Privacy Policy

Daisy Skin is subject to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained in that Act. The APPs set out the manner in which organisations may collect, store, use and disclose personal information, including health information, and how a person can access and/or correct records containing their personal information.

​​

Collection of Personal and Health Information

In addition to general personal information, Daisy Skin collects sensitive health information that may include details about your medical history, medications, allergies, skin conditions, previous cosmetic procedures, and treatment photographs.
This information is collected solely for the purposes of providing aesthetic and clinical treatments, follow-up care, record keeping, and compliance with legal or insurance requirements.

All information is collected by lawful and fair means and only where reasonably necessary for one or more of our functions or activities.

​

How Personal Information is Collected

When you visit this site
Our objective in maintaining an active and expanding site is to provide information to prospective and existing clients, specifically to:

• make it possible to quickly provide information about our services

• encourage feedback from you.

We operate our website using commercial web hosting facilities. When visiting this site, a record of your visit is logged. The following clickstream data is recorded and is used by us for statistical purposes:

• your IP address

• your top level domain name (e.g. .com, .gov, .au)

• the type of browser you are using

• your operating system (e.g. Windows, Mac)

• the date and time of the visit to the site

• the pages accessed and the documents downloaded

• the internet address of the site from which you linked directly to our site.

No attempt will be made to identify users or their browsing activities except in the unlikely event of an investigation where a law enforcement or other government agency may exercise its legal authority to inspect our server logs.

​

When you subscribe to email alerts
When you subscribe to email alerts you must provide an email address to which the system can send your alerts. We will not use your email address to send you unsolicited information.

​

When you complete an online form, make a submission, or attend a consultation
We may solicit and collect personal and health information for a lawful purpose that is reasonably necessary for, or directly related to, one or more of our functions or activities.
This may include information provided in person, via online forms, SMS, booking platforms, or email correspondence.

Not all online forms provide secure transmission of information across the internet. You should be aware that there are inherent risks in transmitting information online using non-secure forms. Our secure forms can be identified by the padlock symbol and an address starting with “https://”.

With the exception of clickstream data recorded when you visit our website, the personal information you provide Daisy Skin is voluntary. However, we may be unable to provide treatment services if certain information is not supplied.

​

Health Record Storage and Security

Clinical and procedural records may be stored electronically on secure, encrypted cloud-based systems or on protected local servers.
Access to these systems is restricted to authorised personnel only and is monitored for security and privacy compliance.
Daisy Skin takes reasonable steps to protect personal and health information from misuse, loss, unauthorised access, modification, or disclosure.

Some data, such as cloud backups or analytics data, may be stored or processed by service providers located outside Australia. Where this occurs, we take steps to ensure the data is protected by privacy standards equivalent to or exceeding Australian law.

​

Retention and Destruction of Records

We retain client health and treatment records for a minimum of seven (7) years from the date of the last procedure (or longer if required by law).
After that period, records are securely destroyed or anonymised in accordance with the APPs and best-practice record management standards.

​

Use and Disclosure of Information

Personal and health information is used only for purposes directly related to your treatment, care, and business transactions with Daisy Skin.
We may disclose information:

• to insurers or legal representatives (with your consent or as required by law)

• to healthcare providers or specialists involved in your care (with your consent)

• to regulatory bodies where legally required

• to IT or administrative providers who manage our secure systems under confidentiality agreements.

We will not sell, rent, or trade your personal information.

Cookies

Our site uses cookies to better serve you when you return to the website. A cookie is a piece of data that a site can send to your browser, which may then be stored on your computer as an anonymous tag that identifies your computer but not you.

You can set your browser to notify you before you receive a cookie, giving you the chance to decide whether to accept it. You can also set your browser to turn off cookies. If you do so, some pages in the site may not work properly.

Cookies are either persistent or session based. Persistent cookies are stored on your computer, contain an expiry date, and may be used to track your browsing behaviour upon return to the issuing site. Session cookies are short-lived, are used only during a browsing session, and expire when you quit your browser.
Our site uses both kinds of cookies to provide a rich and session-based experience. The cookies are used to enable us to track users’ browsing patterns in order to provide statistical information to improve the usability of the site.

​

Website Analytics

Our website uses external analytic systems that transmit website traffic data to servers offshore. These systems do not identify individual users or associate your IP address with any other data held by them. We use this data to help us improve our website and understand how it is used.

​

Providing Your Personal Information

If you do provide us with your personal information and you wish to limit the use or disclosure of personal information (including photographs), we recommend you expressly state those limitations in writing when making your booking or on your client form.

​

Accessing and Correcting Your Information

To request access to or correction of your personal information, please email hello@daisyskin.com.au.
When making your request, please provide sufficient information to enable us to identify the records and verify your identity.

We will provide access except where we are legally permitted to refuse. If access or correction cannot be granted as requested, Daisy Skin will act in accordance with the Privacy Act 1988 and the APPs.

​

Complaints

If you believe Daisy Skin has breached the APPs or mishandled your information, you may lodge a complaint by email to hello@daisyskin.com.au. We will respond to your complaint as soon as possible.

​

Consent

By engaging our services, submitting a form, or attending treatment, you consent to Daisy Skin collecting, storing, and using your personal and health information in accordance with this Privacy Policy.