1. Information We Collect
We may collect the following categories of personal information from you, consistent with APP 3 (Collection of Solicited Personal Information) and PPIPA Part 2:
- Identity information: your full name, date of birth, and contact details including phone number and email address.
- Booking information: appointment history, service preferences, and notes related to your treatments.
- Health information: where relevant to your treatment (e.g. skin conditions, contraindications for IPL or waxing), collected and handled in accordance with HRIPA 2002 (NSW) and Health Privacy Principle 1.
- Payment information: transaction records processed through our booking platform (Timely). We do not store full card details on our systems.
- Technical information: IP address, browser type, and pages visited, collected automatically when you use our website.
We only collect personal information that is reasonably necessary for our business functions. We will not collect sensitive information without your consent, except where required or authorised by law.
2. How We Use Your Information
In accordance with APP 6 (Use or Disclosure of Personal Information), we use your personal information only for the primary purpose for which it was collected, or for a related secondary purpose you would reasonably expect. Specifically, we use your information to:
- Process and manage your bookings through the Timely platform.
- Provide and personalise beauty and skin care services.
- Send appointment reminders, confirmations, and follow-up communications.
- Comply with our legal and regulatory obligations.
- Improve our services and website experience.
- Send promotional offers or newsletters, only where you have provided consent (you may opt out at any time).
3. Disclosure of Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted third parties only where necessary, including:
- Timely (booking software): to manage appointments and client records. Timely's privacy practices are governed by their own Privacy Policy.
- Payment processors: to securely process transactions.
- Government or regulatory bodies: where required by law, court order, or in response to a lawful request by public authorities.
Where we disclose your information to overseas recipients, we take reasonable steps to ensure those recipients handle your information in a manner consistent with the APPs, as required by APP 8.
4. Health Information
Health information is treated as sensitive information under both the Privacy Act 1988 (Cth) and the Health Records and Information Privacy Act 2002 (NSW). We collect health information only where it is directly relevant to the services you are receiving (for example, contraindications for IPL treatment or skin sensitivities). This information is:
- Collected only with your consent.
- Stored securely and accessible only to authorised staff.
- Not disclosed to third parties except as required by law or with your consent.
- Retained only for as long as necessary to provide your services or as required by law.
5. Data Security
We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure, consistent with APP 11. Our security measures include:
- Secure, password-protected systems for storing client records.
- Use of reputable third-party platforms (Timely) with their own security protocols.
- Limiting access to personal information to authorised personnel only.
While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
6. Your Rights
Under the Privacy Act 1988 (Cth) (APP 12 and APP 13) and PPIPA 1998 (NSW), you have the right to:
- Access the personal information we hold about you.
- Correct any personal information that is inaccurate, out of date, incomplete, or misleading.
- Withdraw consent for us to use your information for marketing purposes at any time.
- Request deletion of your personal information, subject to our legal obligations to retain certain records.
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au if you believe your privacy rights have been breached.
To exercise any of these rights, please contact us using the details in Section 9 below. We will respond to your request within 30 days.
7. Cookies and Website Tracking
Our website may use cookies and similar tracking technologies to improve your browsing experience and analyse site traffic. You may disable cookies through your browser settings; however, this may affect the functionality of certain parts of our website. We do not use cookies to collect personally identifiable information without your consent.
8. Retention of Personal Information
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Client records related to health and treatment history may be retained for a minimum of seven (7) years in accordance with NSW health record-keeping guidelines, or longer where required by law. When your information is no longer required, we will take reasonable steps to destroy or de-identify it securely.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us:
LH Skincare
1525 Pittwater Road, Inside Chocolate Box Gym
North Narrabeen, Sydney NSW 2101
Phone: 0435 881 488
Instagram: @lhskin_care
We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) or the NSW Information and Privacy Commission.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Continued use of our services after any changes constitutes your acceptance of the updated policy.