FYLLR Platform
Your privacy mattersFYLLR is committed to handling your personal information responsibly and in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
FYLLR is a trading name operated by Cara Latham (ABN: 46 160 848 794), an individual sole trader based in Victoria, Australia. FYLLR operates the FYLLR marketplace platform, connecting Clients seeking last-minute beauty and wellness appointments with independent Partners in Melbourne, Victoria.
We are the data controller for personal information collected through the Platform. In this Privacy Policy, "FYLLR," "we," "us," and "our" refer to Cara Latham trading as FYLLR. "You" refers to any User of the Platform, whether a Client or a Partner.
We collect information when you register, use, or interact with the Platform.
We may receive information about you from third-party services integrated with the Platform, including Stripe (payment processing), Klaviyo (email marketing), ClickSend (SMS communications), and analytics providers. This information is handled in accordance with this policy.
We do not intentionally collect sensitive information (such as health information, race, religion, or biometric data). If a Client voluntarily provides health information to a Partner in the context of booking a service, that communication is between the Client and the Partner and is not routinely collected or stored by FYLLR.
We use personal information for the following purposes:
We process personal information where it is necessary to perform our contract with you (operating the Platform), where we have a legitimate interest in doing so (fraud prevention, platform improvement), where we are required by law, or where you have given your consent (marketing).
FYLLR does not sell your personal information. We share personal information only in the following circumstances:
When a Client makes a Booking with a Partner, basic booking information (your name and booking details) is shared with the relevant Partner to enable the appointment. Partners should handle that information in accordance with applicable privacy laws.
We engage trusted third-party service providers who process data on our behalf, including:
These providers are bound by confidentiality obligations and may only use your information for the purposes we specify.
If FYLLR is involved in a merger, acquisition, sale of assets, or insolvency proceeding, personal information may be transferred as part of that transaction. We will take reasonable steps to notify you if this occurs.
We may disclose personal information if required to do so by law, court order, or government authority, or where we reasonably believe disclosure is necessary to prevent a serious and imminent threat to a person's life, health, or safety.
Partner subscription payments are processed by Stripe, Inc. When you provide payment details, those details are transmitted directly to and stored by Stripe. FYLLR does not store or access full credit card numbers or bank account details.
Stripe's privacy practices are governed by Stripe's own Privacy Policy, available at stripe.com/au/privacy. By using FYLLR's billing features, you acknowledge and agree to Stripe's privacy practices.
FYLLR receives from Stripe limited transaction data, including billing status, subscription status, last-four card digits, and billing email, which we use for account management and customer support.
Clients may opt in to receive deals and availability updates from FYLLR.
Clients may separately opt in to receive offers and updates from the studio they book with. FYLLR will only share client contact details with a partner where explicit separate consent has been given at the time of booking.
Clients may withdraw either consent at any time. You may unsubscribe from marketing communications by using the relevant unsubscribe or STOP option, or by contacting us at info@fyllr.app. Transactional and account-related messages are not affected by marketing opt-out preferences.
FYLLR uses Klaviyo to manage marketing communications. Klaviyo's privacy policy is available at klaviyo.com/legal/privacy-notice.
The Platform uses cookies and similar technologies (local storage, session storage, tracking pixels) to support Platform functionality and understand how the Platform is used.
You can control cookie preferences through your browser settings. Disabling non-essential cookies will not affect core Platform functionality, but may limit analytics and personalisation features. Note that disabling essential cookies may prevent you from using the Platform.
We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including to comply with legal, accounting, and reporting obligations.
FYLLR takes reasonable steps to protect personal information from misuse, loss, unauthorised access, modification, or disclosure. Our security measures include encrypted data transmission (HTTPS/TLS), access controls limiting data access to authorised personnel, secure third-party infrastructure providers, and regular review of our security practices.
Despite our efforts, no method of data transmission or storage is completely secure. We cannot guarantee the absolute security of your information. In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the following rights:
You may request access to the personal information we hold about you. We will respond to access requests within 30 days. In some circumstances we may charge a reasonable fee for providing access.
If you believe personal information we hold about you is incorrect, out of date, incomplete, or misleading, you may ask us to correct it. We will take reasonable steps to correct information where we agree it is inaccurate.
If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us (see Section 14). If you are not satisfied with our response, you may lodge a complaint with the OAIC at oaic.gov.au or by calling 1300 363 992.
To make an access, correction, or complaint request, contact us at info@fyllr.app. We may need to verify your identity before processing your request.
Some of our third-party service providers (including Stripe, Klaviyo, and ClickSend) are based outside Australia, primarily in the United States. When we disclose personal information to these providers, we take reasonable steps to ensure they protect your information in a manner consistent with the Australian Privacy Principles.
By using the Platform, you consent to your personal information being transferred to and processed in countries outside Australia, including the United States.
FYLLR is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 18, please contact us at info@fyllr.app.
We may update this Privacy Policy from time to time to reflect changes to our practices, legal requirements, or Platform features. We will notify you of material changes by email or by posting a notice on the Platform before the changes take effect. The date at the top of this policy indicates when it was last updated. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.
For privacy enquiries, access or correction requests, or to lodge a complaint, please contact:
Privacy Officer — FYLLR
Cara Latham — Sole Trader
Melbourne, Victoria, Australia
Email: info@fyllr.app
ABN: 46 160 848 794
We will respond to privacy enquiries within 30 days. If we are unable to resolve your complaint, you may refer it to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.