Privacy Policy
Last Updated: 29 July 2026
Aesthete Wellness respects the privacy of every person who engages with our practice. This Privacy Policy explains how we collect, hold, use and disclose personal information across our locations, website, online store, booking channels and services.
We are a health service provider and handle sensitive health information as part of providing medical, aesthetic, skin, wellness and related services. We manage personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other laws and professional obligations that apply to our practice.
1. Who this policy applies to
This policy applies to T&J IRWIN HOLDINGS PTY LTD, ABN 46685246299, trading as Aesthete Wellness, and any related Aesthete practices or service expressly stated to be covered by this policy (together, “Aesthete”, “we”, “us” or “our”).
It applies when you visit our premises or website, reserve or attend an appointment, make an enquiry or purchase, complete a form, subscribe to communications, engage with us through social media, participate in photography or content, apply for a position, or otherwise interact with us.
Aesthete’s employees and personnel engaged to act on behalf of an Aesthete operating entity handle personal information under Aesthete’s authority, privacy controls and confidentiality requirements. Some medical or health services available through Aesthete are instead provided by a separate legal entity or independent practitioner engaged under a subcontracting, consulting or service arrangement. These independent providers are not Aesthete employees and have separate legal and professional responsibilities. The provider responsible for a service should be identified through the reservation, intake, consent or treatment documentation.
2. The information we collect
The information we collect depends on how you interact with us and may include:
Identity and contact information
- your name, date of birth, gender or pronouns, address, email address and telephone number;
- your emergency contact, representative, guardian or next of kin, where relevant;
- identity documents or identifiers where reasonably required to verify identity, process a request or meet a legal obligation;
Health and treatment information
- medical history, current and previous conditions, allergies, medications, pregnancy status and other information relevant to treatment safety or suitability;
- details of your presenting concerns, consultations, diagnoses where applicable, treatment plans, prescriptions, products, procedures, consent, progress, outcomes and aftercare;
- clinical notes, correspondence, referrals, reports, pathology or diagnostic information supplied by you or another authorised health provider;
- facial, skin or body photographs, videos, scans, measurements and images created through clinical imaging or analysis technologies;
- information about your wellbeing, lifestyle, sleep, nutrition, stress, performance, recovery and personal goals where relevant to a service you request;
Appointment, transaction and account information
- appointment history, communications, preferences, attendance, cancellations and payment status;
- purchase, delivery, billing, refund, gift card, loyalty or account information;
- payment information processed through our payment providers. We do not generally retain complete card details;
Website, device and marketing information
- IP address, browser and device type, operating system, approximate location, pages viewed, links selected, referring pages and session information;
- cookie, analytics, advertising and campaign interaction information;
- marketing preferences, subscription status, survey responses, reviews and interactions with our emails, SMS messages, website and social channels;
Other information
- telephone calls, emails, messages, forms and other correspondence with us;
- complaints, feedback, incidents and requests to exercise privacy rights;
- employment application, qualification, registration, reference and work-history information when you apply to work with us;
- CCTV footage if surveillance operates at a premises and appropriate signage is displayed;
If you provide information about another person, you must be authorised to do so and, where practicable, ensure they understand how we will handle it.
3. How we collect information
We may collect personal information:
- directly from you during enquiries, reservations, consultations, treatment, purchases, forms, calls, messages or other interactions;
- from a parent, guardian, authorised representative or person responsible for your care;
- from a referring or treating practitioner, pharmacy, pathology provider, hospital, specialist or other health service with your consent or where authorised by law;
- from our website, online store, Timely booking and practice-management system, cookies, analytics and communications platforms;
- from publicly available sources, professional registers, recruitment providers, referees or social platforms where relevant and lawful;
Where practicable, we collect information directly from you. You may interact with us anonymously or using a pseudonym where lawful and practicable, but we generally need accurate identifying and health information to provide treatment, maintain safe records, process transactions and respond to privacy requests.
4. Why we collect, use and disclose information
We may handle personal information to:
- respond to enquiries and assess whether our services are appropriate for you;
- provide consultations, treatment, products, health services, referrals, follow-up and continuity of care;
- create and maintain accurate health and treatment records;
- communicate about appointments, preparation, consent, aftercare, recalls, results, safety information and service changes;
- coordinate care with practitioners and providers involved in your treatment;
- process payments, orders, deliveries, returns, credits and accounts;
- operate, secure, maintain and improve our website, online store, systems, services and patient experience;
- manage quality assurance, training, professional supervision, audit, incident response, risk, insurance and legal obligations;
- send marketing communications where we have consent or are otherwise permitted by law;
- recruit team members and manage professional or commercial relationships;
- prevent, detect and investigate fraud, misuse, security threats or unlawful activity;
- establish, exercise or defend legal claims and respond to regulators, courts or law-enforcement bodies;
We generally use or disclose health information for the purpose for which it was collected, for a directly related purpose you would reasonably expect, with your consent, or as otherwise authorised or required by law.
