Privacy Policy

Last updated: June 2026

Your privacy is important to us. Comma Melbourne Pty Ltd trading as Comma Spaces ("Comma Spaces", "we", "us", "our") is committed to providing quality services to you and this policy outlines our ongoing obligations in respect of how we manage your personal information.

We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act). The APPs govern the way in which we collect, use, disclose, store, secure and dispose of your personal information.

A copy of the Australian Privacy Principles may be obtained from the website of the Office of the Australian Information Commissioner at oaic.gov.au.

For individuals located in the European Economic Area (EEA) or the United Kingdom, we also comply with applicable obligations under the General Data Protection Regulation (GDPR) where relevant.

Information We Collect

Personal information is information or an opinion that identifies an individual. We may collect the following personal information:

Names
Addresses
Email addresses
Date of birth
Phone and mobile numbers
Payment and transaction details
Health and medical information relevant to your treatment (e.g. pregnancy status, allergies, injuries, medical conditions)
Membership and gift voucher purchase history
Website browsing behaviour and device information

How We Collect Personal Information

We may collect personal information from you via any of the following:

Visiting a Comma Spaces location in person
Booking through our website via the Fresha booking platform
Directly from you via email, telephone, or SMS
Purchasing products, services, gift vouchers, or memberships through our website or in-store
Subscribing to our mailing list or other communications
Entering a Comma Spaces competition or promotion
Submitting a treatment intake or consultation form
Applying for a position with us
Our website at commaspaces.com.au
Cookies and tracking technologies (see below)
Publicly available sources

How We Use Your Personal Information

We collect your personal information for the primary purpose of providing our services to you, communicating with you, and marketing our offerings. We may also use your personal information for secondary purposes closely related to the primary purpose, in circumstances where you would reasonably expect such use or disclosure.

We use your personal information to:

Process and manage your bookings, memberships, and purchases
Deliver treatments and tailor services to your health and wellness needs
Send booking confirmations, reminders, and service-related communications
Respond to enquiries and provide customer support
Send marketing communications, promotional offers, and updates (where you have opted in or where permitted by law)
Improve our website, services, and customer experience
Comply with our legal and regulatory obligations

You may unsubscribe from our marketing communications at any time by clicking the unsubscribe link in any email, or by contacting us directly.

Sensitive Information

Some of the information we collect — such as health and medical information provided in treatment intake forms — is classified as sensitive information under the Privacy Act. We only collect sensitive information where it is reasonably necessary to deliver safe and appropriate treatments to you. We will not use or disclose your sensitive information for any other purpose without your consent, unless required or permitted by law.

Disclosure of Personal Information

We may disclose your personal information to third parties in the following circumstances:

To our booking and business management platform, Fresha, for the purpose of processing and managing your bookings and appointments
To Shopify, which hosts our website and processes online purchases
To analytics and advertising platforms including Google Analytics, Google Ads, and Meta (Facebook/Instagram) Pixel, for the purposes of website analytics and delivering relevant advertising
To our employees, contractors, and service providers who assist in operating our business, on the condition that they handle your information in accordance with this policy
Where required or authorised by law

We do not sell, rent, or trade your personal information to third parties.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your browsing experience, analyse site traffic, and deliver relevant advertising.

We use the following tracking tools:

Google Analytics — to understand how visitors use our website
Google Ads — to measure the effectiveness of our advertising campaigns
Meta Pixel — to measure ad performance and deliver relevant ads on Facebook and Instagram
Shopify — which may set its own cookies for cart, session, and checkout functionality

You can control cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website. For more information on how to manage cookies, visit allaboutcookies.org.

Security of Your Personal Information

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These steps include secure data storage, restricted access controls, and the use of reputable third-party platforms with their own security measures in place.

Where we no longer require your personal information for any purpose for which it was collected, we will take reasonable steps to destroy or de-identify it.

Access and Correction

Under the Australian Privacy Principles, you have the right to access the personal information we hold about you and to request corrections where it is inaccurate, out of date, or incomplete. To make a request, please contact us using the details below.

We will respond to your request within a reasonable timeframe. In some circumstances, we may decline a request for access or correction — if this occurs, we will provide written reasons.

Rights for EEA and UK Individuals (GDPR)

If you are located in the European Economic Area or the United Kingdom, you may have additional rights under the GDPR, including:

The right to access your personal data
The right to rectification of inaccurate or incomplete data
The right to erasure ("right to be forgotten")
The right to restriction of processing
The right to data portability
The right to object to processing based on legitimate interests or for direct marketing purposes
The right to withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us using the details below. We will respond within 30 days.

Complaints

If you believe we have breached the Australian Privacy Principles or your rights under the GDPR, we encourage you to contact us in the first instance so we can work to resolve your concern.

If you are not satisfied with our response, you may lodge a complaint with:

Office of the Australian Information Commissioner (OAIC) — oaic.gov.au | 1300 363 992
Office of the Information Commissioner Queensland (for QLD-based matters) — oic.qld.gov.au

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The current version will always be available on our website. We encourage you to review this policy periodically.

Contact Us

For all privacy-related enquiries, requests, or complaints, please contact us at either of our locations:

Comma Spaces Melbourne
10–12 Hill Street, Cremorne VIC 3121
Phone: 03 9428 1097
Email: melbourne@commaspaces.com

Comma Spaces Byron Bay
7/18 Banksia Drive, Byron Bay NSW 2481
Phone: 0400 841 485
Email: byron@commaspaces.com