We respect your privacy

Last updated: August 2026

At Le Spa Orla, we respect your privacy and are committed to handling your personal information with care, transparency and discretion.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, when we may share it with others, and the choices available to you.

This policy applies to information collected through the Le Spa Orla website, when you make or manage an appointment, contact us, purchase or redeem a gift voucher, complete a consultation form, or otherwise interact with us.

1. About Le Spa Orla

Le Spa Orla is a boutique wellness spa providing massage, facial, body and other wellness experiences.

For the purposes of this Privacy Policy, “Le Spa Orla”, “we”, “us” or “our” refers to the business operating Le Spa Orla.

“You” or “your” refers to visitors to our website, guests, customers and anyone who communicates with us or uses our services.

2. Information We Collect

Depending on how you interact with us, we may collect information such as:

your name and contact details, including email address and phone number;
appointment and booking information;
payment and transaction information;
gift voucher or prepaid service information;
information you provide when contacting us by phone, email, online forms or other communication channels;
information provided through consultation or treatment forms;
preferences or information relevant to providing your treatment;
information about your use of our website, including browser, device, IP address, pages visited and interactions with the website; and
marketing preferences and your consent to receive promotional communications.

We only collect information that is reasonably necessary for our business functions and to provide our services.

3. Health & Treatment Information

Some of our treatments require us to collect information that may relate to your health, such as allergies, injuries, pregnancy, medical conditions or other circumstances that may affect your treatment.

We collect this information to help us assess your suitability for a treatment, adapt your experience where appropriate, provide our services safely and appropriately, and maintain relevant treatment records.

We ask that you provide accurate and relevant information and let us know if anything changes before your appointment.

Health information is sensitive information under Australian privacy law, so we take particular care with how it is handled.

We will not use your health information for direct marketing without your specific consent.

4. How We Use Your Information

We may use your personal information to:

manage and confirm your appointments;
provide and personalise your treatments and spa experiences;
communicate with you about your bookings, appointments and enquiries;
process payments, gift vouchers and other transactions;
understand your preferences and provide appropriate treatment recommendations;
maintain consultation and treatment records where necessary;
respond to questions, requests, feedback or complaints;
operate, maintain and improve our website and services;
send you news, offers and other marketing communications where you have consented to receive them or where permitted by law; and
comply with our legal and regulatory obligations and protect the safety, security and integrity of our business, guests and team.

We will only use health or other sensitive information for purposes permitted by law and, where required, with your consent. We will not use information you provide about your health or treatment needs for marketing purposes unless you have specifically consented to this.

How we collect your information

We generally collect personal information directly from you, including when you:

make or manage an appointment;
complete a consultation or treatment form;
purchase or redeem a gift voucher;
contact us by phone, email or through our website;
subscribe to our email or SMS communications;
provide feedback or otherwise communicate with us; or
browse or interact with our website.

We may also receive or process information through third-party service providers that help us operate our business, including Acuity Scheduling for appointment bookings and Square for gift vouchers and payment-related services. These providers may collect and process personal information in accordance with their own privacy policies and applicable laws.

5. Who We Share Your Information With

We may share personal information with trusted service providers where this is reasonably necessary to operate Le Spa Orla, provide our services, process transactions or manage our website and communications.
These service providers currently include:
Squarespace — our website hosting and website management platform;
Acuity Scheduling — our appointment booking and scheduling platform; and
Square — our gift voucher and payment-related service provider.
We may also share personal information where necessary with professional advisers, technology providers, payment providers or other service providers who assist us in operating our business, or where required or authorised by law.
We only provide third parties with information that is reasonably necessary for them to perform the services they provide to us.

Overseas service providers

Some of the service providers we use may store or process personal information outside Australia. As a result, your personal information may be disclosed to overseas recipients in countries where those providers or their service providers operate.
We take reasonable steps to ensure that personal information disclosed to overseas recipients is handled in accordance with applicable privacy requirements. Where practicable, we will identify the relevant countries in this Privacy Policy or through the privacy information provided by the relevant service provider.

