Privacy Policy

Last updated: 19/11/2025

1. About this Privacy Policy

This Privacy Policy explains how Precise Aesthetics (“Precise Aesthetics”, “we”, “us” or “our”) collects, uses, discloses and protects your personal information, including health information, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). OAIC+1

As a health service provider, we handle sensitive health information and are required to comply with the Privacy Act and APPs regardless of our annual turnover. OAIC+1

By using our services, booking with us, or using our website (the “Website”), you agree to the handling of your personal information in accordance with this Policy.

2. Who we are

Precise Aesthetics provides medical and cosmetic services from the following location:

  • Address: Suite 1504, Level 15, Westfield Tower 2, 101 Grafton St, Bondi Junction NSW 2022, Australia
  • Email: preciseaesthetics@gmail.com
  • Phone: (02) 8599 7161

This Policy applies to all of our services, including in-clinic, telehealth and online services, and to your use of our Website located at [insert website URL].

3. What personal information we collect

The types of personal information we may collect include:

Identity & contact details

  • Name, date of birth, gender
  • Address, email address, phone number
  • Emergency contact details

Medical & health information (sensitive information)

  • Medical history and current health status
  • Medications, allergies and previous treatments
  • Referrals, pathology or imaging reports, and other clinical records
  • Clinical photographs and treatment notes

Appointment & billing information

  • Appointment history and preferences
  • Medicare number, private health insurance details (if relevant)
  • Payment details (processed via secure third-party payment providers; we do not normally store full card details)

Website & digital information

  • IP address, device and browser type
  • Pages visited, time and date of visits, referring websites
  • Cookies and similar tracking technologies (see Section 7)

If you choose not to provide certain information, we may not be able to provide some or all of our services to you.

4. How we collect personal information

We may collect your personal information in various ways, including:

  • Directly from you when you:
    • complete new patient forms or online booking forms
    • attend a consultation or treatment
    • contact us by phone, email, social media or through our Website
  • From other health professionals or providers, such as:
    • your general practitioner or referring specialist
    • laboratories, imaging providers or other treating practitioners
  • From third-party service providers that support our practice, including:
    • online booking systems
    • payment processors
    • practice management software
  • Automatically through our Website, via:
    • cookies, analytics tools and similar technologies

We will only collect health information if it is reasonably necessary for us to provide a health service to you, and where possible, we will collect it directly from you. OAIC

5. Why we collect, use and disclose personal information

We collect, use and disclose your personal information for purposes including:

  • Providing health and cosmetic services
    • assessing your suitability for treatments
    • planning, performing and reviewing your treatment
    • coordinating care with other health professionals
  • Practice management and administration
    • booking and managing appointments
    • billing, payments, Medicare or health fund claims (where applicable)
    • quality assurance, staff training and auditing
  • Communication with you
    • sending appointment reminders and follow-up information
    • responding to enquiries and providing clinical information
    • sending information about our services, promotions and updates (you can opt out at any time)
  • Legal, regulatory and clinical obligations
    • complying with legal and regulatory requirements
    • responding to subpoenas, court orders or notices
    • incident and complaint handling, insurance and risk management

We will only use or disclose your personal information for the purpose for which it was collected, or a related purpose that you would reasonably expect, unless you consent to another use or disclosure, or the law permits or requires it. OAIC+1

6. Health information and clinical photographs

Because we provide health and aesthetic services, much of the information we collect is health information, which is considered sensitive information under the Privacy Act.

We may take clinical photographs (including before-and-after images) as part of your assessment and treatment. These images are stored in your clinical record and used to:

  • plan and document your treatment
  • monitor progress and outcomes
  • meet clinical and regulatory requirements

We will only use identifiable clinical photographs for marketing or educational purposes (e.g. on our Website, social media or printed materials) with your explicit written consent, which you may withdraw at any time (withdrawal will not affect use already made with your consent).

7. Website, cookies and analytics

When you visit our Website, we may use cookies and similar technologies to:

  • make the Website function correctly
  • remember your preferences
  • understand how visitors use the Website
  • improve our content and services

We may use third-party analytics tools (such as Google Analytics or similar services) which collect information about your use of the Website, generally in aggregated or de-identified form.

