Privacy Policy

Your privacy is important to us. We take the responsibility of handling your personal information seriously.

This Privacy Policy applies to the services offered by 99 Medispa, its related entities and clinics (“we”, “our” or “us”). We comply with the Privacy Act 1988 (Cth) and recognise that individuals have a right to control how their personal information is handled.

This policy explains how we collect, use and disclose personal information, how you can access and correct it, and how you can make a privacy complaint. By using our website or services, or by providing personal information to us, you consent to our handling of that information as set out in this policy.

Information we collect

For the purposes of this Privacy Policy, personal information includes:

your name and date of birth;
your contact details and emergency contact details;
treatment details;
before and after treatment photographs;
personal information captured by CCTV, as covered by our CCTV Policy;
payment information such as bank account or credit card details;
payment history; and
sensitive information such as medical information provided by you and collected by us as part of your treatment file, details of telehealth consultations, and any allergies you may have.

We may also collect information relating to your access and use of our website, social media accounts or apps, including your IP address, device type, browser information, time and date of access, location data, webpages visited, and other website-related information collected through technologies such as cookies.

Information that does not disclose your identity or enable your identity to be ascertained is not classified as personal information and is therefore not subject to this Privacy Policy.

Collection of personal information

We collect personal information where you provide it to us or where collection is required by law. We collect it primarily to provide our services and products, including:

when you use our website, including when you purchase a treatment, make a booking, or create a customer account;
if you complete a client card at or before attending one of our clinics;
if you contact us by phone, email, or social media with a query or complaint;
during treatment consultations; and
if you provide feedback about your experience with us.

You are not obliged to provide personal information to us. However, in some circumstances, we may be unable to provide services or products without it.

Use of tracking technologies

We use tracking technologies such as cookies or web beacons to make our website and services easier to use. Cookies are pieces of information transferred to a computer’s hard disk for record-keeping purposes and to support website functionality. A web beacon is a technical method that sends information relating to website access when you browse a website or open or preview an HTML-formatted email.

Most web browsers are set to accept these technologies. They do not personally identify you, although they identify your browser and allow us to monitor website use. You can configure your browser to refuse cookies or web beacons, but doing so may limit some services available through our website.

Use and disclosure of personal information

We use personal information to:

provide you with our services and products;
create a record of your treatments and preferences which can be accessed by your treating team across our clinics;
with your consent, publish before and after treatment images on our website;
with your consent, contact you with information about our products, services, and special offers;
obtain feedback from you about our products and services;
record statistical data for internal marketing analysis;
comply with legal and regulatory obligations, carry out internal audits or investigations, prevent fraud or other unlawful activities, and support safety and security;
enable medical practitioners to provide medical consultation for your treatments and any post-treatment review and consultation;
record quantitative and qualitative medical and treatment data for internal medical and treatment analysis and research;
fulfil purposes that are reasonably necessary or ancillary to the purposes above; and
fulfil any other purpose notified to you before, or at the time of, obtaining your consent.

We may share information within our group of companies to provide a seamless customer experience.

We may disclose personal information to third-party service providers who assist us to deliver our services, such as IT, marketing, market research and consulting providers. Some providers are located in countries including the United States and the Netherlands, and you consent to these overseas disclosures.

We only disclose personal information to overseas service providers where we have taken reasonable steps to ensure the provider does not breach the Australian Privacy Principles in relation to that information.

Direct marketing

We may send direct marketing communications about our services and other material we consider may be of interest. You can opt out using the unsubscribe mechanism in each email or by contacting us at info@99medispa.com.au.

If you opt out of direct marketing, we may still contact you for other reasonable purposes, including booking confirmations or notifications about changes to services or policies.

Opting out of direct marketing does not opt you out of targeted advertising. Use your cookie and tracking-technology settings to control advertising across social media and other digital properties.

Storage and security

We hold personal information in hard copy and electronically, on our own servers and those of our service providers.

We use technical, administrative, personnel and physical measures to protect personal information against loss, interference, unauthorised access, modification, disclosure and misuse. These measures include electronic and physical access restrictions and encryption of personal information sent and received.

Third parties with access to personal information must have appropriate controls, protect information consistently with this policy, and use it only for authorised purposes.

We destroy or de-identify personal information when the purpose for collection no longer exists, where you have asked us to remove it, where you have withdrawn consent to the collection of sensitive or health information, or where we are no longer required by law to retain it.

Access and correction

You may request access to personal information we hold about you and ask us to correct information that is not accurate, current or complete. Contact info@99medispa.com.au or contact the clinic.

We may charge a reasonable retrieval fee and will tell you about that fee before providing the information. We may decline an access or correction request in circumstances permitted by law. If we refuse a request, we will aim to explain our decision.

Further information and enquiries

To request further information or make a complaint about our handling of personal information, contact our Privacy Officer. We will investigate written enquiries and do our best to resolve them as soon as possible.

Privacy Officer, 99 Medispa

info@99medispa.com.au

If you are not satisfied with the result of your complaint, you can refer it to the Office of the Australian Information Commissioner:

1300 363 992

GPO Box 5218, Sydney NSW 2001

www.oaic.gov.au

We may review, amend, update or change this Privacy Policy to reflect our practices and obligations. Changes take effect when the updated policy is uploaded to our website.