6. How We Store & Protect Your Information

We take reasonable steps to protect the personal information we hold from misuse, interference, loss and unauthorised access, modification or disclosure.
Personal information may be stored electronically through the systems and service providers we use to operate Le Spa Orla, including our website, booking and payment platforms. Access to personal information is limited to people who need it to perform their role or provide services to you.
We also take reasonable steps to ensure that personal information is kept accurate and up to date and that appropriate safeguards are in place when information is accessed, stored or transferred.
No method of electronic storage or transmission is completely secure. While we take reasonable precautions to protect your information, we cannot guarantee the absolute security of information transmitted to or stored by us or our service providers.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or where we are required or permitted to retain it by law. When personal information is no longer required, we take reasonable steps to securely destroy or de-identify it.

7. Cookies, Analytics & Tracking Technologies

Our website uses cookies and similar technologies to help it function properly, understand how visitors use our website and improve your online experience.
We use Squarespace to host and operate our website. Squarespace uses cookies and similar technologies that are necessary for website functionality and may support analytics and performance features.
We also use Google Analytics to understand how visitors interact with our website. Google Analytics may collect information such as browser and device information, approximate location, pages visited, interactions with the website and information about how visitors use our site. Google Analytics uses cookies and similar identifiers to distinguish users and sessions.
We use the Meta Pixel to understand how visitors interact with our website, measure the effectiveness of our advertising and help us deliver and measure relevant advertising on Meta platforms such as Facebook and Instagram. The Meta Pixel may collect information such as pages visited, actions taken on the website, device and browser information, IP address and other website activity data.
We take reasonable steps to configure these technologies so that they collect only information that is reasonably necessary for their intended purposes. We do not intentionally use tracking technologies to collect or disclose information about your health, treatment history or other sensitive information to advertising platforms.
Where required, non-essential analytics and advertising technologies will be used in accordance with the choices available through our website's cookie settings or consent mechanism.
You can also manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of our website.

8. Email & SMS Marketing

We may occasionally send you emails or SMS messages about Le Spa Orla, including new treatments, special offers, events, news and other updates we think may be of interest to you.
We will only send commercial email or SMS marketing where we have the required consent or are otherwise permitted to do so under applicable Australian law. Commercial electronic messages must identify Le Spa Orla as the sender and provide a simple way to unsubscribe.
You can withdraw your consent to receive marketing communications at any time. For emails, you can use the unsubscribe link provided in the email. For SMS, you can follow the unsubscribe instructions provided in the message or contact us directly.
Opting out of marketing communications will not affect your ability to book appointments or receive transactional communications relating to an existing booking, purchase or account.
We do not use health or treatment information collected through consultation forms or during your spa experience for direct marketing purposes unless you have specifically consented to this.

9. Your Privacy Choices & Access to Your Information

You have the right to ask us what personal information we hold about you and to request that we correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.
If you would like to access or correct your personal information, or have any questions about how we handle your information, please contact us using the details below.
We may need to verify your identity before providing access to personal information or making changes to your information. We will respond to requests within a reasonable period and will not charge you for making a request to access or correct your personal information.
In some circumstances, we may be permitted or required by law to refuse access to certain information. If we refuse a request, we will explain the reason where we are able to do so and let you know how you can raise a concern or complaint.
Contact us
If you have any questions about how we handle your personal information, please contact us using the details in the Privacy Complaints section below.

10. Privacy Complaints

We take privacy concerns seriously and welcome the opportunity to resolve them.
If you believe we have mishandled your personal information or have a concern about our privacy practices, please contact us using the details below and provide as much information as possible about your concern.
We will acknowledge and investigate your complaint and aim to respond within a reasonable timeframe. As a general guide, privacy complaints should normally be addressed within 30 days.
Privacy enquiries
Le Spa Orla
Email:contact@theorlaseries.com
If you have a concern about how we have handled your personal information, we encourage you to contact us first so we can understand and address your concern.
If you are not satisfied with our response, or we have not responded within a reasonable period, you may contact the Office of the Australian Information Commissioner (OAIC) to make a privacy complaint. The OAIC generally expects you to contact the organisation first and give it an opportunity to respond.
Office of the Australian Information Commissioner (OAIC)
Website: oaic.gov.au

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, business practices, technology or privacy obligations.
When we make changes, we will update the “Last updated” date at the beginning of this Privacy Policy. We encourage you to review this page periodically to stay informed about how we manage your personal information.
Last updated: August 2026