Privacy policy
Privacy Policy for Beauty WithIn Aesthetics
Last Updated: July 26, 2025
This Privacy Policy describes how I, Beauty WithIn Aesthetics, a sole trader, collect, use, store, and disclose your personal information when you visit my website, interact with my services, or use my online booking system.
I am committed to protecting your privacy and handling your personal information responsibly and in accordance with the Australian Privacy Principles (APPs) as set out in the Privacy Act 1988 (Cth).
1. What Personal Information Do I Collect?
I only collect personal information that is reasonably necessary for me to provide my aesthetics services to you and to manage my business operations. The types of personal information I may collect include:
Contact Information: Your name, address, email address, and phone number.
Identification Information: Date of birth.
Health Information (Sensitive Information): Relevant medical history, allergies, medications, skin conditions, previous aesthetic treatments, and any other health-related information necessary for safe and effective treatment. This is considered "sensitive information" under Australian privacy law and is collected with your explicit consent.
Appointment Details: Dates and times of your appointments, services booked.
Payment Information: Details related to your payment for services (processed securely via third-party payment gateways, I do not store your full payment card details).
Website Usage Data: Information about how you use my website, such as your IP address, browser type, pages visited, and time spent on the site. This is typically collected through cookies and analytics tools (see Section 5).
Feedback and Enquiries: Information you provide when you contact me with questions, feedback, or complaints.
2. How Do I Collect Personal Information?
I collect personal information in several ways, primarily directly from you:
Directly from You:
When you fill out forms on my website (e.g., contact forms, enquiry forms).
When you book an appointment through the Dapple OS system.
During consultations and treatments, where I record your health information and treatment plans.
When you communicate with me via phone, email, or social media.
Through Third-Party Services:
Dapple OS (managed by Juv'ae): When you use my online booking system, Dapple OS, your personal information (including contact details, appointment details, and potentially health information for pre-screening or consent forms) is collected and processed by Juv'ae, the provider of Dapple OS. Juv'ae is also bound by the Privacy Act 1988 (Cth) and their own privacy policy, which I encourage you to review. You can find Juv'ae's privacy policy on their website (www.juvae.com.au/privacy-policy).
Website Analytics: I may use website analytics services (e.g., Google Analytics) to collect anonymous data about website usage, which helps me improve my website and services.
Social Media: If you interact with me on social media platforms, I may collect information that you make publicly available.
3. Why Do I Collect and Use Your Personal Information?
I collect and use your personal information for the following purposes:
To Provide Services: To book and manage your appointments, provide aesthetic treatments, and ensure your safety and well-being during treatments.
To Communicate with You: To send appointment confirmations, reminders, follow-up information, and respond to your enquiries and feedback.
For Business Operations: To manage my client records, process payments, maintain accurate accounts, and comply with my legal and regulatory obligations.
To Improve My Services: To understand client needs, gather feedback, and improve the quality of my services and website.
For Marketing (with your consent): To send you promotional offers, newsletters, or information about new services, but only if you have explicitly consented to receive such communications. You can opt-out at any time.
For Legal and Regulatory Compliance: To comply with health and safety regulations, professional standards, and other applicable laws in Queensland and Australia.
4. Disclosure of Personal Information
I will only disclose your personal information in the following circumstances:
To Juv'ae (Dapple OS): As detailed above, for the purpose of managing your appointments and client records through the Dapple OS system. Juv'ae will handle your data according to their own privacy policy.
To Payment Processors: To securely process your payments for services. I use reputable third-party payment gateways that are compliant with industry security standards.
To Professional Advisors: Such as accountants or lawyers, when necessary for legal or financial advice and management.
When Required by Law: If I am legally required to disclose your information, for example, to law enforcement agencies or regulatory bodies.
With Your Explicit Consent: For any other purpose not listed above, I will obtain your explicit consent before disclosing your personal information.
I will never sell or rent your personal information to third parties.
5. Cookies and Tracking Technologies
My website may use "cookies" and similar tracking technologies to enhance your experience and collect information about your Browse activities.
What are cookies? Cookies are small text files placed on your device by a website. They allow the website to remember your preferences, track your usage, and improve functionality.
How I use them: I may use cookies for purposes such as:
Remembering your preferences (e.g., language settings).
Analysing website traffic and user behaviour (e.g., which pages are most popular).
Improving website functionality and user experience.
Your choices: Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies or notify you when a cookie is being placed. However, please note that some features of my website may not function correctly if you disable cookies.
6. How I Store and Protect Your Personal Information
I take reasonable steps to protect the personal information I hold from misuse, interference, loss, unauthorised access, modification, or disclosure. These steps include:
Digital Security: Using secure servers, encryption, and access controls for digital information.
Physical Security: Maintaining physical security measures for any hard copy records.
Third-Party Security: Ensuring that any third-party service providers I use (like Juv'ae for Dapple OS) have robust security measures in place to protect your data.
Staff Training: Ensuring that I am aware of my privacy obligations and best practices for handling personal information.
While I strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. Therefore, I cannot guarantee absolute security.
7. Accessing and Correcting Your Personal Information
You have the right to:
Access: Request access to the personal information I hold about you.
Correction: Request that I correct any personal information I hold about you that is inaccurate, out-of-date, incomplete, irrelevant, or misleading.
To make an access or correction request, please contact me using the details provided below. I will respond to your request within a reasonable timeframe and, where possible, provide you with access to your information in the manner you request. I may charge a reasonable fee for providing access, particularly if the request is complex or involves extensive retrieval of old records.
8. Making a Complaint
If you believe that I have breached my obligations under the Privacy Act 1988 (Cth) or the Australian Privacy Principles, you have the right to make a complaint.
Please contact me in writing using the details below, outlining the nature of your complaint. I will investigate your complaint promptly and will endeavour to respond within 30 days. If you are not satisfied with my response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC).
9. Changes to this Privacy Policy
I may update this Privacy Policy from time to time to reflect changes in my practices, services, or legal requirements. Any changes will be posted on this page, and the "Last Updated" date at the top of the policy will be revised. I encourage you to review this Privacy Policy periodically to stay informed about how I am protecting your information.
10. Contact Me
If you have any questions about this Privacy Policy, my privacy practices, or if you wish to access or correct your personal information, please contact me via one of the contact methods on this site.
Thank you for trusting Beauty WithIn Aesthetics with your personal information.