Privacy Policy

HLD Aesthetics is operated by Michelle Burstow, a sole trader, from a home studio in Tugun, Queensland. This policy explains how we collect, use, store and share your personal information, including health information, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. What we collect

• Contact and booking details — your name, phone number, email address, appointment history and any notes you add when booking.
• Health information — details you give us about your health, medical conditions, medications, pregnancy, allergies or other factors that may affect your treatment, recorded on our consent and disclaimer form.
• Payment information — payments are processed by Square. We do not see or store your full card details.
• Website usage information — when you visit our website, cookies and similar tools collect information such as pages viewed, device and browser type, approximate location and how you arrived at the site.
• Messages — anything you send us by phone, text, Instagram or other channels.

2. How we collect it

We collect information directly from you: when you book online, complete our consent form, talk to us before or during a session, or contact us. Website usage information is collected automatically through cookies and analytics tools (see section 6).

3. Why we collect and use it

• To manage your bookings, send confirmations and reminders, and take payment.
• To assess whether a treatment is safe and suitable for you, and to tailor it to you.
• To keep a record of the treatment provided and your consent.
• To respond to your questions and requests.
• To understand how our website is used and to show relevant ads on Instagram and Facebook.
• To meet our legal and insurance obligations.

We only use your health information to provide your treatment safely, and we will not use it for marketing.

4. Who we share it with

We do not sell your personal information. We share it only where needed to run the business:

• Square — online booking, appointment reminders and payments.
• Google — website analytics (Google Analytics / Site Kit).
• Meta (Facebook and Instagram) — the Meta pixel measures visits and ad performance, and lets us show ads to people who have visited our site.
• Our website host and IT providers, our insurer or professional advisers where necessary, and authorities where the law requires it.

We will not share your health information with anyone else unless you agree, or where the law requires or allows it (for example, in an emergency).

5. Information stored overseas

Some of the providers above store or process data outside Australia, which may include the United States and other countries. We choose established providers and take reasonable steps to ensure they handle your information appropriately.

6. Cookies, analytics and advertising

Our website uses cookies from Google Analytics and the Meta pixel. These help us understand site visits and measure our advertising. You can block or delete cookies in your browser settings, opt out of Google Analytics with Google's browser add-on, and manage ad preferences in your Facebook and Instagram settings. The site will still work if you block cookies.

7. How we protect and keep it

We take reasonable steps to keep your information secure, including password-protected accounts and devices, and keeping paper consent forms in a secure place. We keep records only as long as we need them for the purposes above or as required by law, then destroy or de-identify them securely.

8. Accessing and correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it, at any time. We will respond within a reasonable time, usually within 30 days. If we can't give you access, we will explain why.

9. Dealing with us anonymously

You can ask general questions without giving your name. To book and receive treatment, we need your contact and health details.

10. Questions and complaints

If you have a question or concern about your privacy, please contact Michelle Burstow on 0431 017 617. We will respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

11. Changes to this policy

We may update this policy from time to time. The current version will always be on this page.