Privacy Policy

Last updated: 8 August 2026

1. Scope and privacy framework

This Policy applies to personal information collected through this website, enquiries, appointment-related communications and interactions with our business. We aim to handle personal information transparently and in a manner consistent with applicable Australian privacy requirements, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us. If the General Data Protection Regulation (EU) 2016/679 (GDPR) applies because we offer services to, or monitor the behaviour of, an individual in the European Economic Area in circumstances covered by the GDPR, the additional GDPR provisions in this Policy apply to that processing.

Nothing in this Policy is intended to create rights or obligations that do not otherwise arise under applicable law. If a privacy law imposes a higher standard than this Policy, we will follow the applicable legal standard.

2. What personal information we may collect

Depending on how you interact with us, we may collect your name, email address, telephone number, appointment or service preferences, communications and enquiry details, information you voluntarily provide about the grooming service you want, and records needed to manage a booking or customer-service request. We may also receive ordinary technical information made available by your browser or web server, such as IP address, device and browser type, operating system, referring page, date and time of access, requested pages and basic security logs.

We do not ask you through this website to provide government identifiers, financial account credentials, precise geolocation, health records or other special-category or sensitive information. Please do not include sensitive information in free-form communications unless it is genuinely necessary for the service and you are comfortable providing it. If sensitive information is provided, we will handle it only as permitted by applicable law and, where required, with your consent.

3. How we collect information

We collect information directly from you when you use the contact form, send us an email, telephone us, request information, make or discuss an appointment, or otherwise communicate with us. The website contact form is designed to prepare an enquiry through your email client rather than send the form content to a third-party form-processing service. Your email provider and device may process that message under their own privacy terms.

We may also collect limited technical information automatically from normal server and security logs when the website is hosted and accessed over the internet. We do not intentionally use the current website code to deploy non-essential advertising or behavioural-tracking cookies.

4. Why we process personal information

We process personal information to respond to enquiries; arrange, confirm or manage requested services; communicate about appointments; provide customer service; maintain business records; protect the website and our systems; detect or prevent misuse or security incidents; comply with legal, accounting, taxation and regulatory obligations; establish, exercise or defend legal claims; and improve our services using information that is reasonably necessary for those purposes.

Where GDPR applies, our legal basis may be performance of a contract or steps requested before entering a contract, our legitimate interests in operating and securing our business and responding to customers, compliance with legal obligations, or consent where consent is the appropriate basis. Where we rely on legitimate interests, we consider the nature of the processing, its necessity and the impact on the individual. You may object to processing based on legitimate interests as described below.

5. Direct marketing

We do not use the contact form as an automatic subscription to marketing. If we send commercial electronic messages, we will do so only where permitted by applicable law, identify the sender, provide appropriate contact details and provide a practical way to opt out. You can ask us at any time not to use your contact details for direct marketing. An opt-out request will not prevent service or transactional communications that are reasonably necessary for an appointment or enquiry.

6. Disclosure of personal information

We do not sell personal information. We may disclose information to personnel and service providers who need it to perform legitimate business functions, such as website hosting, email, IT support, professional advisers, accountants, insurers, payment providers if a payment service is used outside this website, or authorities where disclosure is required or authorised by law. We require service providers to handle information appropriately for the service they provide.

If our business is reorganised, merged, sold or transferred, information may be disclosed to professional advisers and prospective or actual counterparties subject to appropriate confidentiality and legal safeguards. We may also disclose information where reasonably necessary to protect the rights, safety or property of customers, our business or others, or to investigate fraud, misuse or security incidents.

7. Overseas disclosures and international transfers

Our business is located in Australia. Some technology or communications providers may store or process information in countries outside Australia. The specific countries can depend on the provider, network routing and the services you choose to use when contacting us. Where Australian privacy law requires us to take steps in relation to an overseas recipient, we will take reasonable steps required by that law. Where GDPR restrictions on international transfers apply, we will use a recognised transfer mechanism or another lawful basis where required.

Because the website does not currently include third-party analytics, advertising pixels or third-party form processors, ordinary browsing of the current site is designed to minimise unnecessary third-party data transfers.

8. Storage, security and data minimisation

We take reasonable technical and organisational measures appropriate to the nature of the information we handle. Measures may include limiting access, maintaining supported systems, applying access controls, using secure hosting and transport protections where available, keeping software updated and disposing of records that are no longer required. No internet transmission or storage system can be guaranteed to be completely secure, so we cannot promise absolute security.

We seek to collect only information reasonably necessary for the relevant purpose. Please avoid sending information that is not required to answer your enquiry or provide the requested service.

9. Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate legal, taxation, accounting, dispute-resolution, security and record-keeping needs. Enquiry information that does not lead to an ongoing customer relationship may be deleted or de-identified when no longer needed. Records connected with a transaction or service may be retained for the period required by applicable law or reasonably necessary to deal with claims and business records. When information is no longer required, we take reasonable steps to delete, destroy or de-identify it, subject to lawful archival or backup requirements.

10. Access and correction under Australian privacy law

Where applicable law gives you a right to access personal information we hold about you or to request correction of inaccurate, out-of-date, incomplete, irrelevant or misleading information, you may contact us using the details above. We may need to verify your identity before fulfilling a request. If an exception permits or requires us to refuse access or correction, we will respond as required by law and, where appropriate, explain the reason and available complaint mechanisms.

11. Additional GDPR rights

Where the GDPR applies to our processing, you may have rights to request access to your personal data, correction, erasure, restriction of processing, portability of data you provided in certain circumstances, and objection to processing based on legitimate interests or direct marketing. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You may also have the right to lodge a complaint with a competent supervisory authority.

These rights are subject to conditions and exceptions in the GDPR. For example, erasure does not apply where processing is necessary to comply with a legal obligation or establish, exercise or defend legal claims. We may request information reasonably necessary to verify identity and clarify the scope of a request.

12. Automated decision-making and profiling

We do not use this website to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects. We do not use the current website code for behavioural advertising profiles.

13. Children

This website is intended for general audiences seeking information about grooming services. It is not designed to solicit personal information from children. If you are a parent or guardian and believe a child has provided personal information to us inappropriately, contact us so that we can assess and, where appropriate, delete or otherwise handle the information in accordance with law.

14. Cookies and similar technologies

The current website is designed without non-essential analytics or advertising cookies. For a detailed explanation of cookies, local storage, security-related technologies and how future changes would be handled, please read our Cookie Policy. If we later introduce a non-essential technology for which consent is legally required, we will implement an appropriate consent mechanism before using it for visitors for whom that requirement applies.

15. Third-party sites and communications

The website may provide communication links such as email or telephone links. Your use of an email, telephone, browser, operating-system or network provider is governed by the provider’s own practices. If we later link to a third-party website, that third party is responsible for its own privacy practices. We encourage you to review relevant notices before providing personal information to another service.

16. Data breaches

If we become aware of a security incident involving personal information, we will investigate and take reasonable containment and remediation steps. Where the Notifiable Data Breaches scheme or another applicable breach-notification regime requires notification to individuals or a regulator, we will make the required notification within the applicable legal framework.

17. Complaints

If you believe we have mishandled your personal information, please contact us first and describe the issue. We will assess the complaint, may request further information and will aim to respond within a reasonable period. If Australian privacy law applies and you remain dissatisfied, you may have the right to complain to the Office of the Australian Information Commissioner. If GDPR applies, you may also have the right to complain to a competent data protection supervisory authority.

18. Changes to this Policy

We may update this Policy when our practices, website functionality or legal obligations change. The version published on this page is the current version and the “Last updated” date shows when it was most recently revised. Material changes will be presented in a reasonably prominent manner where required.

19. Contact

Controller / business: Ceravella White Works Pty Ltd
Address: 7 Wattle Crescent, Mooroolbark, VIC 3138, Australia
Email: info@ceravellawhiteworks.com
Phone: +61 3 9726 8413