Privacy Policy

Liaimoana Mulitalo, ABN 98560854973, trading as ZYNLA, based in Victoria, Australia (“ZYNLA”, “we”, “us”, “our”), is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, store and share your personal information when you use:

our website: https://zynla.com.au (“Website”)

our software platform for salon bookings, client communication and automation (“Platform”)

any related services we provide, such as onboarding, support or done-for-you setup (together, the “Services”).

By using our Services, you agree to this Privacy Policy.

We aim to comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth), and any other privacy laws that apply to our business (“Privacy Laws”). In most cases, we act as a data controller (deciding how personal information is used). Sometimes, for your salon’s clients, we act as a data processor (processing data on your instructions).

1. What personal information we collect

Personal information” means information or an opinion about an identified person or a person who is reasonably identifiable.

Depending on how you use our Services, we may collect:

Identification & contact details: Your name, business name, salon name, address, email address, phone number, role and similar details.

Billing & payment information: Limited payment details required by our third-party payment providers (for example, Stripe), your ABN, and records of invoices and payments. We do not store full credit card numbers on our own servers.

Account & product information: Information about how you use the Platform, your subscription plan, your settings, preferences, and the features you use.

Customer/Client data (for salons): Appointment information, client contact details (such as name, phone number, email), booking history and any notes you choose to store about your clients. For this data, you are usually the data controller, and we process it for you.

Technical & usage information: Device type, browser type, IP address, pages visited, time spent on pages, approximate location, and other analytics data about how you interact with our Website and Platform.

Communications: Messages you send to us (for example, via email, contact forms, chat or social media), survey responses, support requests and feedback.

Content you provide: Any testimonials, screenshots, reviews, or other material you would like to share with us.

We generally do not collect sensitive information (such as health information or information about race, religion, sexual orientation, political beliefs, etc.). If we ever need this for a specific reason, we will ask for your explicit consent first.

2. How we collect personal information

We collect personal information in a few ways:

Directly from you

When you sign up for ZYNLA, complete onboarding forms, contact us, request a demo, or otherwise provide your information.

Automatically

When you use our Website or Platform, certain technical and usage data is collected using cookies, pixels and similar technologies (see “Cookies” below).

From third parties
For example, from payment providers, analytics tools, or social platforms, when you interact with our pages or ads.

You can choose not to provide certain information, but this may mean we can’t provide you with all of our Services.

3. How we use your personal information

We use and process your personal information so we can:

Create and manage your ZYNLA account

provide, maintain and improve the Platform and our Services

set up and manage your booking, SMS and email automation

communicate with you about your account, billing, changes to our Services, and important updates

send you appointment reminders, confirmations, missed-call texts and review requests on your behalf (where you have set these up)

respond to your enquiries, support requests or complaints

analyse how the Platform and Website are used, so we can improve features and user experience

run marketing campaigns and send you information about ZYNLA that may interest you (you can opt out at any time)

comply with our legal and regulatory obligations

protect our rights, our users and our systems (for example, detecting fraud or misuse).

We will only use your personal information for these purposes, or for related purposes that you would reasonably expect.

4. Call recordings and transcriptions

4.1 Depending on how your ZYNLA account is configured, we may process call-related data on your behalf, including:
(a) audio recordings of inbound and outbound calls;
(b) automatically generated text transcriptions of those calls (if transcription is enabled);
(c) call metadata such as phone numbers, contact names, call duration, time and date, call outcome and routing information; and
(d) any notes or tags that you or your staff add to the call record.

4.2 We process this information as a service provider/data processor to our business customers (for example, your salon or clinic). In most cases, your business is the data controller and is responsible for:
(a) deciding whether to enable call recording or transcription;
(b) informing staff and callers that calls may be recorded or transcribed, and obtaining any required consent; and
(c) determining how long call recordings and transcripts are retained.

4.3 We use call recordings and transcriptions (where enabled) for the following purposes:
(a) to provide the call recording and transcription features within ZYNLA;
(b) to allow you to review calls for training, quality assurance and customer service;
(c) to help investigate technical issues, security incidents or misuse of the Platform; and
(d) where necessary, to comply with our legal obligations or respond to lawful requests from regulators or law enforcement.

