1. Your Privacy is ImportantThis privacy policy sets out how MECCA protects your personal information, your rights regarding your personal information and how MECCA collects, holds, uses, discloses, and manages your personal information.MECCA operates across Australia and New Zealand. This privacy policy describes how MECCA complies with its obligations under the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles, the New Zealand Privacy Act 2020 (NZ) and the New Zealand Information Privacy Principles (the Privacy Acts).You do not have to provide any personal information to MECCA. However, without certain information, MECCA may not be able to provide products, services or information to you or may be limited in how we interact with you.
2. Who is MECCA?When we refer to MECCA in this privacy policy, we mean all companies within the MECCA Group, unless otherwise specified, including(referred to as MECCA, MECCA Group, we, us, our).
3. What Kinds of Personal Information Does MECCA Collect About You?Personal information is any information that identifies you or can reasonably be used to identify you. Personal information may include health information.The personal information we collect and hold about you will vary depending on our particular interaction or engagement with you. Generally speaking, the kinds of personal information MECCA may collect and hold about you includes:
contact details, including your name, residential and delivery addresses, telephone numbers, email and other electronic addresses;
demographic details, including your age, date of birth, gender and personal interests;
information about the products and services you have purchased, ordered, obtained or inquired about (including through MECCA Beauty Loop);
information about which MECCA M-POWERED Collective affiliate(s) you have donated to;
images, photographs, videos, footage and other content which may identify you;
payment information such as your credit or debit card details, date and time, transaction amount, information related to the merchant for each transaction and other bank details;
information about your MECCA Beauty Loop profile (including your Beauty Loop member number);
your views, preferences, and insights about our business, including products and services that you share;
your behavioural information and characteristics that are derived from data we already have about you, including from your past behaviours, preferences, and activities;
internet, digital and technology information (as further detailed in paragraph 8) collected from accessing our websites, apps and social media sites, including your IP address, referring URL, browsing habits, cart items, clicked links, location data (where enabled), device type, dates and other information as permitted by your device settings;
information about any testimonials, reviews, feedback, complaints, product returns, and refunds issued to you;
social media account names or tags;
proof of identity information including your photo identification (such as drivers’ licence or passport) and/or utility bills to match the name and address of a billing method; and
if you apply for a job opportunity with MECCA, details including your employment history, education, professional qualifications and demographic information (to support our diversity and inclusion goals).
MECCA may also hold other kinds of personal information as permitted or required by law or other kinds of personal information that we notify you of at or about the time of collection.In some cases, MECCA may be required to collect sensitive information from you to the extent that it is reasonably necessary for us to provide our products or services to you. ‘Sensitive information’ is defined in the Privacy Acts and includes health information. Some examples of sensitive information that we may collect include information regarding your medical history (including previous infections, diseases, reactions and conditions), medications, medical care, health related reactions and health related contraindications. If we do need to collect sensitive information about you, we will only do so with your consent or where we are required to do so by law.
4. How Does MECCA Collect Your Personal Information?Generally, MECCA will collect your personal information directly from you when you provide it to us. This might be when you:
purchase or order any of our products or services;
visit or attend one of our stores, including through cameras, images, photographs, videos, or CCTV footage or similar technology used in our stores (which may also cover our pick-up areas, store entrances and other publicly accessible areas);
browse, access or otherwise use, our website, apps or other online services, including by the use of cookies, tags and pixels which may monitor your interactions (as further detailed in paragraph 8);
subscribe to any of our mailing lists or subscriptions;
donate to MECCA M-POWERED Collective affiliates through MECCA M-POWER;
book to receive a treatment at any of our stores (including a MECCA Aesthetica store);
complete a survey or participate in one of our research studies, competitions or promotions (including through MECCA Makers);
create a Beauty Loop account with us and join our Beauty Loop loyalty program;
attend one of our events (including via camera, video, or similar technology);
contact us or otherwise interact with us (including during phone calls, webchats or via social media);
visit our offices;
undertake any courses or training, including through MECCAversity;
post information online such as images, videos, reviews, feedback and other content (including to any of our websites, apps or social media accounts);
if you apply for a job with MECCA.
In some cases, we may also collect personal information about you from someone other than you, such as:
our affiliated or related companies (including entities within the MECCA Group when you browse their websites and apps, purchase their products or services or otherwise interact with them);
third parties you authorise to disclose your information to us;
your parent, guardian and/or nominated referees;
law enforcement agencies where required (for example, to conduct police checks if you apply for a job with us);
our vendors, suppliers or contractors that help us provide our products or services to you;
an organisation (such as your employer), where you interact with us on behalf of them; or
a publicly maintained record or other publicly available sources of information including internet search platforms, social media and similar websites.
5. How We Use Your Personal InformationMECCA collects, holds, uses and discloses your personal information for the following purposes:
to provide our products and services to you;
to provide you with access to our websites, apps or other online services;
to monitor and measure the use of our websites, apps or other online services (including if you are a new or returning visitor);
to personalise and enhance your experience with us (including determining what products and services may interest you, and what services, such as treatments, may be suitable for you);
to undertake data analytics, data processing, database compilation, market research or trend analysis including to derive insights about our customers, to better understand our customers preferences and interests, and to improve our products and service offerings;
to assist in determining your preferred store locations or to direct you to your closest stores when using our websites or apps;
to monitor customer traffic in our stores and identify frequently visited locations in our stores;
to conduct promotions, competitions, giveaways and events;
to promote and market our goods and services to you, including posting personalised content and advertisements online on our websites, apps, social media accounts and other online services, and conducting direct marketing (as detailed in paragraph 6 below) such as sending you complimentary products and offering products or services of interest to you;
to provide support services (including responding to questions, handling complaints, processing returns, refunds, exchanges, and managing product recalls);
to process payments;
to prevent or investigate any potential, suspected or actual fraud, breaches of policy or law, and conduct fraud, risk reduction and creditworthiness checks;
to monitor and protect our team members, customers, premises and systems from malicious or dangerous activity;
for loss prevention or store safety purposes, such as investigating breaches of store procedures, injuries, or incidents in our stores;
to receive and manage the delivery of products or services from our suppliers and service providers;
to assess your application for employment with MECCA;
for team member training purposes;
to enforce MECCA’s rights, including undertaking legal proceedings;
to manage our business operations (including store management, supply arrangements, inventory control, sales monitoring, and strategic decision-making for our products and services); and
to otherwise comply with our legal and regulatory requirements.
In addition to the list above, MECCA may use your personal information for purposes related to any of the above or other purposes notified to you at the time of collection or otherwise permitted or required by law.
6. Direct MarketingIn addition to the purposes in paragraph 5, MECCA may use and disclose your personal information to inform you about promotions, competitions, events, offers, products, or services that may interest you, for example by email or text. This may involve sharing your information with affiliated or related entities or commercial partners of MECCA for direct marketing. You can opt-out of these communications using the details provided in any marketing communication, or by updating your marketing preferences in your Beauty Loop account.
7. Disclosure of Your Personal InformationMECCA discloses your personal information for the same purpose that it was collected. As a result, this may include disclosing your personal information to:
our affiliated or related companies, including entities within the MECCA Group;
our contractors, service providers and other third parties that supply products or services to us (including our technology and data analytics providers, marketing, advertising, trend analysis and feedback collection providers, payment processors, shipping and distribution providers, event organisers, and other business or administration service providers);
other entities as required or authorised by law, court order or regulatory requirement (for example, government agencies, regulatory bodies and law enforcement agencies);
any person or entity considering or having invested in or acquired MECCA’s business, shares or assets;
our professional advisers (including legal, tax consulting, and accounting firms, auditors, insurers, insurance brokers or business consultants);
third party service providers for fraud detection and security detection, or to prevent payment fraud; and
any other person or organisation that we notify you about.
If you post information or other content to public sections of our websites or to our social media sites, you acknowledge that the information or content may be viewed by the public and/or users of the relevant website or social media site.Some of the parties that MECCA discloses your personal information to may be located outside Australia, including third parties located in, Hong Kong, Japan, the European Union, the United Kingdom and the United States of America.
8. How Does MECCA Use Cookies?A cookie is a small piece of data stored on your device that tracks your interactions with a website. We use cookies to identify you as a returning user, enhance your experience on our websites or apps, tailor content to match your preferences, and for other similar purposes. Most internet browsers accept cookies by default, but you can adjust your internet browser settings to refuse cookies or warn you before accepting them. If you reject our cookies, some features on our websites or apps may be limited.Cookies help us improve our services, ensure our website and app is easy to use, and assist with marketing and advertising. We also use IP addresses, tags, pixels, and other similar technology identifiers to understand customer preferences, analyse trends, administer our website and app, track traffic, gather demographic information, personalise customer content as well as for credit fraud protection and risk reduction.Our websites and apps may use third party services and cookies including Google Analytics. We use these services to understand website and app traffic and usage. Google may share cookies with partners and third parties.
9. Links to Other SitesWhen you access and use our websites or our other online services or communications, we may include links to other websites for your convenience, including sites operated by our partners, associates, or independent third parties. Each website maintains its own privacy practices, which are detailed in their respective privacy policies. We suggest you carefully review the privacy policy of each website before providing any information or utilising their services. We are not responsible for the privacy practices of that third party.
10. Protecting Your Personal InformationMECCA takes reasonable steps to ensure that the personal information we hold is protected from misuse, interference and loss and from unauthorised access, modification or disclosure. Your personal information is held by MECCA in electronic form and is protected by electronic and procedural safeguards.Your personal information will either be stored on MECCA’s IT systems, or the IT systems of MECCA’s contractors or service providers. Your personal information will be accessed only by authorised personnel or contractors. We also implement information security policies, procedures and training programs to ensure the security of your personal information.When MECCA no longer requires your personal information, we will securely destroy or de-identify it, unless otherwise required or authorised by law to retain that personal information.
11. Access and Correction of Your Personal InformationMECCA takes reasonable steps to ensure personal information it holds is accurate, up-to-date, complete, relevant and not misleading.You have a right to seek access to, and correction of, your personal information that is collected and held by MECCA.To obtain access to or correct your personal information:
you may be required to provide proof of identity to ensure that personal information is provided only to the correct individuals and that the privacy of others is protected; andMECCA requests that you be reasonably specific about the information you require and/or wish to correct.
MECCA will endeavour to respond to your request within 30 days. MECCA will also grant access to the extent required or authorised by law and take reasonable steps to correct personal information where necessary and appropriate.If MECCA isn’t able to facilitate a request to access or correct your personal information, we will provide written reasons along with details on complaint mechanisms if you’d like to follow up. Common reasons for refusal include potential compromises to another individual’s privacy or legal requirements.If you’re not satisfied with MECCA’s refusal to grant access to, or correct, your personal information, you may make a complaint by following the process set out in paragraph 12 below.MECCA may charge you a reasonable administration fee, which reflects and will not exceed the cost to MECCA for providing access to your personal information in accordance with your request.
12. ComplaintsPlease direct all privacy complaints to MECCA’s Privacy Officer. At all times, privacy complaints:
will be treated seriously;
will be dealt with promptly;
will be dealt with in a confidential manner; and
will not affect your existing obligations or affect the commercial arrangements between you and MECCA.
MECCA will endeavour to resolve your complaint within 30 days unless we inform you otherwise. We may require proof of identity.MECCA’s Privacy Officer will investigate your complaint and ensure you’re updated on the outcome. If you’re not satisfied with the outcome of your complaint, you may:
if you are in Australia, refer your complaint to the Office of the Australian Information Commissioner, whose contact details are set out in paragraph 15; or
if you are in New Zealand, refer your compliant to the New Zealand Office of the Privacy Commissioner, whose contact details are set out in paragraph 15.
13. Contact UsFor any other information or questions regarding your personal information, or if you would like to make a privacy complaint, please email
14. Changes to Privacy PolicyWe keep our privacy policy on the MECCA website, so it’s easy for you to access.We try not to change our privacy policy too often, but sometimes we need to, for example, if the law changes or if we change how we collect or use your information.Any update to our privacy policy will be made available on our website. We will also notify you when we make significant updates.
