Effective date: 13/08/2025
Operator: BeautyFULL CMC Pty Ltd t/a BeautyFULL Cosmetic Medical Clinic® (“BeautyFULL CMC”, “we”, “us”, “our”).
Website: https://beautyfullcmc.au
Contact: [email protected] | 1024 Logan Road, Holland Park West, QLD 4121.
This policy explains how we collect, use, disclose, store and protect personal information—including health information—about patients, prospective patients, site visitors and other individuals interacting with us in Australia. It applies to our clinics, Website, telehealth, online bookings, marketing and customer support. It reflects the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), with health-sector guidance from the OAIC.
We collect information needed to deliver safe, lawful, high-quality care and to run our business, including:
Identity & contact – name, date of birth, address, email, phone.
Clinical & health – medical history, medications, allergies, prior procedures, consultation notes, treatment plans, consent forms, adverse event notes, clinical photos/videos and aftercare notes.
Bookings & commerce – preferred clinic, appointment history, payments (via third-party processors), gift vouchers, package balances.
Communications – emails/SMS/phone notes, feedback, complaints, telehealth recordings where we notify you, and forms you complete.
Website/tech – device identifiers, IP, browser, usage logs, and cookies/pixels (analytics/ads). (See Section 9.)
In-clinic security – CCTV in public areas (sign-posted), incident reports.
Providing some information is optional, but if you withhold certain details we may be unable to provide some services (e.g., cosmetic aesthetic treatments without medical history).
You may interact anonymously or use a pseudonym for general enquiries. For clinical services, we must identify you to provide safe care and meet legal obligations.
We disclose personal information where necessary for the purposes above, including to:
Overseas disclosures
Some providers may operate outside Australia. Before disclosing personal information overseas, we take reasonable steps (e.g., privacy due diligence and contractual safeguards) to ensure the recipient handles it consistently with the APPs. In many cases we remain accountable for overseas recipients under s 16C. You can contact us to ask about likely countries for your data.
We use cookies and similar tech (e.g., Meta/Google pixels) to operate the site, measure performance and deliver/measure advertising. You can control cookies in your browser and ad preferences; some features may not work without them. Where pixels collect personal information and send it to a third party (including overseas), we ensure disclosure complies with APP 6 and APP 8 (see Section 8).
10.1 Packages are personal to you, not transferable, not redeemable for cash, and must be used within the validity period. Packages cannot be split across multiple individuals.
10.2 Promotions are subject to offer terms and may be withdrawn or varied at any time. Promotions may not be combined unless stated.
10.3 Gift cards/vouchers are redeemable for eligible Services/products at our Clinic, are non-refundable, and expire 3 years from issue unless otherwise required by law.
We use administrative, technical and physical safeguards appropriate to the sensitivity of the information (e.g., access controls, MFA where supported, encryption in transit where applicable, secure areas for paper files, staff training, vendor contracts). We also require our providers to implement appropriate controls.
We keep records only as long as needed for the purposes above and to comply with clinical, legal and insurance requirements. When no longer required, we securely destroy or de-identify records.
You can request access to the personal information we hold about you and ask us to correct it if it’s inaccurate, out-of-date, incomplete, irrelevant or misleading. We may need to verify your identity and, if permitted by law, charge a reasonable retrieval fee. We’ll respond within a reasonable time and explain if we’re unable to grant access or make a correction.
If an eligible data breach occurs (likely to result in serious harm), we will promptly assess, take steps to contain the incident, and notify affected individuals and the OAIC, consistent with the Notifiable Data Breaches scheme.
For patients under 18, we collect information with appropriate parental/guardian involvement unless a mature minor exception applies. Certain procedures may only be available to adults under our clinical and legal obligations.
If you’re concerned about privacy, please contact us first (details below). We will investigate and respond. If you’re not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC) (oaic.gov.au | 1300 363 992 | GPO Box 5218 Sydney NSW 2001).
We may update this policy to reflect changes in law or our practices. The latest version will be posted on our Website with the effective date. Continued use of our services after an update constitutes acceptance.
BeautyFULL Cosmetic Medical Clinic®
1024 Logan Road, Holland Park West, QLD 4121
E: [email protected]
