Privacy notice
Your information, handled with care.
This notice explains how Hala Faraj, trading as Glam by Hala (ABN 61 823 299 683), handles personal information through glambyhala.au, the installed web app and related services.
Last updated 4 September 2026.
Information we collect
We may collect your name, email address, mobile number, account and marketing preferences, booking details and notes, service history, transaction and invoice records, and messages you send us. We collect it when you use a form, create an account, make or receive a booking, buy something, contact us, or when authorised staff enter a shop record. Security logs may include an IP address and browser details. If you agree to a client photo being published, we also keep the image and the publication approval recorded by the business.
How we use it
We use personal information to create and secure your account, manage appointments, contact you about bookings, provide services, issue receipts and tax invoices, keep business records, respond to support and privacy requests, prevent misuse, and meet legal obligations. We use email or SMS for promotions only when the relevant marketing preference is opted in.
Storage and service providers
The website is hosted by Vercel. Production account, booking and business data and gallery files are stored using Supabase. Business email is provided through the domain email service. We disclose only the information those providers need to host, store, secure or deliver the service. Some provider infrastructure or support may process or back up information outside Australia, including in the United States and other countries where those providers operate. Their privacy and security terms apply. Contact us if you need current details. We do not sell personal information.
Browser storage and the installed app
The site may remember your display theme and app installation preferences on your device. An unfinished booking and its confirmation reference may be kept in session storage for up to two hours. Contact details and booking notes are not kept in that browser booking state, and successful member sign-out clears it.
Retention and security
We restrict administrative data to authenticated staff and use encrypted HTTPS connections in production. Passwords are stored as one-way hashes, not readable passwords. We retain records only while they are needed for appointments, business, tax, dispute, security or legal purposes, then securely delete or de-identify them where practical.
Your choices and requests
You can change marketing choices in your account at any time. You can also request access to or a copy of your account data, ask us to correct inaccurate information, or request account deletion from the privacy section of your signed-in account or by email. A deletion request is reviewed before action because we may need to verify identity and retain limited transaction or legal records.
Privacy concerns
Email us with the details of a privacy concern. We will acknowledge it, investigate what happened and respond using your verified contact details. If you are not satisfied after giving us a reasonable opportunity to respond, you can contact the Office of the Australian Information Commissioner for guidance about making a privacy complaint.
Contact us
Email admin@glambyhala.au with “Privacy request” in the subject, or use the request tools in your account.
Go to your account