Privacy Policy

Smirk Aesthetic Clinics

Smirk Aesthetic Clinics (we, us, our) is committed to protecting your privacy. We comply with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, hold, use, and disclose personal information, how you may access and correct your information, and how you can make a privacy complaint.

We value the trust you place in us and are committed to handling your personal information responsibly and securely.

Scope of this Privacy Policy

This Privacy Policy applies whenever we collect, use, or disclose personal information, including when you:

• book or attend an appointment with Smirk Aesthetic Clinics;
• use our online booking system (Timely);
• communicate with us via phone, email, SMS, or online;
• receive cosmetic or medical treatments at our clinics; or
• interact with third-party medical service providers we collaborate with, such as Fresh Clinics.

What is Personal Information?

“Personal information” means information or an opinion about an identified or reasonably identifiable individual. This includes details such as your name, date of birth, contact details and appointment information.

For our patients, personal information may also include health information, which is considered sensitive information under the Privacy Act. This can include:

• medical history and consultation notes;
• consent forms;
• details of treatments and medications used;
• clinical photographs and videos;
• information relating to complications or follow-up care.

Personal Information We Collect

We may collect and store the following types of personal information:

For Patients

• name, date of birth, address, phone number, and email address;
• booking and appointment details via Timely;
• medical history, consultation notes, and treatment records;
• clinical photographs or videos (with your consent);
• medications administered during appointments;
• correspondence between you and our clinic.

For Staff and Contractors

• contact details;
• professional credentials and compliance documentation.

If you choose not to provide required personal or health information, we may be decline to treat you within our clinics.

How We Collect Personal Information

Where possible, we collect personal information directly from you. This may occur when you:

• book appointments through Timely;
• complete intake or consent forms;
• attend consultations or treatments;
• communicate with us by phone, email, or online.

We may also collect personal information from third parties, including:

• healthcare practitioners involved in your care;
• Fresh Clinics, where they provide medical support, prescribing, or compliance services in collaboration with Smirk Aesthetic Clinics.

Use of Personal Information

We collect, hold, and use personal information for purposes including:

• providing safe, effective, and appropriate treatments;
• managing bookings, consultations, and follow-up care;
• maintaining accurate medical records;
• communicating with you about your appointments and care;
• meeting legal, regulatory, and professional obligations;
• quality assurance, training, and internal analysis;
• managing complaints, incidents, or claims.

Disclosure of Personal Information

We do not sell your personal information.

We may disclose personal information where necessary, including:

• to healthcare practitioners directly involved in your treatment;
• to Fresh Clinics, a separate and independent medical services provider that supports Smirk Aesthetic Clinics with prescribing, medical oversight, compliance, and related services;
• to service providers such as Timely and secure IT or cloud storage providers;
• to Medicare, private health insurers, medical defence organisations, or complaint-handling bodies where required;
• to regulatory authorities or government agencies as required or authorised by law;
• in medical emergencies, where disclosure is necessary to protect your health or safety.

Where we disclose personal information to third parties, we take reasonable steps to ensure appropriate privacy and confidentiality safeguards are in place.

Data Storage and Security

We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification, or disclosure.

Personal information may be stored electronically using secure systems, including:

• Timely booking and practice management software;
• secure cloud-based servers with encryption and access controls.

Access to personal information is limited to authorised staff and contractors on a need-to-know basis. Where information is no longer required and we are not legally obliged to retain it, we take reasonable steps to de-identify or securely destroy it.

Accessing and Correcting Your Information

You may request access to, or correction of, your personal information by contacting us using the details below.

If access is refused, we will provide written reasons. We may charge reasonable administrative costs for providing access where permitted by law.

Marketing Communications

We may send administrative or appointment-related communications. We do not use patient health information for marketing purposes without consent. You may opt out of non-essential communications at any time.

Cookies and Online Data

Our website and booking systems may collect usage data such as IP addresses, browser types, and interaction data through cookies and similar technologies to improve functionality and user experience.

Questions or Complaints

If you have questions about this Privacy Policy or believe your privacy has been breached, please contact us:

Email: admin@smirkinjectables.com

We will respond as soon as reasonably possible. If you are not satisfied with our response, you may request the contact information the Office of the Australian Information Commissioner (OAIC)

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The most current version will be available on our website or upon request.