Privacy Policy

1. Introduction

HMB Barbers ("we", "our", "us") is committed to protecting the privacy of our customers, website visitors and anyone who contacts us through our website at disgrupp.com. This Privacy Policy explains how we collect, use, store and disclose personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our website or engaging with our services, you acknowledge that you have read and understood this Privacy Policy.

We operate 18 walk-in barbershop locations across Queensland, Australia. This policy applies to all personal information collected through our website, in-store interactions and any other communications with HMB Barbers.

2. Information We Collect

We may collect personal information from you in several ways, including when you visit our website, submit a contact form, interact with us via email or visit one of our stores. The types of personal information we may collect include:

• Contact details: Your full name, email address and telephone number when you submit our online contact form or correspond with us directly.
• Transaction data: Payment card type and transaction references processed through our cashless payment systems in-store. We do not store full card numbers or CVV details; all payment processing is handled by our third-party payment provider.
• Website usage data: Your IP address, browser type and version, operating system, referring URLs, pages visited, time spent on pages and other diagnostic data collected automatically when you browse our website.
• Device information: The type of device you use to access our website, screen resolution and unique device identifiers.
• Communication records: The content of any messages, enquiries or feedback you send to us via email, our contact form or other channels.

We do not knowingly collect personal information from children under the age of 16. If you believe that a child has provided us with personal information, please contact us immediately so that we can take appropriate steps to remove such data.

3. How We Use Your Information

We collect and use your personal information for the following purposes:

• Responding to enquiries: To respond to messages, questions or feedback submitted through our contact form or by email.
• Service delivery: To provide barbering services when you visit our stores, including processing cashless payments.
• Website improvement: To analyse how visitors use our website so we can improve its content, functionality and user experience.
• Legal compliance: To comply with applicable laws, regulations and legal processes, including our obligations under Australian consumer law.
• Business operations: To manage our internal business operations, including staff training, quality assurance and administrative purposes.
• Security: To detect, prevent and address technical issues, fraud or other security concerns on our website.

We will only use your personal information for the purposes for which it was collected, or for a directly related secondary purpose that you would reasonably expect. We do not sell, rent or trade your personal information to third parties for marketing purposes.

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files placed on your device that help us understand how you interact with our site. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

We may use analytics tools, such as Google Analytics, to collect aggregated, anonymised data about website traffic and usage patterns. This information helps us understand visitor behaviour and improve our website. These tools may set their own cookies, which are governed by the respective third-party privacy policies.

5. Third-Party Service Providers

We may share your personal information with trusted third-party service providers who assist us in operating our business. These may include:

• Payment processors: Third-party payment gateway providers that process cashless transactions at our stores. These providers are PCI DSS compliant and handle card data securely.
• Website hosting: Our web hosting provider stores website data, including any information submitted through our contact form, on secure servers.
• Analytics providers: Services such as Google Analytics that help us understand website traffic and user behaviour through anonymised data.
• Email services: Third-party email platforms that may be used to manage and respond to customer enquiries.

We require all third-party service providers to handle personal information in accordance with applicable privacy laws and to implement appropriate security measures. We do not authorise them to use your personal information for their own purposes beyond the services they provide to us.

6. Data Security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. Our security measures include:

• SSL/TLS encryption on our website to protect data transmitted between your browser and our servers.
• Secure storage of any personal information collected through our contact form.
• Restricted access to personal information, limited to authorised personnel who require it for legitimate business purposes.
• Regular review of our data collection, storage and processing practices.

While we take all reasonable precautions, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your personal information, but we are committed to implementing industry-standard protections.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form submissions are retained for a period of 12 months to allow us to follow up on enquiries and maintain records of our communications. Website analytics data is retained in aggregated, anonymised form and does not identify individual users. When personal information is no longer needed, we take reasonable steps to securely destroy or de-identify it.

8. Your Rights

Under the Australian Privacy Principles, you have the following rights in relation to your personal information:

• Access: You have the right to request access to the personal information we hold about you. We will respond to your request within 30 days.
• Correction: If you believe that any personal information we hold about you is inaccurate, incomplete, out of date or misleading, you may request that we correct it.
• Complaint: If you believe we have breached your privacy or mishandled your personal information, you may lodge a complaint with us. We will investigate and respond to your complaint within 30 days. If you are not satisfied with our response, you may escalate the matter to the Office of the Australian Information Commissioner (OAIC).
• Erasure: You may request that we delete your personal information where it is no longer necessary for the purpose for which it was collected. We will comply with such requests unless we are required to retain the information by law.

To exercise any of these rights, please contact us using the details provided in Section 10 below.

9. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the revised policy on our website. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our website or services after any changes to this policy constitutes your acceptance of those changes.

10. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or our handling of your personal information, please contact us at:

HMB Barbers
Email: info@disgrupp.com
Website: Contact Page

If you are not satisfied with our response to a privacy-related enquiry or complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.