Privacy, considered.

About this policy

This Privacy Policy explains how NV’S Skin & Body collects, holds, uses and discloses personal information when you visit our website, contact us, request or attend a consultation, book a treatment, purchase a product or gift card, or otherwise interact with our clinic.

We aim to handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to our activities. Because our services may involve the collection of health-related information, we treat that information with particular care.

Information we may collect

The types of information we collect depend on how you interact with us and may include:

• your name, email address, telephone number and other contact details;
• appointment, consultation and treatment preferences;
• information you provide about skin concerns, sensitivities, current products, previous treatments or other matters relevant to your consultation or treatment;
• health-related information that you choose to provide and that is reasonably necessary for us to provide safe and appropriate services;
• purchase, transaction and gift card information where you buy products or services;
• communications you send to us by website form, email, telephone, social media or other channels; and
• technical information such as your IP address, browser type, device information and website usage data where this is collected by our website or service providers.

We will generally collect sensitive or health information directly from you and only where it is reasonably necessary for our services and we have an appropriate basis to collect it, including your consent where required.

How we collect information

We usually collect information directly from you. This may occur when you complete our online consultation form, make a booking, purchase from us, contact the clinic, communicate with us online, or provide information during a consultation or treatment.

We may also receive information through third-party services that you choose to use in connection with our business, such as an online booking platform, payment provider, website hosting service or other technology provider.

Why we use your information

We may collect, hold and use personal information for purposes including:

• responding to enquiries and consultation requests;
• booking, confirming, changing and managing appointments;
• assessing treatment suitability and providing skin and body services;
• maintaining appropriate client and treatment records;
• processing purchases, payments, gift cards and related administration;
• providing customer service and communicating with you about your treatment or booking;
• operating, maintaining, securing and improving our website and services;
• meeting legal, regulatory, insurance, accounting and professional obligations; and
• sending marketing communications where permitted and where you have agreed to receive them, with an option to unsubscribe.

We will not use sensitive or health information for unrelated marketing purposes unless permitted by law and any required consent has been obtained.

When information may be shared

We do not sell your personal information. We may disclose information where reasonably necessary to operate the clinic or provide services, including to trusted third parties such as website hosting and IT providers, email providers, booking systems, payment processors, professional advisers and other service providers assisting our business.

We may also disclose information where required or authorised by law, where necessary to protect the safety or legal rights of a person, or with your consent.

Third-party services may process or store information outside Australia. The location of those providers can change over time. Where the Australian Privacy Principles apply, we take reasonable steps in relation to overseas disclosure as required by law.

Website technology & cookies

Our website may use cookies and similar technologies that are necessary for website functionality, security, performance and user experience. Some third-party website services may also receive technical information when their features are loaded or used.

Our website uses third-party technologies, including externally hosted web fonts, and may use analytics, booking, payment or embedded services. You can generally control cookies through your browser settings, although disabling some cookies may affect how parts of the website function.

How we protect information

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These measures may include access controls, secure website and hosting systems, software security measures, backups and limiting access to information to people who need it for legitimate business purposes.

No method of electronic transmission or storage is completely secure. If an eligible data breach occurs, we will take appropriate steps, including notification where required under the Notifiable Data Breaches scheme.

Retention

We retain personal and health-related information for as long as it is reasonably required for the purpose for which it was collected and to meet applicable legal, professional, insurance, taxation or record-keeping requirements.

When information is no longer required and we are not legally required to retain it, we take reasonable steps to securely destroy it or de-identify it.

Access & correction

You may ask us for access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

We may need to verify your identity before providing access or making changes. In some circumstances, access may be limited or refused where permitted by law. If this occurs, we will explain the reason where required.

Privacy questions & complaints

If you have a question about this policy, wish to access or correct your information, or believe your privacy has not been handled appropriately, please contact us using the details below.

We will review privacy complaints and aim to respond within a reasonable period. If you are not satisfied with our response and the Privacy Act applies to the matter, you may also contact the Office of the Australian Information Commissioner.

External websites & services

Our website may link to external websites or services, including social media, booking and payment services. Those services have their own privacy practices and policies, and we recommend reviewing them before providing personal information.

Changes to this policy

We may update this Privacy Policy when our services, website, information-handling practices or legal obligations change. The current version will be published on this website with the date of the latest update.