5. Health information and clinical confidentiality
Health information is sensitive information under Australian privacy law. We only collect it where reasonably necessary for our functions and with your consent or another lawful authority.
Access to health records is limited to people who need the information for patient care, practice administration, safety, quality, legal compliance or another authorised purpose. Team members and service providers are expected to maintain confidentiality and access information only within the scope of their role.
We may disclose relevant health information to another practitioner or provider involved in your care when you have consented, when the disclosure is reasonably expected and directly related to your care, or when otherwise authorised by law. You may tell us if you do not want information shared with a particular provider, although this may affect our ability to safely provide or coordinate a service.
6. Independent medical entities and practitioners
Some medical and health services offered or coordinated through Aesthete may be provided by a separate medical entity or independent health practitioner (an “Independent Medical Provider”). An Independent Medical Provider is not an employee of Aesthete merely because the provider consults from an Aesthete location, appears through an Aesthete reservation channel or uses shared administrative systems.
Where necessary to assess, arrange or provide your care, an Independent Medical Provider and its authorised personnel may receive or be granted role-based access to relevant personal and health information held in Aesthete’s systems. Access is limited to information reasonably required for treatment, continuity of care, patient safety, administration or another purpose authorised by you or by law. Aesthete may also receive records or information from that provider for these purposes.
Each Independent Medical Provider is independently responsible for the medical or health services it provides, including its professional judgment, assessment, informed-consent process, prescribing, treatment decisions, treatment outcomes, clinical notes, professional registration, insurance and compliance with the laws and professional standards applying to that provider. It is also separately responsible for personal information that it collects or holds in its own right. Its privacy policy, collection notice and patient terms may apply in addition to this policy.
Aesthete remains responsible for personal information that it holds and for its own collection, use, disclosure, security and access controls. Engaging or sharing information with an Independent Medical Provider does not remove Aesthete’s own obligations under applicable privacy law, and does not remove the provider’s separate obligations.
If a privacy enquiry or complaint concerns both Aesthete and an Independent Medical Provider, we may coordinate with that provider to investigate and respond, subject to consent and applicable law. Concerns about a provider’s treatment or professional conduct should be directed to the provider identified in the relevant treatment documentation, although Aesthete may assist you to identify the correct contact.
7. Clinical photography, imaging and recordings
Clinical photographs, videos, scans and imaging may form part of assessment, treatment planning, consent, progress review, patient identification, practitioner communication and the clinical record. Where reasonably required for safe or effective treatment, declining clinical imaging may limit the services we can provide.
Clinical images will not be published on our website, social media, advertising, educational material, presentations or other external channels without separate express consent. Any external use will be explained through a specific consent process, including the proposed purpose and the extent to which you may be identifiable.
You may withdraw consent for future promotional or educational use by contacting us. Withdrawal will not invalidate a use already made in accordance with your consent, and we may need to retain the original image as part of your health record or to meet legal and professional obligations.
8. Artificial intelligence and automated technologies
We may use software-assisted or artificial intelligence features within clinical imaging, analysis, administration, communications or business systems. These tools may help organise information, identify patterns, support documentation or assist practitioners in evaluating information.
Technology does not replace professional judgment. Material treatment decisions remain subject to review by an appropriately qualified practitioner. We will not use health information to train a publicly available artificial intelligence model unless we have an appropriate legal basis, safeguards and any consent required by law.
9. When we disclose information
We may disclose personal information to:
- Aesthete employees and authorised personnel who require access for their role, and Independent Medical Providers, health practitioners, specialists, pharmacies, pathology or diagnostic services and other providers involved in your care;
- authorised representatives, guardians, carers or family members where you consent or the law permits;
- Timely and other practice-management, online booking, electronic health-record, secure messaging, cloud storage, IT, cybersecurity, communications and document providers;
- online store, website hosting, payment, finance, fraud-prevention, delivery and customer-support providers;
- analytics, advertising, email, SMS, survey and customer-relationship platforms, subject to your choices and applicable law;
- professional advisers, auditors, insurers, medical defence organisations, accreditation bodies and consultants;
- regulators, government agencies, courts, tribunals, law-enforcement bodies or other parties where required or authorised by law;
- a purchaser, successor or adviser in connection with a proposed or completed sale, restructure or transfer of all or part of the business, subject to appropriate confidentiality and privacy safeguards;
We do not sell health information. We do not disclose personal information for an unrelated third party’s direct marketing without consent or another lawful basis.
