Privacy Policy

About This Policy

Wonderlab ("we", "us", "our") is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy covers all personal information collected through our website, consultation forms, skin and body treatment intake forms, skin analyser tools, psychosocial assessment forms, corporate programs, CPD registrations, and any other interactions with Wonderlab.

By engaging with our services or submitting any form, you acknowledge that you have read and consent to the practices described in this policy.

Information We Collect

We collect personal information only when it is reasonably necessary to deliver our services. The types of information we may collect include:

General Contact Information

• Full name, date of birth, email address, phone number, and postal address
• Organisation name, job title, and industry (for corporate and B2B clients)

Skin & Body Consultation Information

• Skin type, skin concerns, and treatment history
• Body treatment goals, health background relevant to body services, and lifestyle factors
• Current skincare or body care routines and product usage
• Skin sensitivity information and any known allergies or adverse reactions
• Skin analyser results — including images, measurements, and skin condition data captured through our digital skin analysis tools

Health Information (Sensitive)

• Relevant medical history, current medications, or health conditions disclosed on consultation forms are collected solely to ensure treatment safety and suitability
• Pregnancy status, skin conditions, or contraindications relevant to proposed treatments
• Pre- and post-treatment photographs taken for documentation and progress monitoring purposes, with your explicit consent

Psychosocial & Workplace Assessment Information

• Organisational details and responses submitted via workplace assessment tools such as our Psychosocial Risk Readiness Checklist
• Self-reported data on workplace conditions, leadership practices, and psychosocial risk indicators

Payment & Transaction Information

• Gift card purchases, treatment package transactions, and program enrolments (processed via secure third-party payment providers — Wonderlab does not store full card details)

Technical & Website Data

• IP address, browser type, device information, and pages visited — collected automatically to improve website performance

How We Collect Information

We collect information through:

• Skin consultation intake forms (completed in-clinic or digitally prior to your appointment)
• Body consultation forms and pre-treatment questionnaires
• Massage consultation forms and pre-treatment questionnaires
• Skin analyser tools and assessments conducted during your appointment
• Online enquiry, booking, and contact forms
• Psychosocial risk checklist and workplace assessment form submissions
• CPD program, workshop, or retreat registrations
• Gift card and treatment package purchases
• Email, phone, or in-person communications with our team
• Media Consent Form (completed prior to any Wonderlab events, workshops and retreats)

How We Use Your Information

We use your personal information to:

• Assess your suitability for skin and body treatments and deliver safe, personalised services
• Maintain accurate treatment records and monitor progress over time
• Contact you regarding appointments, follow-up care, or relevant product and service updates
• Process payments and manage bookings
• Deliver corporate wellness, psychosocial compliance, or CPD programs you have enrolled in
• Generate workplace risk profiles from assessment form submissions and provide tailored recommendations
• Send you relevant communications and offers where you have given consent (you may unsubscribe at any time)
• Comply with our legal and regulatory obligations

We will never sell your personal information to any third party.

Sensitive Information

Skin and body consultation data including health history, skin condition records, treatment photographs, skin analyser results, and any information about physical conditions is classified as sensitive information under the Privacy Act 1988. We will only collect this information:

• With your explicit consent
• When it is directly necessary to provide your requested treatment or service
• In accordance with professional standards for skin and wellness practitioners

You may withdraw your consent at any time by contacting us, though this may limit our ability to deliver certain services.

Disclosure to Third Parties

We do not sell your personal information. We may share your information only in the following circumstances and only to the extent necessary to deliver the service you have requested.

Service Delivery Practitioners & Clinical Team Members

To provide you with safe and effective skin treatments, body treatments, wellness programs, psychosocial compliance programs, or CPD services, your personal information and consultation records may be accessed by or shared with authorised practitioners engaged by or contracted to Wonderlab, including:

• Skin and beauty therapists — who access your skin consultation, skin analyser results, and treatment history to perform and personalise your treatment
• Body treatment therapists — who access your body consultation form and relevant health background to deliver your session safely
• Wellness coaches and program facilitators — who may access relevant background information to tailor your coaching or program experience
• Physiotherapists and allied health practitioners — where engaged as part of a body wellness or recovery program, who access only the information relevant to their scope of service
• Clinical psychologists, counsellors, or mental health practitioners — where part of a psychosocial safety or wellbeing program, who are bound by their own professional codes of ethics and confidentiality obligations under the Privacy Act 1988 and their respective regulatory bodies (e.g., AHPRA)
• Facilitators, professors, and subject matter experts — engaged to deliver CPD programs, workshops, or educational retreats, who may access your enrolment details and program participation information
• Corporate wellness or workplace safety consultants — where engaged as part of a psychosocial risk assessment or compliance program, who access only the organisational data relevant to that engagement

All practitioners and clinical team members engaged by Wonderlab are required to:

• Maintain strict confidentiality in accordance with their professional obligations and applicable law
• Access your personal information only to the extent required for your direct care or program delivery
• Comply with this Privacy Policy as a condition of their engagement with Wonderlab
• Not use your information for any purpose beyond their role in delivering your Wonderlab service

Where your care involves more than one practitioner type (e.g., a skin therapist and a wellness coach working together on a program), relevant information may be shared between those practitioners within Wonderlab's internal care team to ensure coordinated, consistent service — always with your knowledge and, where sensitive health information is involved, with your explicit consent.

Technology & Administrative Service Providers

We also work with trusted third-party technology and administrative partners who support the operation of our business, including:

• Booking and appointment management software
• Secure payment processing platforms
• Email and communication platforms
• Client relationship management (CRM) systems
• Website hosting and analytics tools

These providers are engaged under contractual confidentiality obligations and are only permitted to use your data to perform services on our behalf.

Professional & Legal Advisors

We may share information with legal, accounting, or insurance professionals on a strictly need-to-know basis, bound by professional privilege and confidentiality obligations.

Regulatory & Legal Requirements

We may disclose your information to regulatory or law enforcement bodies where required or authorised by law — for example, in response to a court order, mandatory reporting obligation, or OAIC investigation.

We will never disclose your personal information to overseas third parties without your explicit consent, unless otherwise permitted under the Australian Privacy Principles.

Data Security & Retention

We take reasonable technical and organisational steps to protect your personal information from misuse, loss, unauthorised access, modification, or disclosure. Data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by law, after which it is securely deleted or de-identified.

Your Rights

Under the Privacy Act 1988 (Cth), you have the right to:

• Access the personal information we hold about you
• Request corrections to inaccurate or outdated records
• Withdraw consent for data collection or marketing communications
• Request deletion of your data, subject to legal retention requirements
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

To exercise these rights, contact us at: concierge@wonderlab.com.au

Cookies & Website Tracking

Our website may use cookies and similar tracking technologies to improve your experience and analyse website usage. By continuing to use our website, you consent to this use. You may adjust cookie settings through your browser at any time.

Google Analytics and Google Ads:

We use Google Analytics and Google Ads to improve our website experience and deliver relevant advertising. By using this site, you acknowledge our use of these tools for performance and advertising purposes.

Policy Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically.