Privacy policy

Depending on how you interact with us, we may collect:

• Contact details — your name, email address, phone number and, for boxed gift cards, a delivery or pick-up name.
• Booking details — treatments booked, preferred therapist, visit history, membership status and gift card balances.
• Health and consultation information — allergies, skin sensitivities, pregnancy, injuries or medical conditions relevant to your treatment.
• Payment information — processed securely by our payment provider. We do not store full card numbers.
• Website information — pages visited, device and browser type, and approximate location, collected through cookies and analytics.

Health information is “sensitive information” under the Privacy Act. We only collect it with your consent, and only so our therapists can tailor your treatment and keep you safe — for example, avoiding certain oils or pressure.

Consultation forms are stored securely, are accessible only to the staff providing or managing your care, and are never used for marketing.

• To take, confirm, remind you about and manage your bookings.
• To deliver treatments safely and suited to your needs.
• To process payments, gift cards and memberships.
• To respond to enquiries, feedback and complaints.
• To send seasonal offers and news, if you have opted in.
• To improve our services and website.

We never sell your personal information. We share it only with trusted providers who help us run the spa — such as our online booking system, payment processor, email service and IT providers — and only as needed for them to do so.

Some of these providers may store data on servers outside Australia. Where that happens, we take reasonable steps to make sure your information is handled consistently with the APPs. We may also disclose information where required or authorised by law.

We only send marketing emails if you subscribe or agree to receive them. Every email includes an unsubscribe link, or you can ask us to remove you at any time by emailing hello@elysiumdayspa.com.au.

Our website uses cookies to remember preferences and to understand how visitors use the site. You can block or delete cookies in your browser settings, though some parts of the site — such as online booking — may not work as intended.

We take reasonable steps to protect your information from misuse, loss and unauthorised access, including access controls and secure, reputable software providers. We keep information only for as long as we need it for the purposes above or as required by law, after which it is securely destroyed or de-identified.

You can ask to access the personal information we hold about you, or to correct it if it is inaccurate, out of date or incomplete. Contact us at hello@elysiumdayspa.com.au and we'll respond within 30 days.

If you have a concern about how we have handled your information, please contact us first so we can try to resolve it. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated.