Privacy Policy – Q1 Day Spa

Who We Are

Business Name: Q1 Day Spa

Company Name: Lumina Wellness Group PTY LTD, trading as Q1 Day Spa
ABN: 12 684 034 759

Our website address is: https://q1dayspa.com.au.

At Q1 Day Spa, we are committed to protecting your privacy and ensuring that your personal information is handled securely and responsibly. This Privacy Policy outlines how we collect, use, and protect your data when you visit our website or use our services.

Information We Collect

Personal Data

When you interact with our website, book a service, or contact us, we may collect personal information such as:

• Name
• Email address
• Phone number
• Billing and payment details
• Any other information you provide when booking a treatment or contacting us

Comments & Reviews

If visitors leave comments on our site, we collect the data entered in the comments form, the visitor’s IP address, and browser user agent string to help with spam detection.

An anonymized string created from your email address (a hash) may be provided to the Gravatar service to check if you are using it. After approval, your profile picture may be publicly visible in the context of your comment. For more information, view the Gravatar privacy policy: https://automattic.com/privacy/.

Media Uploads

If you upload images to our website, avoid including embedded location data (EXIF GPS), as visitors may be able to download and extract this information.

Cookies & Tracking Technologies

Cookies

Our website uses cookies to improve user experience. These are small files stored on your device that help us remember your preferences and optimize our site performance.

• If you leave a comment, you may opt-in to saving your name, email address, and website in cookies for future convenience. These cookies last one year.
• A temporary cookie is set on the login page to check if your browser accepts cookies. It contains no personal data and is discarded when you close your browser.
• When you log in, additional cookies save your login information and display preferences. Login cookies last two days, and screen preference cookies last one year.

Embedded Content from Other Websites

Articles on this site may include embedded content (e.g., videos, images, articles, etc.), which behaves as if the visitor has accessed the external site directly. These sites may collect data, use cookies, and track your interactions.

How We Use Your Information

We collect and use your personal data for the following purposes:

• To process bookings and provide requested services.
• To communicate with you about your appointments, promotions, or inquiries.
• To improve our website and personalize your experience.
• To comply with legal and security requirements.

Your information will not be sold, rented, or shared with third parties except as required for service processing, legal obligations, or business analytics.

Who We Share Your Data With

• If you request a password reset, your IP address will be included in the reset email.
• Visitor comments may be checked through an automated spam detection service.

How Long We Retain Your Data

• If you leave a comment, both the comment and its metadata are retained indefinitely to recognize and approve future comments automatically.
• For registered users, we store the personal information provided in their user profile. Users can view, edit, or delete their information at any time (except usernames). Website administrators can also edit user details.

Your Rights Over Your Data

If you have an account or have left comments, you may request an exported file of your personal data. You can also request that we erase any personal data we hold, except for data we are required to retain for administrative, legal, or security reasons.

Where Your Data Is Sent

Visitor comments may be checked through an automated spam detection service. We take appropriate security measures to protect your personal information from unauthorized access, use, or disclosure.

Additional Privacy Information

Booking, Treatment and Health Information

When you book an appointment or receive a treatment at Q1 Day Spa, we may collect additional information reasonably necessary to manage your booking and provide an appropriate, safe and personalised service.

Depending on the treatment and the information you choose to provide, this may include:

• Appointment details, treatment selections and booking history.

• Relevant treatment preferences and client notes.

• Information about allergies, injuries, medical conditions, pregnancy or other health considerations relevant to your treatment.

• Information you provide when completing consultation forms or discussing your treatment with our team.

Health information is considered sensitive personal information under Australian privacy law.

Where required, we will seek your consent before collecting sensitive health information. Such information is intended to be used for treatment planning, client care, safety, appropriate service delivery and other purposes permitted by law.

We do not seek to use sensitive treatment or health information for advertising targeting. Any use or disclosure of health information for direct marketing must comply with applicable privacy requirements, including consent requirements.

Online Bookings — Fresha

Q1 Day Spa uses Fresha as its appointment booking and management platform.

When you select a booking link on our website, you may be redirected to Fresha, where appointment information and other details needed to manage your booking may be collected.

Fresha may process booking details, contact information, appointment history, payment-related information and other information provided through its platform.

We use booking information available to us to manage appointments, communicate with clients, deliver services and maintain relevant business records.

When using Fresha, your information may also be handled in accordance with Fresha’s own privacy practices.

Fresha Privacy Policy: https://terms.fresha.com/privacy-policy

Gift Cards, Online Purchases and Payments

Q1 Day Spa uses WooCommerce on its WordPress website to facilitate Gift Card purchases and related online transactions.

When you purchase a Gift Card, information collected may include your name, contact details, billing information, order details, Gift Card recipient information and payment status.

Payments may be processed through third-party payment service providers. These providers may collect and process information necessary to authorise and complete transactions, detect fraud and meet applicable financial or legal obligations.

Q1 Day Spa may retain relevant order and transaction information for customer service, accounting, refunds, administration and legal compliance.

Website Analytics and Performance Monitoring

Our website uses analytics and performance-monitoring technologies to understand how visitors interact with our website and to improve its functionality, content, usability and marketing effectiveness.

These services include:

Google Analytics 4 (GA4)

We use Google Analytics to understand website traffic, visitor interactions, navigation patterns and selected website events.

Google Tag Manager

We use Google Tag Manager to manage and deliver website measurement and marketing tags. Individual tags may collect and transmit information to the services they support.

Microsoft Clarity

We use Microsoft Clarity to help understand website usability and visitor interactions, including aggregated behaviour, navigation and session-related information.

Depending on the service and browser settings, information processed through these technologies may include:

• Pages visited and interactions with website content.

• Device and browser information.

• Approximate location derived from technical information.

• Referral sources and advertising campaign information.

• Cookie identifiers and other online identifiers.

• Website events, such as interactions with booking links, contact buttons and forms.

Online identifiers and usage information may constitute personal information under applicable privacy laws, particularly where they can be associated with an identifiable individual.

Advertising and Marketing Measurement

Q1 Day Spa uses digital advertising platforms, including Google Ads and Meta advertising services.

Our website may use Google advertising tags, Meta Pixel and related measurement technologies to assess advertising performance, understand interactions following advertisements and support relevant advertising activities.

Depending on the applicable technology and settings, these providers may receive technical information about website visits, advertising interactions, browser identifiers and selected website events.

We use these technologies for purposes such as measuring advertising effectiveness, understanding customer acquisition and improving the relevance of our marketing.

These services may process information under their own privacy policies and applicable contractual arrangements.

The information above supplements the third-party service and business analytics disclosures elsewhere in this Privacy Policy.

We do not intend to disclose sensitive treatment or health information to advertising platforms for behavioural targeting. We recognise that the collection and disclosure of personal information through marketing technologies must comply with applicable privacy laws.

Cookies and Similar Technologies

In addition to the WordPress cookies described earlier in this Privacy Policy, our website may use cookies and similar technologies associated with:

• Essential website functions, security and shopping-cart operations.

• Website analytics and performance measurement.

• Advertising campaign measurement.

• Booking platform navigation and functionality.

• Website usability and interaction analysis.

Different technologies may use cookies, browser storage or other online identifiers. Their availability and operation can depend on your browser settings, the services involved and applicable privacy controls.

You can manage or restrict cookies using your browser settings and any privacy controls made available by the relevant service providers.

Disabling certain cookies may affect some website functions or the accuracy of website analytics.

Email Marketing and Newsletter Subscriptions

Q1 Day Spa uses Brevo to assist with email marketing, newsletter distribution and customer communications.

If you subscribe to our newsletter or otherwise agree to receive marketing communications, we may use your contact information to send relevant spa updates, promotions, special offers and business news.

Where applicable law permits marketing based on another form of consent, we will apply the relevant consent requirements.

Marketing communications are subject to applicable Australian laws, including the Spam Act 2003.

Our commercial marketing emails will identify Q1 Day Spa and provide an appropriate method for unsubscribing.

You may withdraw your marketing consent by using the unsubscribe option included in our marketing emails or by contacting us at info@q1dayspa.com.au.

We will process unsubscribe requests in accordance with applicable legal requirements.

Unsubscribing from promotional communications does not necessarily prevent us from sending essential messages relating to your appointments, purchases or other requested services.

Third-Party Service Providers

To operate our website and provide our services, we may use third-party platforms and service providers, including:

• Fresha — appointments and booking management.

• WooCommerce and associated payment services — Gift Card orders and transactions.

• Brevo — newsletter and email marketing services.

• Google — website analytics, tag management and advertising measurement.

• Meta — advertising and marketing measurement.

• Microsoft Clarity — website interaction and usability analysis.

• WordPress, website hosting providers and related technical services — website operation, hosting, maintenance and security.

These providers may process information on our behalf or for their own purposes, depending on the service, the information involved and their applicable terms and privacy practices.

We seek to limit the personal information shared or made accessible to what is reasonably necessary for the relevant services and lawful purposes.

Overseas Processing and Disclosure

Some third-party platforms used by Q1 Day Spa operate internationally and may store, access or process information outside Australia.

The location of processing may depend on the service provider, its infrastructure and the applicable service arrangements.

Where overseas disclosure of personal information occurs, we will take reasonable steps required by applicable Australian privacy law to address the protection of that information.

You may contact us for further information about the relevant overseas processing arrangements.

Data Security and Retention

We recognise the importance of protecting personal information, particularly information relating to client bookings, treatments and health.

We aim to take reasonable administrative, organisational and technical measures to protect personal information against misuse, interference, loss, unauthorised access, modification and disclosure.

Personal information may be retained for periods reasonably necessary for the relevant business purpose, including appointment management, customer support, financial recordkeeping, regulatory compliance and dispute resolution.

Retention periods may vary depending on the nature of the information and applicable legal obligations.

Where information is no longer required, we will take reasonable steps to securely delete or de-identify it, subject to applicable retention requirements.

Access, Correction and Privacy Complaints

You may contact Q1 Day Spa to request access to personal information we hold about you or to request correction of information that is inaccurate, incomplete, out of date or misleading.

We may need to verify your identity before responding to certain requests.

Requests may be subject to applicable legal requirements and exceptions.

If you have a concern or complaint about how your personal information has been handled, please contact us using the details below.

Privacy enquiries and complaints

Q1 Day Spa
Lumina Wellness Group Pty Ltd
Email: info@q1dayspa.com.au
Website: https://q1dayspa.com.au

Please provide sufficient information for us to understand your concern and investigate it appropriately.

We will review privacy complaints and respond within a reasonable period.

Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, privacy practices or applicable legal requirements.

The most recent version will be made available on our website, with the date of the latest update indicated on this page.

Last updated: 16 October 2026