You can usually disable cookies through your browser settings, but some Website features may not function properly if you do so.

Our Website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies separately.

8. Direct marketing and communications

We may use your contact details to send you:

  • appointment reminders and clinical follow-up information
  • information about our services, new treatments or special offers
  • practice updates or newsletters

You can opt out of non-essential marketing communications at any time by:

  • using the “unsubscribe” link in our email communications, or
  • contacting us using the details in Section 15.

We will not sell your personal information to third-party marketing companies.

9. Disclosure of personal information

We may disclose your personal information to:

  • Other health professionals involved in your care, such as:
    • your GP, dermatologist, surgeon or other specialists
    • pathology and imaging providers
  • Our service providers, including:
    • practice management and booking platforms
    • IT support, data hosting and cloud storage providers
    • billing and payment processing providers
    • marketing or communication platforms (for appointment reminders, newsletters, etc.)
  • Regulators and insurers, including:
    • professional indemnity insurers
    • government bodies or regulators, where required by law
  • Professional advisers
    • lawyers, accountants, auditors or other advisers where reasonably necessary

Where personal information is disclosed to third parties, we take reasonable steps to ensure they handle it in accordance with the Privacy Act and APPs. OAIC+1

10. Overseas disclosure

Some of our service providers (for example, cloud hosting, email or practice management providers) may store or access personal information from overseas locations (for example, in the United States, the European Union or other jurisdictions).

Where this occurs, we will take reasonable steps to ensure that the overseas recipient does not breach the APPs in relation to your information, for example through contractual safeguards and due diligence on the provider’s security and privacy practices. Imperva+1

11. Data security and storage

We take reasonable steps to protect your personal information from:

  • misuse, interference and loss; and
  • unauthorised access, modification or disclosure. OAIC+1

These steps include:

  • secure physical storage of paper records (where used)
  • password-protected electronic systems and practice management software
  • role-based access controls for staff
  • data encryption, firewalls and regular security updates where appropriate
  • staff training on privacy and confidentiality

When we no longer require your personal information, and it is no longer required to be retained by law or professional standards, we will take reasonable steps to destroy or de-identify it.

12. Access to and correction of your personal information

You have the right to:

  • request access to personal information we hold about you; and
  • request corrections if you believe that information is inaccurate, out-of-date, incomplete, irrelevant or misleading. OAIC+1

To request access or correction, please contact us in writing using the details in Section 15. We may need to verify your identity before responding.

In some circumstances, we may lawfully refuse access (for example, where giving access would pose a serious threat to the life, health or safety of any individual, or would unreasonably impact the privacy of others). If we refuse your request, we will tell you why and explain what options you have.

We do not charge for making an access or correction request, but we may recover reasonable costs for providing copies of information, where permitted.

13. Notifiable data breaches

If we experience a data breach that is likely to result in serious harm to individuals whose information is involved, we will comply with the Notifiable Data Breaches (NDB) Scheme under the Privacy Act. This may include:

  • promptly assessing the breach
  • taking steps to contain or remedy the breach
  • notifying affected individuals and the Office of the Australian Information Commissioner (OAIC), where required. AUSTRAC+1

14. Complaints

If you have concerns or a complaint about how we have handled your personal information, please contact us first (see Section 15). Please provide as much detail as possible so we can properly investigate.

We will:

  1. acknowledge your complaint;
  2. investigate the circumstances; and
  3. respond to you in writing within a reasonable timeframe.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

  • Website: oaic.gov.au
  • Phone: 1300 363 992
  • Mail: GPO Box 5218, Sydney NSW 2001 OAIC+1

15. How to contact us

For questions, requests or complaints about privacy, please contact:

Precise Aesthetics – Privacy Officer
Address: Suite 1504, Level 15, Westfield Tower 2
101 Grafton St, Bondi Junction NSW 2022, Australia
Email: preciseaesthetics@gmail.com
Phone: (02) 8599 7161

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practice, technology, or legal obligations. The updated Policy will be posted on our Website with the new “Last updated” date.

We encourage you to review this Policy periodically to stay informed about how we manage your personal information.