"Personal Information" is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not.

We may collect and hold Personal Information about a range of people, including:

- Current, former and prospective clients and their employees;
- Suppliers, business associates and their employees;
- Contractors and their employees;
- Current, former and prospective employees; and
- Other persons who may come into contact with us or our clients.

The Personal Information collected and used by us may include:
- General identification information such as names, job title, occupation, date of birth and gender;
- Contact information including name, residential and postal addresses, telephone numbers and email addresses;
- Financial information, including payment and bank account details;
- Government issued identifiers, such as Tax File Numbers and Australian Business Numbers (where applicable);
- Ssernames and passwords;
- Information related to search preferences and history;
- Other Personal Information relevant to your use of our Website or Mobile App or the services which we provide (as the case may be).

“Sensitive Information” is a form of “Personal Information” which requires a higher level of protection of protection under the Privacy Act. “Sensitive Information” means information or an opinion about an individual’s racial or ethnic origin, membership of a political association, membership of a professional or trade association, membership of a trade union, religious beliefs, sexual orientation or criminal record. Sensitive Information also includes “health” information. Sensitive Information may only be collected by us if it is necessary for our business or operational purposes or in circumstances whether it is required and authorised by law. The type of sensitive information that we may collect from you includes information about your search preferences and history, treatment preferences, and other health and medical information and data you have provided to us with your consent, in the course of creating an account with us or using our Website or Mobile App or is necessary for us to meet our legal obligations. 

We collect personal information that is reasonably necessary for us to conduct our business activities. Generally, personal information will be used for providing our services to you, responding to your enquiries and sending you information about our marketing activities. 

We collect personal information from you in a number of ways.
- Indirectly – through use of the Website or the Mobile App; and/or
- Directly - where information is provided by you.

At times, it may be necessary for us to collect Personal Information about you from a third party. Generally, we will only collect your Personal Information from sources other than you if it is unreasonable or impractical to collect Personal Information from you directly.

If you provide personal information about other individuals to us, you must ensure that you have informed those individuals that you are providing their personal information to us and that you have obtained their consent. You must also refer them to this Privacy Policy. 

We will generally collect and use your Personal Information that is reasonably necessary for us to conduct one or more of our business functions or activities, including for the following purposes:

1. For administrative purposes, including:

a. Enable your booking and verify your identity;
b. Book the requested third party service;
c. Provide services related to the booking and/or account;
d. Create, maintain, and update user accounts on our platform and authenticate you as a user;
e. Maintain your search history and booking/service preferences, and similar information about your use of our platform and services, and as otherwise described in this Privacy Policy.
f. Enable and facilitate acceptance and processing of payments, coupons, and other transactions;
g. Administer loyalty and rewards programs;
h. Collect and enable booking-related reviews;
i. Help you to use our services faster and easier through features like the ability to sign-in using your account within the online services and sites owned by Weeha or related parties of Weeha;
j. Processing payment transactions;
k. Charging and billing; and 
l. detecting or preventing fraud.

2. Communications and Customer Service Purposes – including to:

a. Respond to your questions, requests for information, and process information choices;
b. Enable communication between you and the third party supplier; and
c. Contact you (such as by text message, email, phone calls, mail, push notifications, or messages on other communication platforms) to provide information like service booking confirmations and updates, emergency notifications, or for other purposes as described in this Privacy Policy.

3. Marketing Purposes – including to:

a. Contact you (such as by text message, email, phone calls, mail, push notifications, or messages on other communication platforms) for marketing purposes;
b. Analyse information such as browsing and/or purchase history and use the result to optimize advertising and marketing in accordance with your interests and preferences;
c. Measure and analyse the effectiveness of our marketing and promotions;
d. Administer promotions like contests, sweepstakes, and similar giveaways;
e. Deliver targeted advertising and advertising based on your profile. Our Cookie Statement further explains how we use cookies and similar tracking technology.

4. Market Research, Analytics, and Training Purposes to improve our Services – including to:

a. Conduct surveys, market research, and data analytics.
b. Maintain, improve, research, and measure the effectiveness of our sites and apps, activities, tools, and services;
c. Inviting you to events, functions and activities and providing you with updates, e-Alerts and articles from time to time; 
d. Keeping you informed of our services, industry developments, seminars and other events; and
e. Create aggregated or otherwise anonymized or deidentified data, which we may use and disclose without restriction where permissible.

5. Security and Compliance Purposes – including to:

a. Promote security, verify identity of our customers, prevent and investigate fraud and unauthorized activities, defend against claims and other liabilities, and manage other risks;
b. Comply with applicable laws, protect our and our users’ rights and interest, defend ourselves, and respond to law enforcement, other legal authorities, and requests that are part of a legal process; 
c. Comply with applicable security and anti-terrorism, anti-bribery, customs and immigration, and other such due diligence laws and requirements; and
d. Where we are required to or authorised by legislation or industry code, direction or standard to do so.

6. For development and analytic purposes to develop our expertise and know how, including:

a. For benchmarking purposes;
b. Development, analytics and business intelligence functions including web site trend and performance analysis;
c. Quality assurance and thought leadership, and
d. Other purposes related to our business

7. To supply our products and services to you;

8. For any other purpose communicated to you at the time that the Personal Information was collected or for which you provided your consent.

If you choose not to provide your Personal Information to us, we may not be able to undertake certain activities for you such as progressing the booking, or administer our rewards program or provide you with requested information or services.

We will generally hold Personal Information in physical records, electronic records on our servers, and where necessary, electronic records on third party servers.

