Privacy Policy

How Alata Aesthetics collects, uses, stores and protects personal and health information.

Privacy Policy

Last updated: 22 September 2026

Alata Nexus Pty Ltd (ABN 34 701 526 338), trading as Alata Aesthetics (“Alata Aesthetics”, “we”, “us” or “our”), respects your privacy and is committed to handling personal and health information responsibly.

This policy explains how we collect, use, store and disclose information when you visit our website, contact us, book an appointment, purchase a product or receive services from our clinic.

1. Privacy laws

We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply. As a Victorian health service provider, we also handle health information in accordance with the Health Records Act 2001 (Vic) and the Health Privacy Principles.

2. Information we may collect

Depending on your interaction with us, we may collect:

  • identity and contact details, such as your name, date of birth, address and email address;
  • appointment, consultation and treatment information;
  • health information relevant to your care, including medical history, medications, allergies, pregnancy or breastfeeding status, previous treatments and contraindications;
  • clinical records, consent forms, treatment plans, progress notes and photographs;
  • transaction and payment information (payment card details may be processed securely by our payment provider rather than stored by us);
  • communications, enquiries, feedback and marketing preferences; and
  • website information such as your device, browser, IP address, pages viewed and cookie or analytics data.

3. How we collect information

We usually collect information directly from you through online or paper forms, bookings, consultations, purchases, email, telephone or in-person discussions. With your consent, or where permitted by law, we may also receive information from an authorised representative, treating practitioner, prescribing clinician, service provider or another relevant third party.

4. Why we collect and use information

We may collect, use and disclose information to:

  • respond to enquiries and manage bookings;
  • assess treatment suitability, provide care and monitor outcomes;
  • maintain accurate clinical and business records;
  • process payments, orders and refunds;
  • provide treatment instructions, follow-up and safety communications;
  • meet legal, professional, regulatory, insurance and record-keeping obligations;
  • manage complaints, incidents and quality improvement;
  • operate, secure and improve our website and services; and
  • send marketing communications where you have consented or where otherwise permitted by law.

If required information is not provided, we may be unable to assess your suitability, provide a treatment, complete a booking or respond to your request.

5. Health information and consent

Health information is sensitive information. We collect it when it is reasonably necessary to provide or manage your care and with your consent, or as otherwise permitted or required by law. Please provide complete and accurate information and tell us when it changes.

Clinical photographs may form part of your health record. We will seek separate consent before using identifiable photographs for marketing, education or social media.

6. Disclosure to other parties

We may disclose information, where reasonably necessary, to treating or prescribing health practitioners; booking, practice-management, telehealth, payment, website, IT, cloud-storage and communication providers; professional advisers, insurers and auditors; regulators, courts or law-enforcement bodies; or another party where you consent or disclosure is permitted or required by law.

We do not sell or rent your personal information.

7. Overseas service providers

Some technology or service providers may store or process information outside Australia. The countries involved can change according to the providers we use. Where required, we take reasonable steps to ensure overseas recipients handle personal information appropriately. You may contact us for more information about relevant providers.

8. Storage, security and retention

We use reasonable administrative, technical and physical safeguards to protect information from misuse, interference, loss and unauthorised access, modification or disclosure. No electronic system is completely secure. We retain records for as long as required for clinical, legal, regulatory, insurance and business purposes, then securely delete or de-identify them where appropriate.

If a data breach occurs, we will assess and respond to it in accordance with applicable notification requirements.

9. Access and correction

You may request access to personal or health information we hold about you, or ask us to correct information that is inaccurate, incomplete, out of date or misleading. We may need to verify your identity. In limited circumstances permitted by law, access may be refused or restricted; if so, we will explain the reason where required.

10. Website cookies and links

Our website may use cookies and analytics tools to support functionality, security and performance. You can restrict cookies in your browser, although parts of the website may not work as intended. Links to third-party websites are governed by those sites’ own privacy practices.

11. Marketing communications

We may send marketing communications only where we have your consent or are otherwise permitted to do so. You can unsubscribe using the link in a message or by contacting us. We may still send non-marketing messages that are necessary for your appointments, treatment or account.

12. Privacy enquiries and complaints

If you have a privacy question, wish to request access or correction, or want to make a complaint, please contact us:

Alata Aesthetics
Alata Nexus Pty Ltd
1/13 Scanlan Street, Bentleigh East VIC 3165
Email: alataaesthetics@gmail.com

Please provide enough detail for us to investigate. We will acknowledge and respond within a reasonable time. If you are not satisfied, you may contact the Office of the Australian Information Commissioner or the Victorian Health Complaints Commissioner.

13. Changes to this policy

We may update this policy when our practices, service providers or legal obligations change. The current version will be published on this page with its revision date.