4.4 Call recordings and transcripts may be stored securely within the Platform or with our telecommunications and infrastructure providers. We apply technical and organisational measures to protect this data, including access controls and logging. Access to call recordings and transcripts is restricted to authorised personnel who need it to operate, support or improve the Platform.

4.5 We retain call recordings and transcriptions for as long as reasonably necessary to provide the services to you, to meet our legal obligations, or as otherwise agreed with you. You may be able to delete specific recordings or configure retention settings within your Account. Once your Account is cancelled, call recordings and transcripts may be deleted or anonymised in accordance with our data retention practices.

4.6 If you are a caller or contact of one of our business customers (for example, you call a salon that uses ZYNLA), we encourage you to contact that business directly for more information about how they use call recordings and transcriptions, and to exercise any privacy rights you may have under applicable law.

5. Marketing communications

We may use your contact details to send you:

product updates

tips on using ZYNLA

offers or promotions

invitations to webinars or demo sessions.

You can opt out at any time by:

clicking “unsubscribe” in our emails, or

contacting us at [email protected].

Opting out of marketing does not affect important service or billing emails we still need to send.

6. Who we share your information with

We do not sell your personal information.

We may share personal information with:

Service providers and partners
For example, HighLevel (GHL), LeadConnector, Twilio or similar providers that power SMS, email, calling and hosting for the Platform.

Payment processors
Such as Stripe, which processes subscription and other payments securely on our behalf.

Professional advisers
Our accountants, lawyers, insurers or other advisers, where reasonably necessary.

Analytics and tracking providers
Tools that help us understand how users find and use our Website and Platform.

Any party you authorise or direct
For example, if you request a specific integration or data export.

Authorities or law enforcement
Where required by law, or where we believe disclosure is reasonably necessary to protect our rights, property or safety, or that of others.

Where we share information with third-party service providers, we aim to ensure they only use it as needed to perform services for us and in line with applicable privacy laws.

7. International transfers

Some of our service providers may be located outside Australia. This means your personal information may be processed or stored in other countries.

Where this happens, we take reasonable steps to ensure your information is handled in a way that provides an appropriate level of protection, consistent with this Privacy Policy and applicable laws.

By using our Services, you consent to this overseas transfer of your information.

8. How we store and protect your information

We store personal information in electronic form using reputable cloud and infrastructure providers.

We take reasonable steps to protect your information from misuse, interference, loss and unauthorised access, modification or disclosure. These steps may include:

access controls and authentication

secure passwords and encryption in transit, where appropriate

regular reviews of user access and permissions.

However, no method of transmission or storage over the internet is 100% secure. You use the Services and provide information at your own risk.

If we become aware of a serious data breach involving your personal information, we will handle it in accordance with our legal obligations and notify you where required.

When we no longer need your personal information, we will take reasonable steps to delete or de-identify it, subject to any laws that require us to keep certain records.

9. Cookies and similar technologies

We use cookies and similar technologies on the Website to:

remember your preferences

help you stay logged in

understand how visitors use the Website

support our marketing and advertising.

You can usually control cookies through your browser settings (for example, blocking or deleting them). If you disable cookies, some parts of the Website may not work properly.

10. Your rights

Depending on where you live and what laws apply, you may have the right to:

access the personal information we hold about you

correct inaccurate, out-of-date or incomplete information

object to certain types of processing

Withdraw consent where processing is based on consent

request that we delete certain information (subject to legal requirements).

To exercise these rights, contact us at [[email protected]]. We may need to verify your identity before actioning your request.

11. Third-party websites and links

Our Website and Platform may contain links to third-party sites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing them with any personal information.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our Website with a new “Last updated” date.

Your continued use of the Services after any changes means you accept the updated Privacy Policy.

Last updated: 2 December 2025

13. Contact us

If you have any questions, concerns or complaints about privacy or this Privacy Policy, please contact us:

Email: [email protected]

We will try to respond within a reasonable time and work with you to resolve any issues.