Privacy Policy

Information we collect

• Enquiries: when you use our contact form or email us, we receive your name, email address, phone number (if given) and your message, such as your event date, location and the services you are interested in.
• Bookings: when you book with us, we record the appointment details we need to deliver the service, such as date, time, location, services, artists, prices and notes.
• Website usage: we use Vercel Analytics to count page views. It does not use cookies and does not identify individual visitors.
• Staff accounts: team members who sign in to our private studio portal use a login cookie that is needed for the portal to work. The public website does not set advertising or tracking cookies.

How we use your information

• To reply to your enquiry and send you quotes, availability and booking confirmations.
• To schedule your appointment and assign artists.
• To understand our enquiry volume and response times so we can improve our service.
• To meet our legal, tax and accounting obligations.

We do not sell your personal information, and we do not use it for advertising.

Google user data (Gmail)

Our internal studio tools connect to the studio's own Gmail mailbox (contact@yayamakeup.studio) to read email (the gmail.readonly scope) and to send the replies our staff write and approve (the gmail.send scope). We cannot change or delete email through this access. It is used only by the studio, for the studio's own mailbox.

We read enquiry threads in that mailbox to: classify each enquiry (for example booked, open or lost), measure how quickly we respond, estimate time spent per enquiry, and draft booking details from a client's email for our staff to review.

We store only what these features need. For our email analytics: message dates and direction, a one-way hashed identifier instead of email addresses, short excerpts and subject lines, enquiry classifications, and draft booking details. For the enquiries and replies tools, short-lived working records: the sender's email address and name, the subject and a short excerpt of emails waiting for a reply, the time the studio last replied to each email address, and send-request keys that are kept for 24 hours. We do not store full email bodies or the reply drafts. Client contact details for bookings are kept in the studio's booking records, which only authorised studio staff can access. Working data is stored in our Cloudflare database and is visible only to authorised studio staff.

To classify enquiries, draft booking details and draft email replies for staff to review, relevant email text (for a reply draft, the text of that email thread) is sent to AI service providers that process it on our behalf to return results. Each request is used once for that purpose, and reply drafts are not stored. We do not use Google user data to train general-purpose AI models, and we do not allow our providers to do so.

Yaya Makeup Studio's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to others except as needed to provide these features, to comply with law, or as part of a merger or sale of the business, and we never use it for advertising.

Access can be removed at any time in the Google Account's third-party access settings (myaccount.google.com/permissions). When access is removed or the data is no longer needed, we delete the stored email data.

Who we share information with

• Vercel (website hosting and analytics)
• Cloudflare (studio tools and database)
• Supabase (studio portal, bookings and staff accounts)
• Google Workspace (email)
• Cloudinary (portfolio images)
• AI service providers, including OpenAI (enquiry classification, booking drafts and email reply drafts)

We share personal information only with service providers that help us run the studio, and only as much as they need:

Overseas storage

Some of these providers store or process information outside Australia, including in the United States. We choose providers with strong security practices and use their services only for the purposes described in this policy.

Security and retention

We protect personal information with access controls, encrypted connections and limited staff access. We keep it only for as long as we need it to provide our services and meet our legal obligations, and then delete or de-identify it.

Your choices and rights

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it. You can also ask us not to contact you again. Email contact@yayamakeup.studio and we will respond within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it last changed.

Contact us

Yaya Makeup Studio, 20 Stirling Crescent, Surrey Hills VIC 3127 · contact@yayamakeup.studio · 0466 066 001