Privacy Policy

Privacy policy overview

Effective April 19, 2026

Platinum Ko Pty Ltd (trading as Platinum Cosmetic Skin Clinic, ABN 91 692 929 730) respects your privacy and is committed to protecting your personal and health information.

This policy explains what information we collect, how we use it, who we share it with, and how you can access or correct it. It is written to align with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and includes the additional disclosures we are required to make about our use of third-party platforms and tools to deliver our services.

Who We Are

In this policy, "we", "us", and "our" refer to Platinum Cosmetic Skin Clinic (PCSC).

  • Hawker Clinic. 72 Hawker Pl, Hawker ACT 2614, Australia

Contact for privacy matters:

Email: privacy@platinumcostmeicskinclinic.com.au

Phone: 0424 833 790

Platinum Ko Pty Ltd (ABN 91 692 929 730) trading as Platinum Cosmetic Skin Clinic (“we”, “us”, “our”)

Last updated: 25 June 2026

Our commitment to your privacy

Platinum Cosmetic Skin Clinic is committed to protecting your privacy and handling your personal information openly and transparently. Because we provide health services and collect health information, we are bound by the Privacy Act 1988 (Cth) (the Privacy Act) and the 13 Australian Privacy Principles (APPs), regardless of our business size. As health service providers operating clinics in the Australian Capital Territory and New South Wales, we also have obligations under the Health Records (Privacy and Access) Act 1997 (ACT) and the Health Records and Information Privacy Act 2002 (NSW) and its Health Privacy Principles (HPPs).

This policy explains what personal information we collect, how we collect, use, store and disclose it, how you can access or correct it, and how to make a privacy complaint. It applies to all personal information we collect through our clinics, our website (platinumcosmeticskin.com.au), our online booking system, our online shop, and our other interactions with you.

By using our services, website or online shop, or by providing us with your personal information, you consent to your personal information being handled as described in this policy.

What is personal and sensitive information

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Sensitive information is a special category of personal information that includes health information. It has a higher level of protection under the Privacy Act and we generally only collect it with your consent.

What information we collect

The kinds of personal information we collect include:

  • Identity and contact details – your name, date of birth, postal and email address, and phone number.
  • Health and sensitive information – your medical history, current medications, allergies, skin and aesthetic concerns, treatment history, clinical notes, consent forms, and (where you provide them) photographs taken for clinical assessment and record-keeping.
  • Appointment and service information – the services you book, attend or enquire about, and your preferences.
  • Payment information – details needed to process payments and purchases (card and transaction details are handled by our payment and booking providers, not stored by us in full).
  • Online shop information – orders, delivery details and purchase history when you buy from platinumbyapril.shop.
  • Marketing preferences – your consent and preferences for receiving promotions, newsletters and reminders by email or SMS.
  • Website and technical information – your IP address, device and browser type, pages viewed, and information collected through cookies and analytics.

How we collect your information

We collect personal information in a number of ways, including:

  • directly from you – when you contact us, complete forms, attend a consultation or treatment, or make an enquiry;
  • through our online booking system (provided by Timely);
  • through our online shop;
  • when you subscribe to our marketing communications;
  • through our website and social media pages; and
  • from third parties where you have consented or where it is otherwise permitted by law (for example, a referring practitioner).

Wherever reasonable and practicable, we collect personal information directly from you. We only collect sensitive information (including health information) with your consent and where it is reasonably necessary for our functions or activities, unless an exception under the Privacy Act applies.

If we receive personal information about you that we did not solicit, we will determine whether we could have collected it under the Privacy Act. If not, and the information is not contained in a Commonwealth record, we will destroy or de-identify it as soon as practicable where it is lawful and reasonable to do so.

Anonymity and pseudonymity

You have the option of dealing with us anonymously or by using a pseudonym for general enquiries where it is lawful and practicable to do so. However, this is usually not practicable where you wish to receive a clinical consultation or treatment, as we need to identify you to provide safe, appropriate care and to keep accurate health records.

Why we collect, hold, use and disclose your information

We collect, hold, use and disclose your personal information for purposes including:

  • providing consultations, treatments and aftercare, and assessing your suitability for treatment;
  • creating and maintaining your clinical records;
  • managing bookings, appointments, reminders and reviews;
  • processing payments and online shop orders;
  • responding to your enquiries and communicating with you;
  • sending you marketing communications where you have consented;
  • improving our services and website;
  • meeting our legal, regulatory, insurance and record-keeping obligations; and
  • other purposes you would reasonably expect, or to which you have consented.

