Privacy Policy

Who we are

This site is operated by Eonia Omorfia, a business name of the Kritsotakis Family Trust (ABN 45 984 876 899), with a corporate trustee Kritsotakis Investments Pty Ltd (ACN 153 844 136). In this policy, "we", "us", and "our" refer to Eonia Omorfia.

We are bound by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For NSW health information we also act consistently with the NSW Health Records and Information Privacy Act 2002 (HRIP Act).

What information we collect

We collect personal information only where it is reasonably necessary for our services. This may include:

• Identity and contact information — name, email address, phone number, and the address at which a mobile treatment is requested.
• Health information (where you become a client) — relevant medical history, allergies, current medications, contraindication disclosures, skin assessments, and treatment photographs you consent to.
• Booking and payment information — collected and processed by Fresha (our booking and payments platform) under Fresha's own privacy terms. We do not store full card numbers.
• Site usage information — basic analytics about how visitors use this site (pages visited, referring source). We do not currently set tracking cookies that identify individuals.

How we collect it

We collect personal information directly from you — through the contact form on this site, by phone or email, at consultation, and during treatment. We do not buy or scrape personal information from third parties.

Why we collect it

• To respond to your enquiry, book and deliver treatment, and provide aftercare.
• To clinically assess suitability and rule out contraindications before treatment.
• To maintain client records as required for clinical and tax compliance.
• To send transactional messages relating to your booking or treatment.
• To improve our services where the information is de-identified.

We will not use your personal information for direct marketing without your consent. You can opt out of any communication at any time by replying to the message or emailing info@eonia.au.

Who we share it with

We share personal information only with parties needed to deliver our services, on the same privacy obligations:

• Fresha — bookings, payments, vouchers, client records (see Fresha Privacy Policy).
• Cloudflare — site hosting and the contact-form Worker. Cloudflare may process data outside Australia (United States and globally distributed edge). Our use is configured to encrypt traffic end-to-end and apply standard contractual safeguards.
• MailChannels — email delivery for contact-form messages from noreply-style addresses on eonia.au.
• Google Workspace — our business email (info@eonia.au).
• Brevo — email marketing where you have opted in.
• Xero — accounting records that may include client name and treatment line items for invoicing.
• Health professionals — where you ask us to liaise with your GP, dermatologist, or another clinician.
• Government or regulators — where required by law (TGA, AHPRA, NSW Health, Australian Taxation Office, ACCC, etc.).

We do not sell personal information.

Overseas disclosure (APP 8)

Some of the providers above (notably Cloudflare and MailChannels) operate infrastructure outside Australia. By using this site you acknowledge that personal information you submit may be processed in those jurisdictions, and that we take reasonable steps to ensure your information is handled consistently with the APPs.

How we hold and secure it (APP 11)

Personal and health information is stored on encrypted services with access restricted to the practitioner and authorised staff. Paper records (consent forms, intake forms) are scanned, encrypted, and stored on Dropbox business-tier with multi-factor authentication enabled. We retain client clinical records for at least seven (7) years from the date of last treatment, in line with the Australian healthcare standard.

Cookies and analytics

This site does not currently use tracking cookies that identify individuals. We may implement privacy-respecting analytics (such as Plausible or a similar non-cookie tool) in the future; if we do, we will update this policy first.

Your rights — access and correction (APP 12 & 13)

You can request access to the personal information we hold about you, or ask us to correct it. Email info@eonia.au with the subject line "Privacy request" and we will respond within 30 days.

Complaints

If you believe we have mishandled your personal information, please contact us first by emailing info@eonia.au. If your concern is not resolved, you can lodge a complaint with the Office of the Australian Information Commissioner: oaic.gov.au.

Changes to this policy

We may update this policy from time to time. The "Effective" date at the top of this page shows the version currently in force.

Contact

Eonia Omorfia — Sydney, NSW, Australia
ABN 45 984 876 899
Email: info@eonia.au
Phone: 0414 885 366