Privacy Policy

Last updated 23 August 2026
 

Charm Clinic ("Charm Clinic", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, hold and disclose personal information — including health information — when you visit our website (charmclinic.com.au), make a booking, or receive treatment at our clinic located at Suite 5, 79–81 Rowe St, Eastwood, NSW.
 

This policy is written to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as the Health Records and Information Privacy Act 2002 (NSW) ("HRIP Act"), which applies to health service providers operating in New South Wales.
 

1. What Personal Information We Collect

Depending on how you interact with us, we may collect:

Contact and identity information

• Name, date of birth, address, phone number, email address

Booking information

• Appointment details, service preferences, booking history (collected and stored via our booking platform, Timely)

Health information (sensitive information)

• Medical history, allergies, current medications, skin/cosmetic concerns, treatment notes, consultation records, and consent forms

• Before-and-after photographs taken in connection with treatment

• Information shared with or generated through our prescribing support provider, Fresh Clinics, where relevant to your treatment

Website and communication information

• Information submitted through contact or enquiry forms

• Correspondence with us via email, phone, SMS, or social media/messaging platforms

• Basic technical data such as browser type and website usage, if analytics or cookies are used (see Section 6)

We only collect sensitive information (including health information) with your consent, or where otherwise permitted or required by law.

2. How We Collect Personal Information
 

We generally collect personal information directly from you, when you:

• Make a booking or enquiry through our website or booking platform

• Complete an intake, consent, or medical history form (in person or online)

• Attend a consultation or treatment

• Contact us by phone, email, or social media

In some circumstances we may collect information from a third party, such as a referring practitioner, with your consent or as otherwise permitted by law.

3. How We Use Your Personal Information

We use your personal information to:

• Provide safe and appropriate clinical care and cosmetic treatments

• Manage bookings, appointment reminders, and clinic administration

• Maintain accurate clinical records as required by law and professional obligations

• Communicate with you about your treatment, aftercare, or upcoming appointments

• Process payments

• Improve our services and website

• Send you marketing communications, but only where you have consented (you can opt out at any time)

• Comply with our legal, regulatory, and professional obligations (including obligations under the Poisons and Therapeutic Goods Act and TGA advertising requirements)

We will not use your health information for a secondary purpose (such as marketing) unless you would reasonably expect this, you have consented, or the law permits it.

4. Before-and-After Photographs

Where clinically relevant, we may take before-and-after photographs as part of your treatment record. These images are stored securely and are used for your clinical file unless you separately and expressly consent to their use for marketing or educational purposes (for example, on our website or social media). You may withdraw this marketing consent at any time.

5. Disclosure of Personal Information

We do not sell your personal information. We may disclose your information to:

• Our staff and contracted clinicians involved in your care

• Our booking and practice management platform (wix)

• Our prescribing support provider (Fresh Clinics), where relevant to your treatment

• Cloud storage providers (such as Google Drive) used to securely store clinical images and records

• Regulatory bodies, insurers, or legal advisers where required by law or professional obligation

• A third party you have specifically authorised (e.g., a referring doctor)

Some of our service providers may store data on servers located outside Australia. Where this occurs, we take reasonable steps to ensure your information is handled in accordance with the Australian Privacy Principles.

6. Cookies and Website Analytics

Our website may use cookies or similar technologies to improve functionality and understand how visitors use our site. You can disable cookies through your browser settings. 

7. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. This includes secure, access-controlled storage of clinical records and images, and staff training on confidentiality obligations. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

8. Retention of Records

We retain clinical records in accordance with our professional and legal obligations as a health service provider (health records are generally required to be retained for a minimum period after the last treatment, or longer for minors). We securely destroy or de-identify personal information when it is no longer required.

9. Access and Correction

You have the right to request access to the personal information we hold about you, and to request correction if it is inaccurate, out of date, or incomplete. To make a request, please contact us using the details in Section 11. We may need to verify your identity before providing access, and there may be circumstances where access is limited under the Privacy Act or HRIP Act (for example, where release could pose a risk to your health or safety).

10. Complaints

If you believe we have breached the Australian Privacy Principles or the HRIP Act, you may lodge a complaint with us using the contact details below. We will investigate and respond within a reasonable timeframe. If you are not satisfied with our response, you may contact:

• Office of the Australian Information Commissioner (OAIC) — www.oaic.gov.au

• NSW Information and Privacy Commission (IPC) — www.ipc.nsw.gov.au

11. Contact Us

For privacy questions, access requests, or complaints, please contact:

Charm Clinic Suite 5, 79–81 Rowe St, Eastwood, Sydney NSW Email: charmclinicau@gmail.com
Phone: 0421 247 277 Website: charmclinic.au

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The updated version will be posted on our website with a revised "Last updated" date.