Privacy Policy

Depending on how you get in touch, I may collect:

• Enquiry and booking details — your name, email address, phone number, the date and location of your event, how many people need makeup, and anything else you tell me about the day.
• Health information — skin conditions, allergies, sensitivities and past reactions to products. This has its own section below.
• Guide downloads — your first name and email address when you ask for one of my free guides.
• Agreements and payments — your signed booking agreement, invoices and payment records. Card details go straight to my payment provider; I never see or store your full card number.
• Photographs — images of the makeup I have done, which may include you. This also has its own section below.
• Website statistics — pages visited, approximate location, browser and device, and the IP address your visit came from.
• Messages — emails, text messages and social media messages between us.

You do not have to give me any of this, but without the basics I cannot quote for your day or hold a date.

Before a trial or a booking I ask whether you have any skin conditions, allergies or sensitivities, and whether you have reacted badly to products before. I ask so that I can choose products that are safe for you and so the makeup behaves the way you want it to on the day.

Health information is treated as sensitive information under the Privacy Act. I only collect it with your consent, I only use it to plan and carry out your makeup, and I do not share it with anyone else unless you ask me to, for example when I pass a note to another artist working with me on the morning.

I am not a doctor or a skin therapist. If something on your skin needs treatment, please see someone qualified. Nothing I say about products is medical advice.

I use your information to:

• answer your enquiry, quote for your day and hold your date
• plan your trial, your timeline and the morning itself
• choose products that are safe and suitable for you
• send agreements, invoices and receipts
• send the guides you have asked for
• keep business records I am required by law to keep
• understand how this website is used so I can improve it

I do not sell, rent or trade your information. Ever.

A small number of services help me run the business, and your information passes through them:

• Dubsado — the booking forms, agreements, invoices and client records. The form on my booking page is theirs.
• Stripe — payments made against my invoices.
• Automattic, through WordPress.com — hosting for this website, along with its visitor statistics and security.
• My email provider — the emails we exchange.

Beyond those, I may share what is needed with a hairstylist or another makeup artist when you have asked me to arrange one, with my accountant or other professional advisers, and with anyone else the law requires me to tell.

Dubsado, Stripe and Automattic are based in the United States, and your information is stored on their systems there and in other countries where they operate. I choose established providers who publish their own privacy and security terms, but once information is with them it is handled under their policies and the laws that apply to them.

By enquiring or booking with me, you consent to your information being handled this way.

I photograph the makeup I do, at trials and on the day, and photographers I work alongside often send me images afterwards. I may show these on this website, on Instagram, or in printed material.

I ask before I publish a photograph of you, and you can say no without it affecting your booking in any way. If a photograph of you is already published and you would like it taken down, email me and I will remove it from anything I control. Images already shared or saved by other people are outside what I can reach.

Debutante balls, school formals and some special occasions involve people under 18. In those cases I take the booking from a parent or guardian, and it is the parent or guardian who gives me the details, the health information and permission for any photographs.

If you download a guide or make an enquiry, I may occasionally email you about my services or about something I think is genuinely useful for your day. Every one of those emails has an unsubscribe link, and unsubscribing takes you off the list straight away. It has no effect on a booking you already have with me.

Emails about a booking you have made, such as your timeline or an invoice, are part of the service rather than marketing, so they continue either way.

This website stores a small amount of information in your browser so that pages work properly, and I use two tools to see, in general terms, how the site is being used.

Google Analytics records things like which pages you visited, roughly where in the world you are, what kind of device and browser you used, and how you arrived — for example from a search or from Instagram. It does not tell me who you are, and I never try to work that out. This information is collected by Google and held on Google’s servers, which are outside Australia, mainly in the United States, so by using this site you consent to it being disclosed overseas and handled under Google’s own privacy terms.

Jetpack Stats, which is part of the software this site runs on, keeps a simple count of page views.

The booking form sets its own cookies, because it comes from Dubsado.

You can block or delete cookies in your browser settings, and you can opt out of Google Analytics entirely by installing Google’s own browser add-on. If you block cookies, parts of the site, including the booking form, may stop working properly.

Your information sits in password-protected accounts with the providers listed above, and access is limited to me and to anyone helping me who genuinely needs it. Paper notes, when I take them, are kept out of sight and destroyed once they are no longer needed.

No website or email system is completely secure. I take reasonable steps to protect your information, but I cannot promise it is impossible for something to go wrong. If a breach happens that is likely to cause you serious harm, I will tell you and the Office of the Australian Information Commissioner, as the law requires.

I keep your information for as long as I need it to deliver your booking and to meet my legal obligations, which generally means about five years after your booking, and then I securely delete it.

Guide download details are kept until you unsubscribe or ask me to remove them.

You can ask me for a copy of the personal information I hold about you, and you can ask me to correct anything that is wrong. Email me and I will respond within 30 days. There is no charge, and I may need to check who you are before I send anything.

You can also ask me to delete your information. I will do that unless I am required to keep it, for example for tax records.

If you think I have mishandled your information, please email me first and tell me what has happened. I will look into it and come back to you within 30 days.

If you are not satisfied with my answer, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

If what I collect or who I share it with changes, I will update this page and change the date at the top. The version published here is the one that applies.

For anything in this policy, including a copy of your information or a complaint, email admin@annmariekriston.com.au.

Ann-Marie Kriston Dowd
ABN 31 807 306 202
Melbourne, Victoria