We may only use and disclose your Personal Information for the purpose for which the information was collected (Primary Purpose). We may use your personal information for another purpose (Secondary Purpose) if the person to which the personal information relates has consented to the disclosure or the Secondary Purpose is related to the Primary Purpose and its disclosure might be reasonably expected of that person.

We may disclose Personal Information to third parties, such as contractors, service providers and agents, to assist us with our business activities and to provide services.

The types of third parties to whom we may disclose your Personal Information includes third-party service providers (including contractors and designated agents).

The following third-party service providers process Personal Information about you for the following purposes:

Third-party service providers.
‍We share personal information with third-parties in connection with the delivery of services to you and the operation of our business.These third-party service providers are required to protect personal information we share with them and may not use any directly identifying personal information other than to provide services we contracted them for.  They are not allowed to use the personal information we share for purposes of their own direct marketing (unless you have separately consented with the third-party under the terms provided by the third-party).

Use of Personal Information by Third-party service providers:Third party service provides use Personal Information for:
a. Platform Usage and Booking Purposes;
b. Communications and Customer Service Purposes;
c. Marketing Purposes;
d. Market Research, Analytics, and Training Purposes to improve our Services; and
e. Security and Compliance purposes.

We will not collect any Personal Information about users of our Website and Mobile App except when they knowingly provide it or as otherwise described below. For example, we may collect Personal Information from users when they:

a. Complete an online form; and/or
b. Otherwise correspond with us

Click Stream Data

When you visit and browse our Website, our Website host may collect Personal Information for statistical, reporting and maintenance purposes. Subject to paragraph 3, the Personal Information collected by our Website host will not be used to identify you. The information may include:

a. The number of users visiting our website and the number of pages viewed;
b. The date, time and duration of a visit;
c. The IP address of your computer; or
d. The path taken through our website

Our Website Host uses this information to administer and improve the performance of our Website.

Cookies

Cookies are small text files that are transferred to a user’s computer hard drive by a website for the purpose of storing information about a user’s identity, browser type or website visiting patterns.

If you access our Website, a cookie is downloaded onto your computer’s hard drive when you first visit our Website. If you wish to delete cookies or instruct your web browser to delete or refuse cookies, please visit the help pages of your web browser. Please note, however, that if you delete cookies or refuse to accept them, you might not be able to use all of the features we offer, you may not be able to store your preferences, and some of our pages might not display properly.

Web Beacons

Web beacons are images that originate from a third party site to track visitor activities. We may use web beacons to collect aggregate data and provides this information to our Website host to administer and improve the performance of our Website.

This website may contain links to and from other websites. This Privacy Policy only applies to this website.

If you go to another website from this one, read the privacy policy on that website to find out what it does with your information. If you visit this site from another website, we may receive personal information about you from the other website. You should read the privacy policy of the website you came from to find out more about this.

We will take reasonable steps to protect your Personal Information from misuse, interference and loss, and from unauthorised access, modification or disclosure. 

We aim to keep your Personal Information secure and up-to-date. We will comply with applicable security obligations under the Privacy Act in relation to any Personal Information that we handle, including ensuring only relevant and authorised personnel deal with your Personal Information.

Personal Information is held in both hard copy and soft copy (electronically.) When all our legal obligations to retain your personal information have expired, or we no longer need your personal information to fulfil the purposes we collected it, we will take such steps as to reasonably destroy or de-identify it. Personal Information that is held by us in hard copy is stored securely on our premises and is only disclosed or used for the purposes described in this Privacy Policy.

We may use your Personal Information to send to you post and emails with information about our goods and services that we believe may be of interest to you. You have the right to elect not to receive the receipt of direct marketing communications by:

a. Using the "unsubscribe" opt-out link within the email; or
b. Contacting us by email at info@weeha.co. 

Any electronic message that we send will identify us as the sender and will include relevant contact details and an unsubscribe facility.

If you do not wish to receive electronic messages from us or phone calls from us on a particular number, please contact us.

We will take reasonable steps to ensure that the Personal Information that we hold is accurate, up-to-date and complete. You may request access to the personal information we hold about you and to request for us to correct the information if it is inaccurate, incomplete or out of date. We will provide you with access to your personal information in accordance with the Australian Privacy Principles and the Privacy Act.

If you request to access or update your Personal Information, we will grant your request unless providing you with access would: unreasonably impact upon the privacy of others; or be otherwise prohibited under the Australian Privacy Principles or at law.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

If you wish access to the personal information we hold about you or for us to correct your personal information, please contact us at any time in ways set out in paragraph 14.

Where access is denied to Personal Information, we will provide you with written reasons for the refusal of access.

We will keep your Personal Information only for as long as required for our functions or activities and otherwise as required by Australian law.

Where we no longer need to keep your Personal Information, we will take reasonable steps to destroy or de-identify your Personal Information.

If you wish to have your Personal Information destroyed or de-identified and we not required to keep it for legal, auditing or internal risk management purposes, please contact us in any of the ways specified in paragraph 14 and we will take reasonable steps to comply with your request.

In the event of any suspected or actual loss, or any unauthorised access or disclosure of your personal information that is likely to result in serious harm to you, we will investigate and notify you and the Office of the Information Commission as soon as practicable and in accordance with the requirements set out in Privacy Act.

If you feel that your privacy has not been respected or that we have conducted ourselves inconsistently with this Privacy Policy, the Australian Privacy Principles, or the Privacy Act in respect of your Personal Information, or for any other queries, problems, complaints or communication in relation to this Privacy Policy, please contact us in any of the following ways:

a. Email: info@weeha.co
b. Write to: [insert address]

You can find out more information about the Privacy Act and the Australian Privacy Principles from the Australian Information Commissioner. The Information Commissioner may be contacted at oaic.gov.au (email – enquiries@oaic.gov.au).