PRIVACY POLICY
Last updated: September 2026
North Coast Medispa respects your privacy & is committed to protecting the personal information and health information you entrust to us.
As a healthcare provider, we understand that information about your health, medical history and treatments is particularly sensitive. We collect and manage your information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable laws and professional obligations.
This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices you have regarding your information.
1. Who we are
North Coast Medispa is a provider of skin health, dermal and aesthetic services in the Northern Rivers of NSW.
For the purposes of this Privacy Policy, references to “North Coast Medispa”, “NCM”, “we”, “us” or “our” mean North Coast Medispa and the relevant entity or entities operating our clinics.
If you have any questions about this policy or how we handle your information, please contact us using the details provided at the end of this policy.
2. Information we collect
Depending on how you interact with us, we may collect personal information including:
Your name, date of birth and contact details
Information about your appointments and interactions with our clinic
Health information, including your medical history, allergies, medications, previous treatments, skin concerns and other information relevant to providing healthcare
Treatment records, clinical notes and information about your response to treatments
Photographs or other images taken as part of your consultation or treatment, where appropriate
Payment and transaction information
Information you provide when contacting us, completing forms, making an enquiry or providing feedback
Information provided when you purchase products, gift vouchers or other services
Information about your use of our website, including information collected through cookies and similar technologies
We only collect information that is reasonably necessary for our functions and activities.
3. How we collect your information
Where possible, we collect information directly from you.
This may happen when you:
Book an appointment
Complete a consultation or medical history form
Attend one of our clinics
Contact us by phone, email, social media or through our website
Purchase a product, treatment or gift voucher
Subscribe to receive communications from us
Provide feedback or make an enquiry
In some circumstances, we may receive information from another healthcare professional or organisation involved in your care, where this is permitted by law and reasonably necessary to provide our services.
Our website may also collect certain technical information automatically, such as your IP address, browser type, device information and how you interact with our website.
4. Why we collect and use your information
We collect, hold, use and disclose personal information for purposes including:
Providing healthcare and treatment to you
Assessing your suitability for treatments
Maintaining accurate clinical and treatment records
Managing appointments and communicating with you
Processing payments and purchases
Providing products and services you request
Responding to enquiries and feedback
Managing our clinics and business operations
Improving our services and patient experience
Meeting our legal, regulatory and professional obligations
Protecting the health, safety and wellbeing of our clients and staff
Where permitted by law, we may also use your contact details to send information about our services, promotions or other communications you have agreed to receive.
You can opt out of marketing communications at any time.
Health information will not be used for direct marketing unless we have the appropriate consent or another lawful basis to do so.
5. How we protect your information
We take reasonable steps to protect the personal and health information we hold from misuse, interference, loss and unauthorised access, modification or disclosure.
Depending on the type of information, safeguards may include secure electronic systems, access controls, passwords, staff confidentiality obligations and secure storage.
Access to clinical and health information is limited to people who need it for legitimate purposes associated with providing care or managing our services.
Where information is stored with third party service providers, we take reasonable steps to ensure appropriate privacy and security arrangements are in place.
6. How long we keep your information
We retain personal and health information for as long as reasonably necessary to fulfil the purposes for which it was collected and to meet our legal, clinical, regulatory and record keeping obligations.
When information is no longer required, we take reasonable steps to securely destroy or de-identify it.
7. When we may disclose your information
We will generally only use or disclose your personal information for the purpose for which it was collected, for a directly related purpose you would reasonably expect, with your consent, or where otherwise permitted or required by law.
Depending on the circumstances, we may disclose relevant information to:
Other healthcare professionals involved in your care
Pathology, pharmacy or other healthcare providers where appropriate
Service providers who help us operate our clinics and business
Payment and booking providers
IT, software and data storage providers
Professional advisers, insurers or legal representatives where appropriate
Government, regulatory or law enforcement bodies where required or authorised by law
We only disclose information that is reasonably necessary for the relevant purpose.
8. Overseas disclosure
Some of the third party services we use to operate our business may store or process information outside Australia.
Where this occurs, we take reasonable steps to ensure that information is handled in accordance with applicable privacy requirements.
The countries in which information may be stored or processed will depend on the third party services we use at any given time.
9. Website, cookies and analytics
Our website may use cookies, analytics tools and similar technologies to understand how visitors use our website, improve its functionality and measure the effectiveness of our communications.
These technologies may collect information such as your device type, browser, approximate location, pages visited and interactions with the website.
We may also use third party advertising or analytics platforms where appropriate.
You can adjust your browser settings to manage or block cookies. Some website functionality may be affected if cookies are disabled.
10. Marketing communications
We may send you marketing communications where permitted by law and where you have provided the appropriate consent.
You can unsubscribe from marketing communications at any time by using the unsubscribe option provided or by contacting us.
Opting out of marketing communications will not affect your ability to receive healthcare or other services from us.
11. Photographs and before and after images
Where photographs are taken as part of your treatment or for educational or marketing purposes, we will seek appropriate consent for their use.
Clinical photographs may form part of your health record and will be handled accordingly.
We will not use your photographs for marketing purposes without the appropriate consent, and you can contact us if you have questions about how your images are being used.
12. Accessing your information
You have rights to request access to personal information we hold about you, subject to limited exceptions under applicable privacy laws.
If you would like to access your information, please contact us.
We will generally respond to your request within a reasonable period and may need to verify your identity before providing access.
There may be circumstances where we are unable to provide access to particular information. If this occurs, we will explain the reason where we are permitted to do so.
13. Correcting your information
We take reasonable steps to ensure the information we hold is accurate, complete and up to date.
If you believe information we hold about you is inaccurate, incomplete or out of date, you can ask us to correct it.
Please contact us with details of the information you believe needs to be corrected.
14. Privacy complaints
If you believe we have not handled your personal information appropriately, we encourage you to contact us first so that we can investigate and respond to your concern.
Please provide enough information for us to understand your concern and, where possible, identify the relevant information or interaction.
We will investigate your complaint and respond within a reasonable period.
If you are not satisfied with our response, or you would prefer to make a complaint externally, you can contact the Office of the Australian Information Commissioner (OAIC).
Office of the Australian Information Commissioner
Website: www.oaic.gov.au
The OAIC provides information about privacy rights and how to make a privacy complaint.
15. Data breaches
We take reasonable steps to protect the information we hold. If we become aware of a data breach involving personal information, we will assess the incident and take appropriate action in accordance with our legal obligations, including the Notifiable Data Breaches scheme where applicable.
This may include taking steps to contain the breach, assess potential harm, notify affected individuals and notify the OAIC where required.
16. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, privacy practices or legal obligations.
The most current version will be published on our website with the date of the latest update.
17. Contact us
If you have a question about this Privacy Policy, would like to access or correct your information, or wish to make a privacy complaint, please contact North Coast Medispa.
North Coast Medispa
Northern Rivers, NSW
Phone: 1800 186 333