Privacy Policy.

Our privacy commitment

At Navia Bathhouse (ABN 65 681 769 433), safeguarding your privacy forms the cornerstone of our operations. We are bound by the Privacy Principles established under the Privacy Act 1988 (Cth) and remain committed to managing your personal information with exceptional care and integrity.

This policy explains our approach to handling your personal information, detailing how we collect, use, and protect your data. We regularly review and revise this policy to ensure alignment with evolving best practices and legislative requirements. The most current version is accessible at naviabathhouse.com.au/privacy.

Personal information encompasses any data that could reasonably identify you as an individual, either directly or through inference, consistent with the Privacy Act 1988 (Cth) definition.

Information we collect

We collect personal information strategically to deliver exceptional service experiences. Our collection typically encompasses essential contact details including your name, residential address, telephone number, and email address. We also gather identification particulars and your date of birth to ensure appropriate service delivery.

Health and wellness information relevant to our therapeutic services forms another critical component of our data collection, alongside your booking preferences and comprehensive service history. Payment information is securely collected to facilitate transactions, and we value your feedback and correspondence to continuously improve our offerings.

For employment candidates and independent contractors, our collection extends to professional qualifications, comprehensive employment history, and reference details. We also gather relevant training certificates and banking information necessary for remuneration purposes.

While we typically avoid collecting sensitive information such as religious beliefs or political affiliations, should you voluntarily share such details, we handle them strictly according to Privacy Act requirements and enhanced protection protocols.

Collection methods

We gather information through multiple touch points designed to create seamless interactions. Direct communication with our experienced staff represents our primary collection method, complemented by our sophisticated online booking system that captures your preferences and requirements.

Website interactions provide valuable insights into your interests and preferences, while our social media engagement helps us understand community needs and interests. We may also access relevant public records where legally permissible and accept third-party referrals, always ensuring appropriate consent has been obtained beforehand.

Purpose and application

Your personal information enables us to deliver and continually enhance our comprehensive wellness services while managing your appointments with precision and care. We utilise this information to implement appropriate health and safety protocols tailored to your individual needs and to process payments through secure, encrypted systems.

Communication of special offers, wellness insights, and service updates represents another key application of your information, alongside our continuous efforts to improve service quality through data analysis. We also rely on your information to meet various regulatory requirements and to effectively manage employment and contractor relationships within our organisation.

Marketing communications

We may share valuable updates about our services, exclusive offers, and wellness information through various channels including email, SMS, traditional mail, or telephone communication. These communications are designed to enhance your wellness journey and keep you informed of developments that may interest you.

You maintain complete control over these communications and can withdraw your consent at any time using the contact information provided below. We respect your communication preferences and will promptly process any opt-out requests.

Voluntary information sharing

Providing personal information remains entirely voluntary, though certain services may become unavailable if essential information is not shared. We maintain transparency by clearly explaining why specific information is required and outlining potential limitations that may result from choosing not to provide particular details.

Our staff will always discuss information requirements with you openly, ensuring you can make informed decisions about what information to share while understanding any service implications.

Information sharing practices

We may share your information with trusted parties including our trained staff and related business entities who assist in service delivery. Carefully selected service providers, including booking system operators and payment processors, may receive relevant information under strict confidentiality agreements.

We also share limited information with analytics and advertising technology providers, currently Google (Google Analytics and Google Ads) and Meta (Facebook and Instagram). This information consists of technical identifiers such as cookie IDs, device and browser information and pages visited, together with hashed (encoded) contact details used for advertising measurement, as described in the Website Technology section. These providers handle this information under their own privacy policies.

Professional advisors including legal and financial consultants may access your information when necessary for business operations. Regulatory bodies receive information only when legally required, and emergency services may be contacted if circumstances necessitate immediate health or safety intervention.

Where service providers handle personal information on our behalf, we require them to meet appropriate privacy and confidentiality standards. Analytics and advertising providers such as Google and Meta operate under their own policies, and we limit what we share with them to the categories described above. We do not sell personal information to external parties under any circumstances.

When engaging with our social media presence, please remember that publicly posted information becomes visible to the broader community and is subject to the respective platform's privacy policies.

