Spa World Australia Privacy Policy
Spa World Australia Pty Ltd, ABN 94 141 609 663 Last updated: 22 July 2026
Policy overview
This Privacy Policy is maintained by Spa World Australia Pty Ltd, ABN 94 141 609 663 ("we", "our", "us"). It explains how we collect, use, store, disclose and protect your personal information, and applies whenever you use our website, interact with a system or database maintained by us, or otherwise deal with us.
By using our website or transacting with us, you acknowledge the contents of this Privacy Policy. It is in addition to any other terms and conditions that apply to our goods, services or websites.
We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We recognise the importance of protecting personal information, meaning information or an opinion about an identified individual, or an individual who is reasonably identifiable.
We may update this Privacy Policy from time to time. The current version is always the one published on this page, and the "last updated" date above shows when it last changed. Please review it periodically.
1. Personal information we collect
a. The personal information we may collect includes your name, contact details (postal and residential address, telephone number, email address) and relevant financial information.
b. We usually collect personal information directly from you, for example when you visit a showroom, contact us by phone, email or online form, request a quote, or register with us.
c. In some cases we collect personal information about you from other sources, such as a person you have authorised to act for you, a trade reference or credit reporting body (to help us decide whether to offer credit), publicly available sources, or third parties who are licensed by us to sell or distribute our goods or services or to engage with customers on our behalf.
d. We generally do not collect sensitive information (such as health information). If we ever need to, we will only do so with your consent or as otherwise permitted under the Privacy Act.
e. Registration (online or in store) is optional. If you register, we may collect your name, email address, postal address, telephone numbers, your marketing preferences, and related information so you can make full use of our services.
2. When we collect your information from someone else (APP 5)
Where we collect personal information about you, including from a source other than you (for example from a licensee, a credit reporting body, or a third party who refers you to us), we take reasonable steps at or before the time of collection, or as soon as practicable afterwards, to make you aware of:
- the fact and circumstances of collection;
- the purposes for which we collect it;
- the types of third parties to whom we usually disclose that kind of information;
- our identity and contact details;
- how you can access and correct your information and make a complaint; and
- whether we are likely to disclose the information to overseas recipients and, if practicable, the countries involved.
3. Personal information about other people
You should only give us another person's personal information if you have their authority to do so. You should also take reasonable steps to make them aware of this Privacy Policy. If you provide another person's personal information, you confirm you have their authority and have told them about this policy, and we will rely on that.
4. Anonymity and pseudonymity
Where practicable and lawful, you may deal with us anonymously or under a pseudonym, and we will do our best to help. However, without your identity we may be limited in what we can do, and in some cases we may be unable to provide goods or services to you.
5. How we use and disclose your information
a. We use personal information for the purpose it was collected, for related secondary purposes you would reasonably expect, for purposes disclosed in this policy or at the time of collection, for any purpose you authorise, and as required or authorised by law.
b. We collect and use personal information to run our business and to provide and market our goods and services to you, including purposes necessary or incidental to providing them. We may share your personal information with our related or associated entities, and with third parties (including licensees) where necessary to provide you with goods or services.
c. We keep personal information only for as long as needed for the purpose it was collected or as required by law, and take reasonable steps to destroy or de-identify it when it is no longer needed.
d. We may disclose personal information where we reasonably believe it is necessary to protect our rights or property, our customers or others, or where we believe in good faith that the law requires disclosure.
e. We may engage third parties to provide goods or services on our behalf and disclose your personal information to them for that purpose.
6. Automated decisions and use of AI
We use software tools, including artificial intelligence tools, to help us run our business. Examples include customer service and support systems, chat and messaging tools, transcription, and analytics.
Where we use these tools:
- A person remains responsible for decisions that affect you. We do not make decisions that could significantly affect your rights or interests solely by automated means without human review.
- We do not enter your payment card details, passwords, or sensitive information into AI tools.
- Some of these tools process information on servers outside Australia. See section 9 (overseas disclosure).
From 10 December 2026, the Privacy Act requires organisations that use personal information in automated decisions that could reasonably be expected to significantly affect an individual to describe those decisions in their privacy policy. If our use of automated decision-making changes so that this applies to us, we will update this policy to describe the personal information used and the types of decisions involved.
If you ask whether you are dealing with a person or an automated system, we will answer honestly.
7. Security
a. We take reasonable steps to protect the personal information we hold from misuse, interference and loss, and from unauthorised access, modification or disclosure (APP 11), and we review our security measures as technologies change.
b. Our employees and the contractors who support our information systems are required to respect the confidentiality of personal information and to comply with this Privacy Policy. We use contractors based in the Philippines who may access your order information and contact details in order to provide customer service.
c. No transmission over the internet is completely secure. While we take reasonable steps to protect your information, we cannot guarantee the security of information sent to us electronically. Our liability for data security is limited to the maximum extent permitted by law.
8. Notifiable data breaches
We take the security of your personal information seriously, but data breaches can occur. Under the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988, an eligible data breach is one involving unauthorised access to or disclosure of, or loss of, personal information that is likely to result in serious harm to an affected individual.
If we have reasonable grounds to believe an eligible data breach has occurred, we will notify the Office of the Australian Information Commissioner and affected individuals as soon as practicable.
9. Overseas disclosure (APP 8)
Some personal information may be disclosed to recipients outside Australia, for example where we use overseas service providers (including some AI, cloud and customer service tools hosted in the United States) or our Philippines-based customer care contractors.
Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles in relation to that information (APP 8). In some circumstances we may remain accountable under the Privacy Act for how an overseas recipient handles your information. Our commitment to protect your privacy does not change when information is disclosed overseas.
10. Cookies and website information
a. Our web servers log information such as IP address, browser type, referring page and time of visit to help diagnose problems and analyse site usage. This information is generally aggregated.
b. We use cookies to improve your experience, maintain your session, and analyse how the site is used. You can block or delete cookies through your browser settings, though some features may not work as a result.
c. We and third parties may use analytics and advertising tools that set cookies to measure and improve our marketing. You can manage advertising preferences through your Google Ad Settings and through your browser.
d. Our site links to third-party websites we do not control. We are not responsible for their conduct or privacy practices. Review their terms and privacy policies before providing personal information.
11. Accessing and correcting your information
a. We take reasonable steps to keep the information we hold accurate, up to date and complete. If you believe information we hold is incorrect, contact our Privacy Officer to have it corrected (APP 13).
b. You may request access to the personal information we hold about you by contacting our Privacy Officer (APP 12). Except where a legal exception applies, we will provide access. If we refuse, we will explain why and how you can complain. We will deal with requests as quickly as possible.
12. Complaints
If you have a complaint about how we have collected, used, stored or disclosed your personal information, please contact our Privacy Officer by email at info@spaworld.com.au. We take privacy complaints seriously and will investigate, including how any breach occurred and how to prevent it happening again.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
13. Contact
Privacy Officer Spa World Australia Pty Ltd 46 Topham Road, Smeaton Grange NSW 2567, Australia ABN: 94 141 609 663 Email: info@spaworld.com.au
For more information about privacy in Australia, visit the Office of the Australian Information Commissioner at https://www.oaic.gov.au
