Privacy Policy · Regenerate

Effective date: 28 October 2026

1. About this policy

This Privacy Policy explains how Regenerate Skin & Hair Clinic(“we”, “us”, “our”) collects, uses, discloses and protects personal information when you use our website, contact us, book an appointment or visit the clinic at 443 Bell St, Pascoe Vale South VIC 3044.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles and, because we provide health-related services, the Health Records Act 2001 (Vic).

2. The information we collect

We collect only the information we need to respond to you and to provide our services.

Enquiries. Your name, email address, phone number (if provided), the area you are interested in and your message.
Online bookings. Your name, email address, phone number, the treatment you choose, your appointment date and time, and anything you add in the optional notes.
Health information. Health information is “sensitive information”. We collect it only with your consent and only to provide safe and suitable care — for example details about your skin, medical history, medications or previous treatments, and clinical notes or photographs taken with your consent. Please share only what is needed in website forms; we will ask for anything further at your consultation.
Payment receipts. When you pay us (for example by bank transfer) and we email you a receipt, we record your name, email address, the service, the amount received, the payment date and the payment method, and sometimes an internal payment reference. We do not collect or store your bank account or card details to issue receipts.
Website use (only with your consent). If you select “Accept” on our cookie banner, Google Analytics collects information about how you use our website, such as the pages you visit, how you arrived, your general location (city or region), and your device and browser. We do not send your name, contact details, booking details, treatment choices or any health information to Google.

You may make a general enquiry by phone without identifying yourself or by using a pseudonym. To book or receive treatment we need your name and contact details.

3. How we collect information

We collect personal information directly from you — through our website forms, by phone (1800 866 888), by email and in person at the clinic. Online bookings are recorded in the clinic's own Microsoft Bookings calendar, and we send booking confirmations from our reception mailbox. Payment receipts are prepared by authorised clinic staff once they have confirmed your payment, and are emailed from our reception mailbox.

4. How we use your information

to respond to your enquiries;
to arrange, confirm, change and manage your appointments, including sending booking confirmations;
to issue receipts for payments you make, and to keep records of them;
to provide consultations and treatments safely and to keep appropriate clinical records;
to run the clinic, including administration, quality and safety;
with your consent, to understand how our website is used so we can improve it; and
to meet our legal obligations.

Marketing. We will only send you marketing messages if you have agreed to receive them, and you can unsubscribe at any time. We never use health information for marketing.

5. Cookies

Analytics cookies (optional). Google Analytics sets cookies (_ga, _ga_…) only after you select “Accept”. If you select “Reject”, Google Analytics is not loaded. Google signals and advertising personalisation are switched off, and we do not use the Meta (Facebook) Pixel or other advertising tracking on our website.
Changing your choice. Use “Cookie settings” at the bottom of any page. If you withdraw consent, Google Analytics stops and its cookies are deleted. We store your choice in your browser so we do not ask on every page.
Map. Our location section shows an embedded Google Map. When it loads, Google may set its own cookies and receive your IP address under Google's privacy policy.
Staff sign-in. Our website administration area uses a secure sign-in cookie for clinic staff only.

6. Who we share information with

We do not sell personal information. We share it only as needed to provide our services, with:

Microsoft (Microsoft 365 and Microsoft Bookings) — to record bookings, to send and receive enquiry and confirmation emails, and to email payment receipts. Our Microsoft 365 services are provided through a Microsoft 365 organisation account named HTN Lawyers, which we share. Our bookings are kept in Regenerate's own Microsoft Bookings calendar and our email in Regenerate's own mailboxes, managed by people authorised by the clinic;
Vercel — which hosts our website and processes form submissions;
Google — Google Analytics (only if you accept analytics cookies) and the embedded Google Map;
Upstash — which stores our website settings, aggregated business reports and our records of issued payment receipts. Names and email addresses in receipt records are encrypted before they are stored, and no health information is stored there;
NVIDIA — which prepares written summaries of aggregated, non-identifying business figures. No customer or health information is sent to NVIDIA;
other service providers who help us run the clinic, who may use the information only for that purpose; and
our practitioners and staff who need it to care for you, and others where you consent or where the law requires or permits it.

We may advertise on Facebook and Instagram and receive aggregated advertising reports from Meta. Our website does not share your details with Meta.

7. Information stored or handled overseas

Some of our service providers store or process information outside Australia. Our website's servers (Vercel) and Google Analytics are based in the United States, and other providers, including Microsoft, may store information in Australia or overseas. We take reasonable steps to ensure they protect personal information consistently with the Australian Privacy Principles.

8. Keeping information secure

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. Our website uses encrypted connections (HTTPS), and access to client information is restricted to authorised people. Receipt records can only be viewed through our website's administration area, which requires a sign-in by authorised clinic staff.

9. How long we keep information

We keep personal information only as long as we need it for the purposes above or as the law requires — including the minimum periods for health records under the Health Records Act 2001 (Vic) — and then securely destroy or de-identify it. Google Analytics data is deleted automatically after the retention period set in Google Analytics.

10. Accessing and correcting your information

You can ask to access the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. We will need to confirm your identity and will respond within 30 days. There is no charge to make a request; if a fee applies to providing access, it will be reasonable and we will tell you first. If we refuse a request, we will tell you why and how to complain.

11. Data breaches

If a data breach is likely to result in serious harm, we will notify the people affected and the Office of the Australian Information Commissioner, as required by the Notifiable Data Breaches scheme.

12. Questions and complaints

For a privacy question, request or complaint, please contact us. We will acknowledge your complaint and aim to respond within 30 days.

Email: reception@regenerateskinhairclinic.com.au
Phone: 1800 866 888
Post: 443 Bell St, Pascoe Vale South VIC 3044

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (www.oaic.gov.au, 1300 363 992) or, for health information in Victoria, the Health Complaints Commissioner (hcc.vic.gov.au, 1300 582 113).

13. Changes to this policy

We may update this policy from time to time. The current version is always on this page, with its effective date.