Luminous Skin by Amal respects your privacy and is committed to protecting the personal and health information you provide to us.

We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and Australian Privacy Principles where applicable, and the Health Records and Information Privacy Act 2002 (NSW) and Health Privacy Principles.

This Privacy Policy explains how we collect, hold, use, disclose and protect your personal and health information when you interact with our clinic, website, online booking systems, social media accounts or other services.

The information we collect depends on your interaction with Luminous SKN and may include:

• your name, date of birth and contact details;
• phone number and email address;
• appointment and booking information;
• billing and transaction information;
• treatment history and clinical notes;
• medical and health history relevant to treatment;
• medications, allergies and contraindications;
• pregnancy or breastfeeding information where relevant to treatment safety;
• information about previous cosmetic, skin or medical treatments;
• skin concerns, treatment goals and consultation information;
• photographs and videos taken for treatment assessment or progress monitoring;
• before-and-after photographs;
• consent forms and treatment records;
• communications you have with us by telephone, SMS, email, social media or online forms;
• marketing preferences;
• feedback, reviews or complaints; and
• other information reasonably necessary to provide our services.

Health information is treated as sensitive information and receives additional protection.

We generally collect personal information directly from you.

This may occur when you:

• make an appointment;
• complete a consultation or consent form;
• attend the clinic;
• communicate with our staff;
• contact us through our website;
• interact with us through social media;
• enter a promotion, giveaway or competition;
• subscribe to marketing communications; or
• use an online booking or payment platform associated with our clinic.

We may also receive information from another practitioner, healthcare provider or person where you have authorised this, or where collection is otherwise permitted or required by law.

We may collect, hold and use your information to:

• provide consultations and treatments;
• determine whether a treatment is appropriate and safe for you;
• develop and manage treatment plans;
• monitor treatment results and progress;
• maintain accurate clinical and client records;
• communicate with you about appointments and aftercare;
• respond to questions or enquiries;
• process bookings and payments;
• provide customer service;
• manage our clinic and business operations;
• comply with legal, regulatory and insurance requirements;
• investigate or respond to complaints;
• improve our services;
• send marketing communications where permitted; and
• carry out other purposes to which you have consented.

We will not use sensitive or health information for an unrelated purpose unless you consent or the use is otherwise permitted or required by law.

Luminous SKN may take photographs or videos where reasonably required for clinical assessment, treatment planning, progress monitoring or record keeping.

Clinical photographs form part of your treatment information and will be handled as confidential information.

We will not use identifiable photographs or videos of you for advertising, social media, our website, education or promotional purposes unless we have obtained appropriate consent.

Where separate photo, video or marketing consent is required, we will seek that consent separately.

You may decline marketing photography without affecting your ability to receive treatment.

We may use third-party providers to assist us with services such as:

• online appointment bookings;
• client management systems;
• payment processing;
• website hosting;
• email and SMS communications;
• cloud data storage;
• accounting;
• marketing; and
• business administration.

For example, appointments and client information may be managed through third-party booking or practice-management software such as Fresha.

These providers may collect or process personal information on our behalf in accordance with their own privacy practices and contractual obligations.

Where reasonably practicable, we take steps to work with reputable providers and limit disclosure to information reasonably necessary for the relevant service.

Payment information may be processed through third-party payment processors.

Luminous SKN does not necessarily receive or store complete credit or debit card details where payments are processed directly through an external payment provider.

The relevant payment provider's privacy and security terms may also apply.

Where permitted by law, we may use your contact details to communicate with you about:

• clinic news;
• treatment information;
• promotions;
• special offers;
• events;
• competitions; and
• services that may be relevant to you.

You may opt out of marketing communications at any time by using the unsubscribe option provided or by contacting us.

Opting out of marketing does not prevent us from sending necessary service communications, including appointment confirmations, treatment information or important administrative messages.

If you communicate with Luminous SKN through Instagram, Facebook, TikTok or another social media platform, that platform may separately collect information about you under its own privacy policy.

We recommend avoiding the transmission of highly sensitive medical information through public comments or unsecured social media communications.

Where appropriate, we may ask you to communicate with us privately or through another channel.

Our website may use cookies and similar technologies to operate the website, understand how visitors use it, improve its performance and support advertising or marketing activities.

Information collected may include:

• browser type;
• device information;
• IP address;
• pages visited;
• referring websites;
• dates and times of website visits; and
• interactions with advertisements or website content.

You may be able to restrict cookies through your browser settings, although doing so may affect some website functionality.

We may disclose personal information where reasonably necessary to:

• staff and practitioners involved in providing your treatment;
• authorised contractors or service providers;
• booking and client-management providers;
• payment providers;
• IT, website or data-storage providers;
• professional advisers such as accountants, lawyers or insurers;
• healthcare professionals where appropriate and authorised;
• regulators or government authorities where required by law; or
• another party where you have provided consent.

We do not sell your health information.

Some third-party technology, cloud, booking, payment, communication or marketing providers we use may store or process information outside Australia.

The countries in which information is stored or processed may vary depending on the service provider and its infrastructure.

Where Australian privacy law requires us to take particular steps in relation to overseas disclosures, we will take reasonable steps to meet those requirements.

We take reasonable steps to protect personal and health information from misuse, interference, loss, unauthorised access, modification and disclosure.

Information may be stored electronically, physically or through secure third-party service providers.

Security measures may include, where appropriate:

• password-protected systems;
• restricted staff access;
• secure practice-management systems;
• device security;
• secure storage of physical records; and
• appropriate staff privacy procedures.

No electronic transmission or storage system can be guaranteed to be completely secure. However, we take reasonable measures appropriate to the nature of the information we hold.

Team members and practitioners who have access to client information are expected to maintain confidentiality and access information only where reasonably necessary for their role.

Client information should not be accessed, discussed, photographed, copied or disclosed except as necessary to provide services or as otherwise authorised or permitted by law.

We retain personal and health information for as long as required for our business, clinical and legal obligations.

Health records will be retained in accordance with applicable NSW legal requirements.

When information is no longer required to be retained, we will take reasonable steps to securely destroy or de-identify it where legally permitted.

You may request access to personal or health information that Luminous SKN holds about you.

Requests should be made using the contact details at the end of this policy.

Before providing access, we may need to verify your identity.

There may be circumstances where access can lawfully be limited or refused. Where required, we will explain the reason.

We take reasonable steps to ensure the personal information we hold is accurate, current and relevant.

If you believe information we hold about you is incorrect, incomplete or out of date, please contact us and request a correction.

Where we provide services to a person under 18, we will take reasonable steps appropriate to their age, capacity and circumstances when collecting and handling their personal and health information.

Where required or appropriate, we may seek consent or information from a parent or legal guardian.

If personal information is lost, accessed or disclosed without authorisation, we will assess the incident and take appropriate action.

Where the law requires notification of an eligible data breach, we will comply with applicable notification requirements.

If you have a concern or complaint about how Luminous SKN has handled your personal or health information, please contact us first so that we can investigate the matter.

Please include enough information for us to understand and investigate your concern.

We will aim to respond within a reasonable period.

If you are not satisfied with our response, you may have the right to contact the Office of the Australian Information Commissioner (OAIC) or the NSW Information and Privacy Commission (IPC), depending on the nature of your complaint and the legislation that applies.

We may update this Privacy Policy from time to time to reflect changes to our services, technology, business practices or legal obligations.

The latest version will be published on our website with the date it was last updated.

Luminous Skin by Amal

Address: Shop 4 / 13–19 Bryant Street, Rockdale, NSW 2216

Phone: 0409 116 072