Effective Date: 2 March 2026
Version: 1.0
Perpetua Cosmetic Medicine (“PCM”, “we”, “us”, or “our”) is a trading name of PCI Company Pty Ltd (ACN 626 316 961). We are committed to protecting the privacy and confidentiality of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and otherwise handle your personal information, including sensitive health information, in connection with our website and cosmetic medicine services.
This Privacy Policy is prepared in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Health Records and Information Privacy Act 2002 (NSW) (HRIP Act). By accessing our website or engaging our services, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy.
PCM is a cosmetic medicine practice operating in New South Wales, Australia, providing cosmetic injectable treatments and related services. Our registered entity, PCI Company Pty Ltd, is the data controller responsible for the personal information we collect in the course of providing our services.
We may collect and hold the following categories of personal information about you, depending on the nature of your interaction with us:
Health information is classified as sensitive information under the Privacy Act and the HRIP Act and is subject to additional protections. We may collect:
We may collect personal information from third-party sources where it is necessary for us to provide our services or is otherwise permitted by law. These sources include:
When you visit our website, we may automatically collect certain technical information about your device and usage through cookies, web beacons, and similar technologies. Please refer to Section 10 of this Privacy Policy for further details.
We collect, hold, use, and disclose your personal information only for the purposes for which it was collected, or for a related secondary purpose that you would reasonably expect. The primary purposes for which we collect and use your information include:
With your consent, we may use your contact details to send you information about our services, promotions, and updates. You may withdraw your consent to receive marketing communications at any time by contacting us or using the unsubscribe link in our emails. We will not use your health information for direct marketing purposes without your explicit consent.
Health information is treated as sensitive information and is subject to heightened privacy protections under Australian law. We will only collect, use, and disclose your health information:
Your health information will be accessible only to PCM practitioners and staff who require it for the direct purpose of your care, treatment, and clinical record-keeping. We maintain strict access controls and confidentiality obligations for all personnel who handle health information.
Clinical photographs taken for the purposes of treatment planning and outcome documentation will be stored securely and will not be used for any promotional or marketing purpose without your separate, explicit written consent.
We do not sell, rent, or trade your personal information to third parties. We may, however, disclose your personal information in the following circumstances:
We engage trusted third-party service providers who assist us in operating our business. These providers are contractually bound to handle your information in accordance with Australian privacy law and are permitted to use your information only for the specific purposes we have engaged them. Such providers may include:
With your consent, or where necessary for the continuity of your care, we may disclose relevant health information to your treating general practitioner or other health professionals involved in your care.
We may disclose your personal information where required or permitted by law, including:
In the event of a sale, merger, acquisition, or restructure of our business, your personal information may be transferred to a successor entity, subject to that entity assuming our obligations under this Privacy Policy and applicable law.
In any other circumstance, we will only disclose your personal information to third parties with your prior consent.
We endeavour to store and process your personal information within Australia. However, some of our third-party service providers may store or process data on servers located overseas. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure those recipients handle your information in a manner consistent with the Australian Privacy Principles.
By using our website and services, you consent to your personal information being transferred to and processed in countries outside Australia, where applicable, in accordance with the terms of this Privacy Policy.
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, loss, destruction, alteration, or misuse. Our security measures include:
Notwithstanding these measures, no method of data transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your information. If you become aware of any security concerns, please contact us immediately.
In the event of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with our obligations under the Notifiable Data Breaches scheme.
We will retain your personal information for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, professional, or reporting requirements.
Health records in New South Wales are subject to mandatory retention requirements under the Health Records and Information Privacy Act 2002 (NSW) and the relevant guidelines of AHPRA and the Medical Board of Australia. Generally, adult health records must be retained for a minimum of seven (7) years from the date of the last entry, and records relating to minors must be retained until the patient reaches the age of 25 years, or for a minimum of seven (7) years from the date of the last entry, whichever is later.
When your personal information is no longer required, we will take reasonable steps to securely destroy or de-identify it.
Our website uses cookies and similar technologies to enhance your browsing experience, understand how our website is used, and improve our services. Cookies are small text files placed on your device by your web browser.
You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For more information about cookies and how to manage them, please visit www.allaboutcookies.org.
Under the Privacy Act 1988 (Cth) and the HRIP Act 2002 (NSW), you have the following rights in relation to your personal information:
You have the right to request access to the personal information we hold about you. We will respond to access requests within a reasonable timeframe and in accordance with our obligations under applicable privacy law. In certain limited circumstances, we may decline to provide access (for example, where providing access would be unlawful or would unreasonably impact the privacy of another individual), in which case we will provide written reasons for our decision.
If you believe that any personal information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, you may request that we correct it. We will take reasonable steps to correct the information and will notify any third parties to whom we have disclosed the information, where appropriate.
Where we rely on your consent to process your personal information (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.
You have the right to make a complaint about how we handle your personal information. Please refer to Section 14 of this Privacy Policy for details of our complaints process.
To exercise any of the above rights, please contact us using the contact details set out in Section 13 of this Privacy Policy. We may require you to verify your identity before processing your request.
Our services are intended for individuals who are at least eighteen (18) years of age. We do not knowingly collect personal information from individuals under the age of 18 without the consent of a parent or legal guardian. If you believe that we have inadvertently collected information from a minor, please contact us immediately so that we may take appropriate steps.
If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal information, please contact our Privacy Officer at:
Practice: Perpetua Cosmetic Medicine
Attention: Privacy Officer
Email: hello@perpetua.com.au
We will acknowledge receipt of your request or complaint within five (5) business days and will endeavour to resolve the matter within thirty (30) days.
If you believe we have breached the Australian Privacy Principles or the HRIP Act, you may make a complaint to us in the first instance using the contact details in Section 13 above. We take all privacy complaints seriously and will investigate your complaint promptly and fairly.
If you are not satisfied with our response to your complaint, or if we fail to respond within thirty (30) days, you may refer your complaint to:
Office of the Australian Information Commissioner (OAIC):
Information and Privacy Commission NSW (IPC NSW) (for health records complaints in NSW):
We reserve the right to update or amend this Privacy Policy at any time to reflect changes to our practices, legal obligations, or regulatory requirements. We will post the updated Privacy Policy on our website with a revised effective date. Your continued use of our website or services following any such amendment constitutes your acceptance of the updated Privacy Policy.
We encourage you to review this Privacy Policy periodically to remain informed of how we protect your information.
