Privacy Policy

1. About this policy

This Privacy Policy explains how O'Naarie Beauté ("we", "us" or "our") handles personal information collected through onaarie.com and related communications. We are based in New South Wales, Australia.

We intend to handle personal information consistently with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us. We also comply with applicable requirements of the Spam Act 2003 (Cth) for commercial electronic messages.

2. Personal information we collect

At this pre-launch stage, we may collect:

• your email address when you reserve early access;
• your marketing consent, the date and time it was given, and the signup form used;
• a random unsubscribe token and your current subscription status;
• technical information such as your IP address and basic server request information;
• if you accept analytics, information about website visits and interactions, such as pages viewed, approximate location, device and browser information, referral source and interaction events;
• communications you send to us, including privacy or unsubscribe requests; and
• information you voluntarily provide through future forms or customer enquiries.

Please do not send us sensitive health information through the early-access form.

3. How we collect information

We collect information directly from you when you submit a form or contact us. Our hosting, email and security systems may also automatically record limited technical information needed to deliver and protect the website.

The site uses externally hosted fonts. Those providers may receive technical information, such as your IP address, when your browser requests their resources. If you accept analytics cookies, Google Analytics also collects information through cookies and similar technologies when you use the website.

4. Why we collect and use information

We may use personal information to:

• record and manage your early-access request and send a signup confirmation;
• send product previews, launch timing, availability and related brand updates where you consent;
• respond to questions, access, correction, deletion, complaint and unsubscribe requests;
• operate, secure, troubleshoot and improve the website;
• understand website traffic, engagement and the effectiveness of launch content;
• keep records of marketing consent and compliance; and
• meet legal obligations or establish, exercise or defend legal rights.

5. Cookies and Google Analytics

We use Google Analytics 4, provided by Google, only where you accept analytics cookies. Google Analytics helps us understand how visitors find and use the website, including page views, general engagement and successful early-access submissions. We do not send your email address or form contents to Google Analytics.

Analytics cookies may recognise a browser or device over time. Google Analytics cookies can remain on a device for up to two years unless you delete them or your browser removes them earlier. Information generated through Google Analytics may be processed by Google in Australia, the United States or other countries where Google operates.

Analytics is disabled unless you select “Accept All”. You may select “Reject All” without affecting the website's core functions. We store your analytics choice in your browser's local storage for up to six months so the website can remember it. We will ask again when that choice expires or if our cookie practices materially change. You may change your choice sooner using Review cookie choices . You can also manage or delete cookies through your browser. Learn more in Google's Privacy Policy .

6. Marketing consent and unsubscribing

We only send marketing emails where we have consent or another lawful basis. You can withdraw your consent at any time by using the unsubscribe facility in an email or contacting us at subscriptions@onaarie.com.

Our automated unsubscribe link updates the subscription record immediately. We will action requests made by other methods as soon as reasonably practicable and within the period required by Australian law. We may keep a minimal suppression record, including the email address and unsubscribe date, so that we do not send marketing to an address that has unsubscribed.

7. Disclosure and service providers

We may disclose personal information to people who work with us and service providers that support website hosting, email delivery, data storage, security, professional advice and business administration. They may only use information as needed to provide those services or as required by law.

If you accept analytics, limited website usage information is disclosed to Google as our analytics provider. Google may process that information according to its terms and privacy documentation.

We do not sell personal information. We may also disclose information where required by law, to protect rights or safety, or in connection with a genuine business restructure or sale subject to appropriate safeguards.

8. Overseas processing

Some hosting, email, font, analytics or technology providers may store or process information outside Australia, including in the United States, the European Economic Area and other locations where those providers operate. Provider locations can change.

Where the Australian Privacy Principles apply, we take reasonable steps appropriate to the circumstances before disclosing personal information overseas.

9. Security and retention

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. No internet transmission or storage method is completely secure.

We retain information only for as long as reasonably needed for the purposes described in this policy, to maintain consent or suppression records, and to satisfy legal, accounting or dispute-resolution requirements. When information is no longer required, we take reasonable steps to delete or de-identify it.

10. Access and correction

You may ask to access personal information we hold about you or request a correction. Contact us using the details below. We may need to verify your identity before acting, and limited legal exceptions may apply.

11. Young people

The brand may create products for teen routines, but the early-access list is not intended to collect information from children who cannot provide informed consent. If you are under 16, please ask a parent or guardian before submitting your email address. A parent or guardian may contact us to request deletion of a young person's information.

12. Privacy complaints

If you believe we have mishandled your personal information, contact us with details of your concern. We will acknowledge and investigate the complaint and aim to respond within a reasonable period.

If the Privacy Act applies to us and you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner .

13. Changes to this policy

We may update this policy as our website, products, service providers or legal obligations change. The current version and its effective date will be published here.