What we hold, and why.

Health information, and why this policy applies

Skin treatment involves recording things about your skin and your health. Under the Privacy Act 1988, that is health information, and a business that provides a health service is covered by the Act no matter how small it is. So this is not a formality. Health information is held to a higher standard than an email address, and it is treated that way here.

What is collected, and where it goes

The enquiry form. Your name, email address, an optional phone number and whatever you write in the message. That is emailed straight to Megan’s inbox using Resend, an email delivery service. If you describe a skin concern, treat that as health information and know it lands in an ordinary mailbox.

The newsletter box. Your email address only, which is added to a Mailchimp audience. Every email carries an unsubscribe link that works immediately.

The details form. If you follow a link from a text message or an email asking you to update your details, that page collects your name, surname, email address, mobile number and postcode, and optionally your street address and suburb. It is emailed straight to Megan using Resend, and she copies it onto your client card in Timely. It is not added to any mailing list by that form, and it is not used for anything except reaching you about your appointments and, if you tick the box, the occasional offer.

Booking. Bookings are not taken by this website. The Book button hands you to Timely, her booking system, which collects your details under its own privacy terms and holds your appointment history and treatment notes.

In the studio. Consultation notes, skin history, treatment records and anything you tell Megan during an appointment. These are kept in Timely.

What this website does not do

There is no advertising pixel, no marketing tag, and nobody building a profile of you as you read. The site sets no cookies of its own, which is why you are not being asked to dismiss a cookie banner.

It does count visits. Vercel Web Analytics records that a page was viewed, roughly which country it was viewed from, and what kind of device it was on. It sets no cookies, collects nothing that identifies you, and cannot recognise you on another site or on your next visit. The counts exist so the business can tell which pages are worth keeping.

Your information is never sold, and it is never passed to anyone for their own marketing.

Who else can see it

Only the services needed to run the business: Resend to deliver email, Mailchimp for the newsletter, Timely for bookings and treatment records, Google Workspace for her email, and Vercel, which hosts the site and counts the visits described above. Each holds data under its own terms, and some store it outside Australia. They process it on her behalf and for no other purpose.

While the site is being built and maintained, her web contractor can reach the systems above in order to do that work.

How long it is kept

Health and treatment records are kept for at least seven years after your last visit, which is the standard expected of health service providers and the period her insurer requires. Newsletter subscriptions are kept until you unsubscribe. Enquiries that do not turn into an appointment are kept only as long as they are useful.

Seeing it, correcting it, deleting it

You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Email hello@zaharaskinandbody.com.au or call 0449 969 784. Megan will respond within 30 days. There is no charge.

One honest limit: clinical records cannot always be deleted on request, because a health provider has to keep them for the retention period above. If that applies, she will tell you plainly rather than quietly ignoring the request.

If something goes wrong

If there is a data breach likely to cause you serious harm, you and the Office of the Australian Information Commissioner will be told, as the Notifiable Data Breaches scheme requires.

If you are unhappy with how a privacy matter has been handled, raise it with Megan first at hello@zaharaskinandbody.com.au. If that does not resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this page

If what the site collects changes, this page changes with it and the review date above is updated.