Staff Login
← Back to home
Your privacy

Privacy Policy

Last updated 13 October 2026

We only collect what we need to deliver your styling, we keep it safe, and we never sell it. This policy explains exactly what we collect, why, and the choices you have.

1. Who we are

Canterbury Christmas Bows is a small, Melbourne-based service that hand-ties Christmas bows at customers’ homes. In this policy, “we”, “us” and “our” mean Canterbury Christmas Bows.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). Questions about this policy can be sent to canterburychristmasbows@yahoo.com.au.

2. What we collect

When you make a booking, we collect:

  • your name, phone number and email address;
  • your street address and suburb (so a stylist can find you);
  • the bows you choose, your chosen date and time, and the total price;
  • anything you add in the optional notes field.

When you contact us by email, we keep your message and our reply.

When you visit the site, we record which page was viewed and the website that referred you (if any), with a timestamp. We do not record your name, IP address or any account details with these visits, and they are not linked to any booking. Our hosting provider also collects standard technical and performance information (such as browser type, device type and approximate country) in aggregate form.

We don’t ask for, and you shouldn’t enter, payment card details on this website, bookings don’t take payment online.

3. How we use your information

We use your information to:

  • schedule, confirm, change and carry out your booking;
  • email you booking confirmations, reschedules and cancellations;
  • contact you if something about your visit changes (for example weather or access);
  • answer your questions and resolve any issues;
  • understand, in aggregate, how the website is used so we can improve it;
  • keep the site secure and prevent spam or misuse; and
  • meet our legal, tax and record-keeping obligations.

We don’t sell your information, and we don’t send marketing emails or texts unless you separately ask to hear from us.

4. Who we share it with

Your booking details are shared with the stylist assigned to your booking. We also use a small number of trusted service providers to run the site. They only handle your information to provide their service to us:

  • Supabase: secure database hosting where bookings are stored;
  • Resend: delivery of our booking emails;
  • Vercel: website hosting, plus privacy-focused visitor analytics and performance measurement.

We may also disclose personal information where the law requires it, to protect people or property from serious harm, or to a professional adviser (such as an accountant or insurer) bound by confidentiality.

5. Storage and overseas disclosure

Our service providers may store or process information on servers outside Australia, including in the United States and Europe. We choose providers that use industry-standard security and contractual protections, and we take reasonable steps to make sure your information is handled in a way that is consistent with Australian privacy law.

6. Cookies and analytics

The public pages of this website don’t use advertising or tracking cookies, and we don’t use Google Analytics, Meta Pixel or similar cross-site tracking. That’s why you don’t see a cookie banner.

To count how many different people visit, we keep an anonymous code made from your connection and browser details. It can’t be turned back into your name, address or device, and nothing is stored on your device.

The staff area uses a single functional cookie that keeps our team signed in; it isn’t used for tracking and isn’t set for customers.

7. How we protect your information

We take reasonable steps to keep your information safe, including encrypting data in transit, restricting database access to our server and authorised staff, protecting the staff area with a password, and using private, unguessable links for managing a booking. No online system is completely secure, so please keep your booking-management link private.

If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by law.

8. How long we keep it

We keep booking records for as long as we need them to provide the service, handle follow-up questions and meet our legal, tax and insurance obligations. After that, we delete the information or remove anything that identifies you. Basic site-visit records contain no personal details.

9. Your choices and rights

You can ask us at any time to:

  • give you a copy of the personal information we hold about you;
  • correct information that is inaccurate or out of date; or
  • delete your information (we may need to keep some records where the law requires it).

Email canterburychristmasbows@yahoo.com.au and we will respond within a reasonable time, normally within 30 days. We may need to confirm your identity first to protect your privacy.

You can also cancel or reschedule a booking yourself using the link in your confirmation email.

10. Children

Bookings must be made by an adult. This website isn’t directed at children and we don’t knowingly collect personal information from anyone under 18.

11. Questions and complaints

If you have a concern about how we’ve handled your information, please email canterburychristmasbows@yahoo.com.au with the details and we will investigate and reply promptly.

If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

12. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it last changed, and the current version is always available at this page. Our Terms & Conditions explain the rules for using this website and booking a styling.