Privacy Policy

For enquiries, we collect the contact details, enquiry category, message, and contact preference you choose to provide.

For consultation bookings, we collect your name, email address, phone number, treatment interest, consultation type, selected appointment time, payment status, and the consent acknowledgements required to process the booking.

You may optionally upload up to three supported files for the clinic team to review. Please provide only information that is relevant to your consultation request. Do not use the booking service for urgent or emergency medical information.

For security and abuse prevention, the service may record a one-way digest of network information and a digest of the browser user agent. Raw IP addresses are not stored in booking or enquiry records.

The website records your agreement to the privacy notice, booking terms, deposit and cancellation policy, and optional file processing. It also records the typed name, policy versions, timestamp, and evidence digests associated with that agreement.

This is booking and data-processing consent only. It is not consent to receive a treatment. Any clinical assessment and treatment consent must be completed separately with the practitioner.

We use enquiry information to respond to you. We use booking information to calculate the amount due, reserve a provisional time, process payment, create the appointment, send confirmation, create or update the clinic client record, and prepare the clinic-owned working folder for the consultation.

Your information is not sold or added to marketing lists without separate permission.

Supabase provides private database and file storage. Stripe processes consultation payments. Google Workspace provides the clinic calendar, online meeting link where applicable, and clinic-owned client folders. Resend delivers transactional email. Upstash supports request rate limiting.

Each provider processes information under its own contractual and privacy terms. Payment card details are entered directly into Stripe Checkout and are not stored by this website.

This website uses only essential functional cookies required for it to operate correctly. No tracking or analytics cookies are currently deployed.

If analytics or marketing tools are added before production launch, this notice will be updated and a cookie consent mechanism will be implemented. See our Cookie Policy for details.

Optional booking uploads are held in private storage while checkout is pending. If checkout expires without payment, the service removes those private files. After a paid booking, authorised clinic staff may copy the files and booking consent receipt into the clinic-owned Google Workspace folder for the client.

Booking, consent, payment-reference, calendar, and audit records are retained for the period required by the clinic's approved operational, legal, tax, and clinical record-retention policies. The clinic must review and approve those periods before enabling live booking.

Depending on the privacy law that applies to you and the clinic, you may have rights to request access to, correction of, or deletion of personal information and to raise a complaint with the relevant privacy regulator.

To exercise any of these rights, or to ask a privacy-related question, please contact the clinic by email at bookings@royalcosmeticclinic.com.au.

This privacy notice may be updated as the clinic's services and data practices evolve. The date at the top of this page reflects the most recent revision.