We will only use or disclose your personal information for the purpose for which it was collected, for a directly related purpose you would reasonably expect, or where you have consented or it is otherwise permitted or required by law.

We do not adopt, use or disclose government related identifiers (such as a Medicare number or tax file number) as our own means of identifying you, except where permitted or required under the Privacy Act.

Who we may disclose your information to

We may disclose your personal information to:

  • our staff and registered practitioners involved in your care;
  • service providers who help us operate our business, including our booking system provider (Timely), online shop and payment providers, IT and data hosting providers, email/SMS marketing platforms, and professional advisers;
  • other healthcare providers involved in your care, with your consent;
  • our insurers and legal advisers; and
  • government agencies, regulators or other parties where required or authorised by law.

We require our service providers to handle your personal information consistently with the Privacy Act. We do not sell your personal information.

Disclosure of information overseas

Some of our service providers store or process information outside Australia, which means your personal information may be disclosed overseas. In particular:

  • our online booking provider (Timely) is based in New Zealand and may store information there or in other locations;
  • our online shop, payment, email/SMS and analytics providers may store or process information in countries including the United States and other locations where those providers operate.

Before disclosing personal information overseas, we take reasonable steps to ensure recipients handle your information in a manner consistent with the APPs, or rely on an exception permitted under the Privacy Act (such as your consent).

Direct marketing

We may use your personal information to send you marketing communications, such as promotions, offers, newsletters and clinic updates, by email or SMS, where you have consented or where it is otherwise permitted under the Privacy Act.

Every marketing message we send will include a simple way to opt out (such as an unsubscribe link or reply instruction). You can also opt out at any time by contacting us using the details below. We will action your request promptly. We do not use sensitive information for direct marketing without your consent.

Accessing and correcting your information

We take reasonable steps to ensure that the personal information we collect, use and disclose is accurate, up to date, complete and relevant. You can help us by letting us know if your details change.

You have the right to request access to the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, please contact us using the details below. We may need to verify your identity before providing access. We will respond within a reasonable period. In limited circumstances we may decline a request as permitted by law, in which case we will explain our reasons in writing and how you can complain.

There is no charge to make a request, although we may charge a reasonable fee for giving access (for example, to cover the cost of retrieving and copying records).

How to contact us

If you have any questions about this policy, or wish to access or correct your information, please contact our Privacy Officer:

Privacy Officer – Mirka and Jan Koudelka
Platinum Ko Pty Ltd trading as Platinum Cosmetic Skin Clinic
Shop 10, 72 Hawker Place, Hawker ACT 2614
Email: mirka@platinumcosmeticskin.com.au
Phone: 0424 833 790

For complaints about how we handle your health information, you can also contact the relevant State or Territory regulator:

  • Information and Privacy Commission NSW (IPC) – for health information handled at our New South Wales (Queanbeyan) clinic. Website: www.ipc.nsw.gov.au, Phone: 1800 472 679.
  • ACT Human Rights Commission – for health information handled at our Australian Capital Territory (Hawker) clinic. Website: www.hrc.act.gov.au.

Data Security

We take reasonable steps to protect your information from misuse, loss, unauthorised access, modification, or disclosure. These steps include:

  • Secure storage of physical and electronic records
  • Password-protected access to our business management systems with role-based access controls
  • Encrypted connections (HTTPS / TLS) for data we send to and receive from our website
  • Encryption at rest for the customer data held by our platform provider
  • Staff training on privacy and confidentiality
  • Regular review of our data handling practices and the data handling practices of the providers we depend on

No system is perfectly secure. If a data breach affecting your information occurs and we assess it is likely to result in serious harm to you, we will follow the Notifiable Data Breaches Scheme under Part IIIC of the Privacy Act 1988 (Cth) — notifying you and the Office of the Australian Information Commissioner where the threshold is met, and taking steps to contain and remediate the breach.

How We Communicate With You

We may contact you by email, SMS, or WhatsApp where you have given us your details and consented to receive those communications, or where the message is a transactional one you would reasonably expect (for example, a booking confirmation or an order receipt). You can stop receiving marketing communications at any time:

  • Email. Use the unsubscribe link at the bottom of any marketing email we send.
  • SMS. Reply STOP to any marketing SMS you receive from us. We will record your opt-out and stop sending marketing SMS to that number.
  • WhatsApp. Block our business number from your WhatsApp app, or reply asking us to remove you, and we will stop sending you WhatsApp messages.