10. Overseas disclosure and storage
Aesthete’s primary practice data is stored in Australia. Some supporting service providers may nevertheless process limited information outside Australia or permit support personnel in other countries to access it. The relevant countries may vary as providers and hosting arrangements change and must be confirmed through Aesthete’s final systems audit.
Where personal information may be disclosed overseas, we take reasonable steps required by Australian privacy law to ensure it is handled appropriately. Overseas recipients may be subject to different privacy laws and, in some circumstances, foreign authorities may lawfully access information.
11. Website, cookies and analytics
Our website and online services may use cookies, pixels, software development kits and similar technologies. These tools can be necessary for site operation, security, reservations, carts and payments, and may also support preferences, performance measurement, analytics and advertising.
Depending on our configuration, information may be processed by our website and commerce platform, analytics services, search providers and advertising platforms. These providers may combine information about your activity with information they hold under their own privacy policies.
You can manage non-essential cookies through our cookie controls where available and through your browser or device settings. Blocking cookies may affect website functionality. Browser ‘Do Not Track’ signals are not applied consistently across the industry and our website may not respond to every such signal.
Links to external websites or services are provided for convenience. Their privacy practices are governed by their own policies, not this policy.
12. Direct marketing
With your consent, or where otherwise permitted by law, we may send information about Aesthete services, events, products, practitioners, education or offers by email, SMS, telephone, post or digital advertising.
You can opt out at any time by using the unsubscribe facility in a message or contacting us. We will action electronic marketing unsubscribe requests within the period required by law. Opting out of marketing will not stop service communications that are reasonably necessary for appointments, treatment, safety, transactions or legal obligations.
We do not assume that an enquiry or one-off purchase is consent to receive ongoing marketing where consent is required.
13. Security
We take reasonable technical, physical and organisational measures to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include role-based access, authentication controls, encryption where appropriate, secure systems, confidentiality obligations, staff training, audit and monitoring, backups, vendor assessment and secure destruction.
No storage or transmission method is completely secure. If a data breach occurs, we will contain and assess it and, where the Notifiable Data Breaches scheme or another law applies, notify affected individuals and the Office of the Australian Information Commissioner or other relevant regulator.
14. Retention and destruction
We retain personal information only for as long as reasonably required for patient care, continuity, legal and professional obligations, disputes, insurance, accounting, fraud prevention and legitimate business purposes.
Clinical records and images may need to be kept for minimum periods determined by applicable laws, professional standards, insurer requirements and the nature of the service. When information is no longer required, we take reasonable steps to securely destroy it or permanently de-identify it, unless retention is required or authorised by law.
De-identification or deletion requests may therefore not extend to information that must remain in a health record, transaction record, legal hold or backup retained under controlled procedures.
15. Accessing or correcting your information
You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Please contact our Privacy Officer using the details below.
We will verify your identity before releasing information. We may provide access in a suitable form, such as inspection or a copy, and may charge a reasonable fee for retrieval or copying where permitted. We will tell you before a fee applies.
Access may be refused or limited where permitted by law, including where disclosure would unreasonably affect another person’s privacy, pose a serious threat, prejudice legal proceedings or reveal commercially sensitive evaluative information. If we refuse access or correction, we will generally provide written reasons and available complaint options.
16. Privacy enquiries and complaints
If you have a privacy question, concern or complaint, contact our Privacy Officer in writing and include enough detail for us to understand and investigate the matter.
We aim to acknowledge a complaint within seven business days and provide an outcome within 30 calendar days where reasonably practicable. If more time is required, we will explain why and provide an updated timeframe.
If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at www.oaic.gov.au. Depending on the circumstances, another health complaints or professional regulator may also be able to assist.
17. Adults only
Aesthete is an adult-only practice and our services and website are intended for people aged 18 years and over. We do not knowingly collect personal information from a minor unless it is reasonably necessary, lawful and collected with appropriate authority. If you believe a minor has provided information without appropriate authority, contact us.
18. Changes to this policy
We may update this policy to reflect changes to our services, systems, providers, locations, legal obligations or information-handling practices. The current version will be published on our website with its effective date. Material changes may also be communicated through other appropriate channels.
19. Contact us
Privacy Officer
at Aesthete Wellness Pty Ltd
Address: 34 Duporth Avenue, Maroochydore QLD 4558
Email: contact@aesthetesunshinecoast.com.au
Telephone: 07 5379 3171
Website: https://aesthetewellness.com.au