Privacy Policy

This Privacy Policy explains how Boost Skin Clinic ("we", "us", "our") collects, holds, uses and discloses personal information. We are committed to handling personal information in line with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and the Notifiable Data Breaches scheme.

This policy applies to information collected through our website, our online booking system, and when you contact us or visit the clinic.

Depending on how you deal with us, we may collect:

• your name, phone number, email address and other contact details
• enquiry and appointment information
• treatment interests and relevant health or treatment-suitability information you voluntarily provide when making an enquiry, booking or attending a consultation
• communications you have with the clinic
• website usage information, such as your IP address, browser, device, pages visited and referral source

Boost Skin Clinic does not store treatment records or client treatment photographs, or collect marketing preferences. Voluntarily supplied health or treatment-suitability information does not become a permanently stored treatment record.

Boost Skin Clinic does not collect or store complete card details through this website. Where payments are made through Timely or another third-party payment provider, payment information is handled by that provider under its own privacy and security practices.

You can choose not to identify yourself when making a general enquiry. However, we may not be able to book or provide treatments without your name, contact details and relevant health information.

We collect personal information directly from you wherever practicable, including through:

• the enquiry form on our website
• Timely, which we use for online bookings and which may process booking and appointment information
• phone, email, social media and in-person communications
• consultations, where you voluntarily provide relevant health or treatment-suitability information
• cookies and similar website technologies, depending on the tags configured
• authorised third parties, where appropriate

We collect, hold and use personal information to:

• respond to enquiries
• manage appointments and bookings
• assess treatment suitability
• provide treatments and client care
• send appointment confirmations and reminders
• manage payment-related enquiries, where relevant, with the third-party provider handling payment information
• improve our website and services
• keep our website secure and, depending on the tags configured, understand website usage
• meet our legal and regulatory obligations

Health information is sensitive information under the Privacy Act. You may voluntarily provide relevant health or treatment-suitability information when making an enquiry, booking or attending a consultation. We collect it only where it is reasonably necessary to provide our services, with your consent or where otherwise permitted by law. For example, we may ask about skin conditions, medications, allergies or pregnancy so we can decide whether a treatment is suitable and safe for you.

This information does not become a permanently stored treatment record. We do not use sensitive information for targeted advertising or direct marketing.

Google Tag Manager is installed on our website to manage website tags. It is not Google Analytics, and its installation does not establish that Google Analytics, Google Ads or the Meta Pixel is active. The current tag configuration is subject to a separate tracking audit.

Depending on the tags configured, website technologies may use cookies or similar technologies to collect technical and usage information, such as your IP address, browser and device type, pages visited and referral source. Google services may receive technical and usage information. You can learn more about how Google uses data at policies.google.com.

Online advertising and website tracking are separate from promotional email or SMS communications. This policy does not confirm that Google advertising, Meta remarketing or other targeted advertising is currently active.

You can manage or block cookies through your browser settings. Disabling some cookies may affect how parts of the website work, and browser settings are not a complete opt-out solution for targeted advertising.

We may disclose personal information, where reasonably necessary, to:

• authorised clinic personnel and contractors
• Timely, our online booking provider, which may process booking and appointment information
• our website hosting, form and email providers
• payment processors
• website technology providers, such as Google, depending on the tags configured
• professional advisers, such as accountants, insurers and lawyers
• government agencies, regulators or law-enforcement bodies where required or authorised by law

Boost Skin Clinic does not sell or rent your personal information.

Some of our service providers may store or process personal information outside Australia. Website enquiry information is transmitted using Resend, a service based in the United States. Timely is used for online bookings and may process booking and appointment information, and may store or process personal information in Australia and the United States. Google services may process website usage information in the United States and other countries where Google operates. Our website hosting provider may also store or process information overseas under its own privacy policy.

We take reasonable steps to ensure overseas recipients handle personal information in a way that is consistent with the Australian Privacy Principles.

Boost Skin Clinic does not currently send promotional emails or SMS marketing messages. Clients may still receive appointment confirmations, reminders and other service-related communications connected with their bookings.

We do not send other direct marketing communications. This policy will be updated before promotional email or SMS marketing is introduced in the future.

Online advertising and website tracking are separate from direct email or SMS marketing and are addressed in the cookies, analytics and advertising technologies section.

We take reasonable administrative, technical and physical steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These include limiting access to authorised people and using reputable service providers. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Personal information is retained only for as long as reasonably necessary to respond to enquiries, manage bookings, provide services, meet applicable legal obligations and resolve disputes. Information that is no longer required is securely deleted or de-identified where appropriate.

If we suspect a data breach, we will assess it promptly. Where a breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

You can ask to access or correct the personal information we hold about you by emailing info@boostskinclinic.com.au or calling 0481 101 741. We may need to verify your identity before acting on your request. We will respond within a reasonable period. If we refuse a request, we will explain why where it is reasonable to do so.

If you have a concern about how we have handled your personal information, please contact us in writing at info@boostskinclinic.com.au with details of your complaint. We will review it, may contact you for more information, and will respond within a reasonable period.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Our website links to external websites and services, including our online booking platform provided by Timely and Google Maps. These services have their own privacy practices, and we encourage you to review their privacy policies before providing information to them.

Where we collect personal or health information from a person under 18, a parent or guardian may need to provide consent, depending on the circumstances and the young person's capacity to consent.

We may update this policy from time to time. The current version and its revision date will always be available on this page.

For privacy questions, requests or complaints, please contact: