treatment. It will not be disclosed without your consent unless required or authorised by law.

In accordance with APP 12 and APP 13, you have the right to request access to the personal information we hold about you and request corrections if it is inaccurate, out of date, or incomplete. Requests can be made by contacting us directly.

We may send you updates, studio news, or offerings where you have provided consent or where permitted by law. You may opt out at any time via the unsubscribe link or by contacting our team.

Our website may use cookies or similar technologies to enhance your browsing experience and analyse website traffic. This allows us to improve functionality and tailor your experience.

If you have concerns about how your personal information has been handled, you may contact us directly. We will take reasonable steps to investigate and respond promptly. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

This Privacy Policy may be updated from time to time to reflect changes in our practices or legal requirements. The most current version will always be available on our website.

If you have any questions, requests, or concerns regarding your privacy or this policy, we invite you to contact our team—we are always here to assist.