Privacy policy.

Glow Cosmetique is a registered nurse–led skin clinic at 23 Ebony Cl, Springvale VIC 3171, operated by Glow Cosmetique Queensland Pty Ltd ABN 82 677 670 094. Because we hold health information, we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This policy covers the clinic, this website, our online store and our client records. It says what we collect, why, where it is held, and what you can do about it.

Only what your care and your bookings need:

• Contact details. Name, phone number, email address, and date of birth, collected when you enquire or book.
• Health information. Your skin history, relevant medical history, clinical notes from consultations, your written skin plan, and any photographs taken as part of your record, with your consent.
• Payment records. Records of what was paid and when. Card details are held by Stripe, our payment processor, and never by the clinic — we cannot see your card number.
• Website data. This site runs on HubSpot, which sets its own cookies to remember your session and to count visits and page views. We use that to see which pages are read, not to build a profile of you. If we ever add another analytics or advertising tool, this section is updated before it goes on.

Health information is sensitive information under the Privacy Act, and it is treated that way. We collect it only with your consent, and only where it is needed for your care.

Four reasons, and nothing outside them:

• To assess your skin and prepare your written plan.
• To carry out treatments and keep the clinical record that supports them.
• To manage appointments, payments and enquiries.
• To meet our legal and professional obligations.

Two things we do not do. We do not sell personal information — to anyone, ever. And we do not use your health information for marketing.

Your record is held in HubSpot, our client record system, in HubSpot’s Australian data-centre region. That record — your details, consultation notes and written plan — is the one we own and rely on.

If you take part in the routine and photo record, those entries are captured through The Skin Collective, an independent software provider we use for that purpose. It processes those records on our behalf. Responsibility for your information stays with us, and the clinical record stays in our own system.

Some of your information is stored overseas, and we would rather say so plainly than bury it.

• Your clinical record is held in HubSpot, on Australian servers. HubSpot is a United States company, so its staff can reach that data from outside Australia when supporting the system.
• The routine and photo record is held by The Skin Collective, whose database and image storage sit in Japan. Its application is served from a global network, and the emails it sends you are delivered by a provider in the United States.
• Where a written routine message is drafted with the help of an AI tool, the details of that routine and a short summary of your skin are sent to that provider in the United States to produce the draft. A nurse writes or edits what you actually receive.

We take reasonable steps to make sure anyone holding your information overseas protects it to the standard the Australian Privacy Principles require, and we stay responsible for it either way. If you would prefer your information not be handled outside Australia, tell us — some of it we can limit, and we will be honest about what we cannot.

Nobody, with three exceptions:

• With your consent. For example, if something in your consultation needs medical review, we will suggest you see your GP — and nothing goes to a GP without your consent.
• Our providers. The systems named above, to the extent they hold or process records for us.
• Where the law requires it.

Yes. Ask, and we will show you. You can request a copy of your record, and ask us to correct anything that is inaccurate or out of date. Your written skin plan is already yours — you leave the consultation holding it.

Requests go to info@glowcosmetique.com.au or 0466 310 045. We respond within 30 days. There is no charge — not for asking, and not for the copy. Your record is yours.

Start with us. Raise it by phone on 0466 310 045 or in writing to info@glowcosmetique.com.au, and we will respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au, or 1300 363 992.

If a data breach occurs that is likely to cause serious harm, we will notify you and the OAIC, as the Notifiable Data Breaches scheme requires.

Privacy questions, access requests and corrections all come to the clinic directly. No form, no portal — a phone call or an email is enough.