Privacy Policy

1. Introduction

This Privacy Policy explains how Lux Cosmetics (Snezana Ristevska Pty Ltd ACN 624 493 545)

(we, us, our) handles personal information and health information in connection with our

cosmetic injectable services provided at our Mill Park  clinic and any offsite locations. We are committed to protecting the privacy and confidentiality of yourinformation in accordance with the Privacy Act 1988 (Cth), the Australian Privacy

Principles (APPs), applicable Victorian health records laws and the professional

obligations of our Nurse Practitioner under the National Law and AHPRA/NMBA Code of

Conduct.

2. What information we collect

We may collect and hold personal information and health information including:

• your name, address, date of birth and contact details;

• medical history, medications, allergies and relevant health information;

• clinical notes, treatment plans, consent forms and photographs taken for clinical records;

• billing and payment information;

•appointment history and communications with us (including SMS, email and booking system messages).

3. How we collect your information

We usually collect information directly from you when you contact us by phone, SMS, email, social media, online booking systems (such as GetTimely) or when you attend a consultation or treatment. We may also receive information from other health practitioners, with your consent, where this is necessary for your care.

4. Why we collect, use and disclose information

We collect, use and disclose your information to:

• provide safe and appropriate cosmetic injectable and related health services;

• manage bookings, reminders and administrative tasks;

• communicate with you about your care, results and follow-up;

• obtain payment for our services and manage our business operations;

• comply with legal and professional obligations, including AHPRA, NMBA and TGA requirements.

We will not use or disclose your information for direct marketing without your consent and you may opt out of any marketing at any time.

5. Who can access your information

Your information is primarily accessed by our Nurse Practitioner. Limited administrative support (for example, SMS booking support) may be provided by an Administrative Assistant who is bound by a written Confidentiality Deed. That role is restricted to handling minimal booking information only (name, contact details, preferred appointment time) and does not involve access to clinical records, photos or treatment details.

We may disclose information to other treating health practitioners (with your consent where required), insurers, Medicare or private health funds (where relevant), or as required or authorised by law (for example, in response to a court order or mandatory notification obligations).

6. Storage and security

We take reasonable steps to protect your information from misuse, interference, loss, unauthorised access, modification or disclosure. This includes using password-protected devices, secure clinical record systems, limiting access to those who need it for their role and training staff and volunteers in confidentiality and privacy obligations.Some information (such as SMS messages and booking confirmations) may be stored on secure mobile devices and within reputable third-party booking or communication platforms. We take steps to ensure these providers handle information in a manner consistent with the APPs.

7. Access and correction

You may request access to, or correction of, the personal information and health information that we hold about you. We will respond to requests within a reasonable time and may require identification before releasing information. In some circumstances we may refuse access, but if we do so we will explain why and tell you how you can complain.

8. Complaints about privacy

If you have a question or concern about how we handle your information, please contact us using the details below. We will take your complaint seriously and work with you to resolve it. If you are not satisfied with our response, you may contact the Office of the

Australian Information Commissioner (OAIC) or the relevant state health complaints body.

9. Contact details

Lux Cosmetics

34 Incana Drive, Mill Park VIC 3082 

Email: luxcosmeticsau@gmail.com

Phone:0400 377169

10. Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. The current version will be available at our clinic and can be provided by email on request.