Privacy Policy
Luxelaser Skin Clinic – Tarneit, Melbourne
Website: luxelaserskinclinic.com.au
Last updated: 3 Nov 2026
About this policy
Luxelaser Skin Clinic (ABN 80 677 134 664) (“we”, “us”, “our”) operates the skin clinic at 62 Edmund Dr, Tarneit VIC 3029 and the website luxelaserskinclinic.com.au. This policy explains how we collect, hold, use and disclose your personal information, including health information.
We handle personal information in line with the Privacy Act 1988 (Cth), including the Australian Privacy Principles, and the Health Records Act 2001 (Vic), including the Health Privacy Principles.
The personal information we collect
Depending on how you deal with us, we may collect:
- Contact and identity details: your name, phone number, email address and date of birth.
- Booking details: appointments, treatments booked, treatment history, cancellations and notes about your visits.
- Health information: your medical history, current medications, allergies, skin type and skin conditions, pregnancy or breastfeeding status, previous treatments and reactions, and any other details we need to decide whether a treatment is safe for you.
- Clinical photos: before-and-after photos of the treated area.
- Purchase details: products you buy, order history, and billing and delivery addresses.
- Communications: messages you send us by phone, email, WhatsApp or social media.
- Website usage information: your IP address, device and browser type, pages you visit and how you arrived at our website, collected through cookies and Google Analytics.
Health information is sensitive information under privacy law. We only collect it with your consent and only when we need it to assess your suitability for a treatment and to treat you safely.
We do not provide treatments to anyone under 18.
How we collect it
We collect personal information directly from you when you:
- book an appointment online through Timely, or by phone, email or WhatsApp
- visit the clinic and attend a consultation or treatment
- buy products through our online shop
- contact us through our website, by email or on social media.
Before your treatment, our clinician will ask you about your health and skin history in person and record the relevant details in your client record.
We also collect some information automatically when you use our website, through cookies and Google Analytics (see “Cookies and Google Analytics” below).
Dealing with us anonymously
You can browse our website and make general enquiries without giving your name, or by using a different name. To book or receive a treatment, or to buy products, we need your name and contact details. For treatments, we also need relevant health information so we can treat you safely.
How we use your information
We use your personal information to:
- book, confirm, reschedule and remind you about appointments
- assess your suitability for treatments, plan and deliver them safely, and record the results
- process orders and payments, and supply the products you buy
- respond to your enquiries, feedback and complaints
- keep accurate client and clinical records, as the law requires
- understand how people use our website so we can improve it
- meet our legal obligations.
We do not send promotional emails or SMS messages. If this changes, we will ask for your consent first, and every message will include a simple way to unsubscribe.
We do not sell, rent or trade your personal information.
Before-and-after photos
Clinical photos form part of your treatment record and help us track your progress.
We only publish photos on our website gallery or social media with your consent. Saying no will not affect your treatment in any way. You can withdraw your consent at any time, and we will remove the photo from our website and social media accounts. We cannot recall copies that other people have already saved or shared.
Who we share your information with
We only share your personal information with the service providers we use to run the clinic, and only for the purposes in this policy:
- Timely: online bookings, appointment reminders and client records
- WooCommerce and our website host: our online shop and order records
- Payment providers (Stripe, Square, PayPal, WooCommerce Payments, Afterpay and Apple Pay): processing payments. Your card details are entered directly into these providers’ secure systems, and we do not store your full card details.
- Google: Google Analytics (website usage), Google Fonts, and the Google reviews shown on our website
- Meta: WhatsApp messages, and Facebook and Instagram when you contact us there.
- [CONFIRM: If online orders are shipped, add the courier or postal service used. If orders are pick-up only, delete this line.]
We may also disclose your information:
- to another health service provider, if you ask us to
- where the law requires or allows it, such as under a court order, or to lessen or prevent a serious threat to someone’s life, health or safety.
We do not share your information with anyone else.
Overseas disclosure
Some of our service providers store or process information outside Australia. The countries involved are likely to include the United States and New Zealand, and any other countries where these providers keep their servers. We take reasonable steps to make sure overseas providers protect your information to a standard consistent with Australian privacy law.
How we store and protect your information
We keep client records in paper and digital form.
- Paper records are stored securely at the clinic, and only staff who need them can access them.
- Digital records are kept in Timely and our website systems, which are password-protected, with access limited to authorised staff.
- Payments are handled through our payment providers’ secure systems.
- Our staff must keep client information confidential.
How long we keep your information
We keep health records for at least seven years after your last treatment, as required by the Health Records Act 2001 (Vic).
We keep other personal information only for as long as we need it for the purposes in this policy, or as long as the law requires (for example, tax records). After that, we securely destroy it or remove anything that identifies you.
Accessing and correcting your information
You can ask for access to the personal information we hold about you, including your health records, by contacting us using the details below. We will verify your identity first, and we aim to respond within 30 days.
You can choose to view your records, get a copy or a summary, or have them explained to you. You can also ask us to send your health information to another health service provider.
There is no charge to make a request. If providing copies involves significant cost, we will tell you about any fee before we go ahead.
If we refuse a request, we will tell you why in writing and explain how you can complain.
If you think any of your information is wrong, out of date or incomplete, contact us and we will correct it. If we disagree that a correction is needed, you can ask us to attach a note to your record setting out your view.
Cookies and Google Analytics
Our website uses cookies, which are small files stored on your device. These include cookies from Google Analytics, which records details such as the pages you visit, how long you stay, the type of device you use and your approximate location based on your IP address. We use this information to understand how people use our website and to improve it. We do not use it to identify you.
Our online booking pages (run by Timely) and the Google content on our website may set their own cookies.
You can block or delete cookies through your browser settings, and you can opt out of Google Analytics using Google’s opt-out browser add-on. Some parts of the website may not work properly if you block cookies.
Data breaches
If a data breach involving your personal information is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC), as required by the Notifiable Data Breaches scheme.
Automated decision-making
We do not use computer programs to make decisions about you that could significantly affect your rights or interests. All treatment decisions are made by our clinicians.
Making a complaint
If you have a concern about how we have handled your personal information, contact us first using the details below and tell us what happened. We will look into it and aim to respond within 30 days.
If you are not satisfied with our response, you can complain to:
- Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au, phone 1300 363 992
- Health Complaints Commissioner (Victoria), for complaints about health information: hcc.vic.gov.au, phone 1300 582 113
Contact us
For privacy requests, questions or complaints, please contact us and mark your message “Privacy”.
Luxelaser Skin Clinic 62 Edmund Dr, Tarneit VIC 3029 Phone: 0420 801 996 Email: info@luxelaserskinclinic.com.au
Changes to This Policy
We may update this policy from time to time. The current version will always be on our website, with the date it was last updated. If you would like a copy of this policy in a different format, contact us and we will provide it free of charge.