International data management

Much of the personal information we hold, such as booking and account records, is stored and managed within Australia. However, some of the technology services we use are provided by overseas companies, and using our website involves the disclosure of some personal information to recipients located outside Australia.

In particular, our use of Google services (Google Analytics and Google Ads) and Meta services (the Meta Pixel) involves the disclosure of personal information to those companies. This includes technical identifiers such as cookie and device data, and hashed (encoded) contact details used for advertising measurement. Google and Meta process this information on servers located in the United States and in other countries in which they operate.

Where we disclose personal information to overseas recipients, we take reasonable steps consistent with Australian Privacy Principle 8 to ensure it is handled responsibly, including limiting what we share and relying on the privacy commitments and safeguards these providers publish. Please be aware that overseas recipients may not be subject to the Privacy Act 1988 (Cth), and the protections available to you may differ from those under Australian law. If you have questions about overseas disclosures, please contact us using the details below.

Security measures

We implement comprehensive security measures incorporating current industry standards to protect your information from unauthorised access, modification, or unauthorised disclosure. Our security protocols include encrypted data transmission, secure storage systems, and regular security audits conducted by qualified professionals.

While we employ all reasonable measures to ensure robust security, we acknowledge that no system offers absolute protection. We encourage you to take personal precautions when sharing information and to contact us immediately if you suspect any security concerns.

Information accuracy

We are committed to maintaining accurate, complete, and current records of your personal information. Our systems include regular verification processes to ensure data integrity, and we actively encourage you to inform us of any changes to your personal circumstances or contact details.

You can update your information at any time through direct contact with our staff or through your online account portal, ensuring your records remain current and relevant to your service needs.

Website technology

Our website uses cookies and similar technologies. Some are needed for the website to work properly, such as remembering your booking session. Others help us understand how people find and use our services, and help us measure and improve our advertising.

Our website uses the following third party services:

• Google Analytics 4, which helps us understand how visitors use our website, such as which pages are viewed and how bookings are completed. It sets cookies (including _ga cookies) and collects technical information such as device type, browser and approximate location.
• Google Ads, including conversion tracking and remarketing. These tools help us measure whether our advertising leads to bookings, gift card purchases and enquiries. They also allow us to show relevant Navia advertising to people who have previously visited our website. Google Ads sets cookies including _gcl cookies.
• Meta (Facebook) Pixel, which measures the performance of our advertising on Facebook and Instagram and supports remarketing to people who have visited our website. It sets cookies including _fbp and _fbc.

To improve the accuracy of advertising measurement, we may share your email address (and, where we have collected it, your phone number) with Google and Meta at the point of a purchase or enquiry. Before it is shared, this information is converted into a hashed (encoded) form. Google and Meta use the hashed value to match the transaction to an existing account for measurement purposes. We do not send them your readable email address or phone number.

You can control or delete cookies through your browser settings, although blocking some cookies may affect parts of the website such as online bookings. You can also manage how Google and Meta use your data for advertising:

• Google Ads Settings: adssettings.google.com
• Google Analytics opt-out browser add-on: tools.google.com/dlpage/gaoptout
• Meta ad preferences: facebook.com/adpreferences

Accessing your information

You possess the right to access your personal information held by us and to request corrections where necessary. We will verify your identity through secure processes before providing access and may apply reasonable fees for complex or extensive information requests that require significant administrative resources.

Our response timeframes comply with Privacy Act requirements, and we provide clear explanations of any information we hold about you, including its sources and purposes.

Privacy concerns and complaints

We treat all privacy concerns with utmost seriousness and have established clear procedures for addressing any questions or complaints about our privacy practices. Contact our Director with comprehensive details of your concern, and we will investigate promptly while working collaboratively toward satisfactory resolution.

Should you remain unsatisfied with our response, you retain the right to contact the Office of the Australian Information Commissioner for independent review and potential mediation services.

Contact information

For all privacy-related matters, please contact:

Director
Navia Bathhouse
7 Marvell Street, Byron Bay, NSW 2481
Email: bookings@naviahq.com.au

This contact information applies to privacy queries, information access requests, marketing preference changes, and any other privacy-related concerns you may have regarding our services.