Transactional messages (booking confirmations, order receipts, appointment reminders for services you have engaged us to provide) continue regardless of your marketing preferences because they are necessary to deliver the service you have engaged us for. If you no longer want to receive those, please tell us so we can pause the underlying service.

Our Use of the Hixel Platform

Our website, booking system, online storefront, and customer messaging are delivered using the Hixel platform, operated by Hexonova Pty. Ltd. trading as Hixel. Hixel acts as our data processor for the information you submit through our site and the messages we exchange with you through our channels — Hixel handles that information on our instructions and under a written agreement.

For more detail about how Hixel processes that information on our behalf — including where it is stored, the sub-processors Hixel uses, and Hixel's commitments around AI-assisted features (next section) — see Hixel's privacy policy. Nothing in Hixel's policy overrides our obligations to you under this policy or the Privacy Act.

AI-Assisted Tools

We use AI-assisted features built into the Hixel platform to help us work faster — for example, to draft email or SMS templates, suggest content, qualify enquiries, and pre-flight outbound messages for compliance with carrier rules before we send them. These features are powered by a third-party large-language-model provider (currently Microsoft Azure AI Foundry, also known as Azure OpenAI Service) and are operated by Hixel on our behalf.

We only include the information that is needed for the AI tool to do its job. The AI provider's commercial terms commit that the inputs we send are not stored beyond the immediate request and are not used to train AI models. Some of the AI processing happens in Microsoft data centres outside Australia under the provider's Global Standard service tier — this cross-border disclosure is made for the purposes of Australian Privacy Principle 8. AI output is reviewed by a human (us) before it is sent to you, used, or relied on.

Cookies and Our Website

Our website uses cookies, scripts, and similar technologies to help it function, to understand how it is used, and to keep it safe. The specific tools enabled on our site depend on the choices we have made — open the cookie consent control on any page of our site to see which categories are active and to change your preferences. The categories of tool we may enable are listed below.

Analytics and behaviour tools (when enabled)

  • Google Analytics. A web analytics service provided by Google LLC. Helps us understand how visitors use our website (for example, which pages are most popular and how people navigate between them). It uses cookies and may collect information including pages visited, time on site, referring URL, and anonymised usage patterns. Google Analytics data is processed in accordance with Google's privacy policy at policies.google.com/privacy.
  • Meta Pixel (Facebook Pixel). An advertising and analytics tool provided by Meta Platforms, Inc. Helps us measure the effectiveness of our advertising and understand the actions visitors take on our site. May collect information about your device, browser, IP address, and the pages you view. This information may be shared with Meta and used for advertising personalisation on Facebook and Instagram. Meta's privacy policy is available at facebook.com/privacy/policy.
  • Microsoft Clarity. A user-behaviour analytics service provided by Microsoft Corporation. Records session replays and heatmaps to help us understand how visitors interact with our website. Sensitive form fields (for example, payment details) are masked by default. Microsoft's privacy policy is available at privacy.microsoft.com/privacystatement.

Technical information we collect

  • IP addresses. We store visitor IP addresses temporarily to protect the website from abuse (for example, to rate-limit requests and to protect against denial-of-service attacks). We also store IP addresses associated with contact form submissions so that we can investigate if a form is misused. IP addresses are retained only for the period necessary for these security purposes.
  • Approximate location. Our website may resolve your approximate location (typically from your IP address) to offer location-relevant information, such as directing you to your nearest location. This does not track your precise GPS location unless you explicitly grant that permission in your browser.

Third-party tools and cross-border disclosure

Where the analytics or pixel tools above are enabled on our site, they are operated by Google, Meta, or Microsoft. These providers are based outside Australia, and some of the data collected through these tools may be processed on servers in the United States and other countries. Where any of these tools is active on our site, by using our site you acknowledge that your interaction data may be transferred to and processed in those jurisdictions.

Managing cookies

Most web browsers allow you to control cookies through your browser settings, including blocking or deleting cookies. You can also adjust the categories of non-essential tool you allow through the cookie consent control on every page of our site. Note that blocking cookies may affect some functionality on our website.

Complaints

If you believe we have mishandled your personal information, please contact us first at privacy@platinumcostmeicskinclinic.com.au. We take complaints seriously and will respond within 30 days.

If you are not satisfied with our response, you can make a complaint to the Office of the Australian Information Commissioner (OAIC):

  • Website: oaic.gov.au
  • Phone: 1300 363 992
  • Post: GPO Box 5288, Sydney NSW 2001

Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. The updated policy will be published on our website with the "last reviewed" date shown below.

For significant changes, we will notify existing clients by email where appropriate.


This policy was last reviewed on August 3, 2026.