Design Your Skincare Pty Ltd, trading as Epilab ("Epilab," "we," "our," or "us") respects your privacy and is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains what personal information we collect, how we use and protect it, and your rights in relation to that information. It applies to all interactions with our website at www.epilab.com.au and any direct communications with Epilab.

1. What information we collect

We collect personal information you voluntarily provide when you:

Submit an enquiry through our contact form
Email, phone, or otherwise communicate with us
Engage us as a contract manufacturing client
Subscribe to any communications we may offer

The personal information we collect may include:

Your name and the company or brand you represent
Email address and phone number
Information about your product idea, target market, project stage, and any technical or commercial details you choose to share
Any other information you provide voluntarily in correspondence with us

We do not ask for or collect:

Sensitive personal information as defined by the Privacy Act (such as health information, racial or ethnic origin, religious beliefs, political opinions, or sexual orientation)
Payment card or bank account information through the website (any payment information for engaged projects is collected through secure offline channels)
Information about minors — our services are B2B and not directed at children

We may also automatically collect non-personal information through standard web technologies, including your IP address, browser type, device type, pages visited, and time spent on the site. This information is collected via standard server logs and, where used, analytics tools (see Section 5).

2. How we use your information

We use the personal information you provide to:

Respond to your enquiry and provide information about our services
Assess project fit and prepare proposals or quotes
Communicate with you about an active or prospective project
Improve our services and operations
Meet our legal, regulatory, and tax obligations

We will not use your information for any purpose other than what you would reasonably expect, given the context in which you provided it. We do not sell your personal information to third parties.

3. Confidentiality of project information

We understand that prospective and active clients share commercially sensitive product information with us. We treat all enquiries with strict confidentiality. Where projects proceed beyond initial enquiry, we sign formal non-disclosure agreements (NDAs) before any sensitive technical or commercial detail is exchanged.

If you are a current or former client, your project information, formulations, and commercial terms are governed by the specific contract or NDA you have with Epilab. This Privacy Policy applies only to general personal information; project-specific confidentiality is covered by your contract.

4. Who we share your information with

We do not share, sell, or rent your personal information to third parties for marketing purposes.

We may share your personal information with:

Our employees and contractors who need it to provide services to you, who are bound by confidentiality obligations
Service providers who help us operate our business (such as email service providers, document storage providers, and IT support), who are required to protect your information and use it only for the services they provide to us
Specialist partners (such as regulatory consultants or testing laboratories) where their involvement is necessary for your project, and only with your knowledge
Government or regulatory bodies where required by law (such as the Australian Taxation Office, AICIS, or the TGA in relation to specific projects)

5. Cookies and analytics

Our website uses cookies and similar technologies to improve your experience and to understand how the site is used. We use Google Analytics to collect anonymised information about visitor behaviour (such as which pages are viewed, time spent on pages, and general geographic location).

This information is aggregated and does not personally identify you. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on.

You can control or disable cookies through your browser settings. Disabling cookies may affect some site functionality.

6. Overseas data storage

Some of the service providers we use to operate our business (such as email and document storage providers) may store data on servers located outside Australia. Where this occurs, we take reasonable steps to ensure that those providers comply with the Australian Privacy Principles or substantially similar standards.

By using our website or submitting an enquiry, you consent to your personal information being stored and processed in this way.

7. Security

We take reasonable steps to protect your personal information from misuse, unauthorised access, modification, or disclosure. These steps include secure password practices, encrypted email where appropriate, restricted access to client information, and physical security at our Cheltenham facility.

No system is completely secure. While we take protecting your information seriously, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately.

8. Retention

We retain your personal information for as long as reasonably necessary for the purposes for which it was collected, or as required by law (for example, to meet tax and record-keeping obligations). When information is no longer needed, we securely delete or de-identify it.

9. Your rights

Under the Australian Privacy Principles, you have the right to:

Access the personal information we hold about you
Correct any personal information that is inaccurate, incomplete, or out of date
Make a complaint if you believe we have breached the Australian Privacy Principles

To exercise any of these rights, contact us using the details in Section 11.

If you make a complaint, we will respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

10. Updates to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was most recently revised. Material changes will be noted prominently on this page. Continued use of our website after a change indicates acceptance of the updated policy.

11. Contact us

If you have questions about this Privacy Policy, want to access or correct your personal information, or wish to make a complaint, please contact us:

Design Your Skincare Pty Ltd
23 Elma Road
Cheltenham VIC 3192
Australia

Email: info@epilab.com.au
Phone: 03 9052 5800