top of page
Close-up of woman's face

Privacy Policy

Privacy Policy — Melbourne Skin Aesthetics

Last Updated: October 2025

Who we are

 

The information we collect

  • Identity and contact: name, email, phone, date of birth, address.

  • Health and clinical: medical history, allergies, medications, treatment plans, photographs, consent forms, progress notes.

  • Booking and transactional: appointment history, payment confirmations, promotions redeemed.

  • Communications and website: enquiries, emails, device/browser info, IP address, basic analytics data (non-identifying).

  • Product purchases: items purchased and delivery details (if applicable).

 

How we collect your information

  • When you book/manage appointments via Juvae360.

  • When you complete medical history and consent forms in clinic.

  • When you contact us via email, phone, website or social channels.

  • During consultations, treatments and aftercare.

  • When you purchase products in-clinic or (if enabled) online.

  • From third parties where permitted, e.g., referrals with your consent.

 

Why we use your information

  • Provide safe clinical care and aftercare.

  • Verify identity and maintain accurate records.

  • Manage bookings, reminders and clinic operations.

  • Communicate about appointments, aftercare and relevant clinic updates.

  • Process payments and manage accounts.

  • Comply with legal, regulatory and professional obligations (AHPRA/TGA, record-keeping).

  • Improve services, website and client experience, including basic analytics. We do not sell your personal information.

 

Consent and your choices

  • By engaging our services or submitting details, you consent to collection, use and disclosure for the purposes above.

  • You may withdraw consent for non-essential communications at any time. Clinical or regulatory communications may still be necessary.

 

Sensitive and health information

  • Treated with additional care as required by law. We only collect what is reasonably necessary and do not use it for marketing without your explicit consent.

 

Photography and before/after images

  • Taken for assessment and record-keeping. Marketing use of identifiable images requires separate written consent. We follow TGA/AHPRA guidance.

 

Disclosing your information

We may disclose to:

  • Service providers supporting operations (e.g., Juvae360, secure email, IT support) under confidentiality and privacy commitments.

  • Payment processors and banks for transactions.

  • Regulators or insurers where required by law or for incident management.

  • Other healthcare providers as reasonably necessary for your care and with consent, or as otherwise permitted by law. Overseas disclosure may occur where a provider stores data offshore; we take reasonable steps to ensure appropriate safeguards.

 

Storage and security

  • Records are stored in secure systems with access controls, strong passwords and device protections. Paper records (if any) are stored securely and destroyed via secure methods. While we take reasonable steps to protect information, no method is completely secure.

 

Retention and destruction

  • Retained in line with legal and clinical requirements. When no longer required and retention periods expire, we securely delete or de-identify information.

 

Your rights

  • Request access to or correction of your personal information/health records.

  • Ask questions about our privacy practices. We will respond within a reasonable time and may require identification. In limited cases, we may lawfully refuse access and will explain why.

 

Marketing communications

  • We may send clinic updates, education and offers relevant to our services. You can opt out anytime via the unsubscribe link or by contacting us. We do not use sensitive health information for marketing without explicit consent.

 

Cookies and analytics

  • The website may use essential cookies and basic analytics to understand performance and improve experience. Browser settings can be adjusted to refuse cookies; some features may not function optimally.

 

Third-party platforms

  • Links to or use of third-party platforms (e.g., Juvae360, Instagram/Facebook) are governed by their policies. Review those policies before providing personal information.

 

Children and young people

Services are for adults only. 

​

Data breaches

  • If a data breach is likely to cause serious harm, we will assess and, where required, notify affected individuals and the OAIC under the Notifiable Data Breaches scheme.

 

Changes to this policy

  • We may update this Policy from time to time. The updated version will be posted with a revised “Last updated” date.

 

Contact For privacy queries, access/correction requests or complaints:

bottom of page