Last updated: 4 November 2026

Ora Skin ("Ora Skin", "we", "us", "our") is a non-injectable skin clinic at 396 Charles Street, North Perth WA 6006. We respect your privacy and are committed to protecting your personal information.

This policy explains how we collect, use, store and share your personal information when you visit our clinic, book an appointment, buy products, contact us or use our website at oraskin.com.au. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our website or services, you acknowledge that your information will be handled as described in this policy.

What information we collect

We only collect information that is reasonably necessary to provide our services and run our business. Depending on how you deal with us, this may include:

• Contact and identity details - your name, email address, phone number, postal address and date of birth.
• Booking details - appointment history, treatments booked, preferences, notes and cancellation history.
• Health and skin information - your skin type, skin concerns, medical history, medications, allergies, pregnancy status, lifestyle factors and other information relevant to the safety and suitability of your treatment. This is "sensitive information" under the Privacy Act and is given a higher level of protection.
• Treatment records - consultation notes, treatment plans, products used, consent forms and clinical photographs.
• Purchase and payment details - products and gift cards purchased, order history and billing details. Card payments are processed by our payment providers, and we do not store full card numbers.
• Website and device information - your IP address, browser type, pages visited, how you arrived at our site and how you interact with it, collected through cookies and similar technologies.
• Communications - enquiries, messages, feedback and reviews you send us by email, phone, our contact form or social media.

You can choose not to give us certain information, or to deal with us using a pseudonym where that is practical. However, we may not be able to provide a safe treatment without the relevant health information.

How we collect your information

Where possible, we collect personal information directly from you, including when you:

• book an appointment online, by phone or in person
• complete a client intake, consultation or consent form
• attend a consultation or treatment at our clinic
• buy products or gift cards through our online shop or in clinic
• create an account on our website
• contact us through our website form, email, phone or social media
• sign up to receive news and offers from us
• leave a review or take part in a survey or promotion.

We also collect some information automatically when you visit our website (see "Cookies, analytics and advertising" below). Occasionally we may receive information about you from a third party, such as a person who books on your behalf or buys you a gift card. If we receive information we did not ask for and do not need, we will destroy or de-identify it where lawful to do so.

How we use your information

We use your personal information to:

• assess whether a treatment is safe and suitable for you, and to plan and deliver your treatment
• keep accurate treatment records and track your progress over time
• manage bookings, send appointment confirmations and reminders, and apply our Cancellation Policy
• process orders, payments, gift cards and deliveries
• respond to your enquiries and provide customer support
• send you aftercare information and follow-up about your treatment
• send you news, offers and skincare information where you have agreed to receive them
• improve our services, website and client experience
• meet our legal, insurance and regulatory obligations.

We only use your health information for the purpose it was collected (your care and treatment), or for a directly related purpose you would reasonably expect, unless you consent or the law permits otherwise.

Clinical and before and after photos

We may take photographs of your skin before, during and after treatment. These form part of your treatment record and help us assess your progress and plan your care.

We will never use your photos for marketing, social media, our website or training without your separate written consent. Where you do consent, we will take reasonable steps to remove identifying features unless you agree otherwise. You can withdraw your consent at any time by contacting us, and we will stop using the images in new material and remove them from our website and social media channels where we can.

Any before and after images we publish show individual results. Individual results vary.

Who we share your information with

We do not sell, rent or trade your personal information. We only share it where needed to run our business or where the law allows, including with:

• Booking and client management - Phorest, which manages our appointments, client records and reminders
• Online shop and payments - Shopify and its payment processors, which host our website and process orders and card payments
• Website and form security - hCaptcha, which helps protect our forms from spam and misuse
• Analytics and advertising - Google (including Google Analytics and Google Ads), which helps us understand website use and measure our advertising
• Delivery - couriers and Australia Post, to deliver products you order
• Professional advisers and contractors - such as our IT and website providers, marketing agency, accountants, insurers and lawyers, who are required to keep your information confidential
• Other health practitioners - such as your GP or dermatologist, but only with your consent or where needed to protect your health and safety
• Government and regulators - where we are required or authorised by law.

Overseas disclosure

Some of our service providers store or process information outside Australia. These include Shopify (Canada and the United States), Phorest (Ireland and the European Union) and Google (the United States and other countries). We take reasonable steps to ensure these providers handle your information in a way that is consistent with the Australian Privacy Principles.

Cookies, analytics and advertising

Our website uses cookies and similar technologies. Cookies are small files stored on your device that help our website work, remember your cart and preferences, and tell us how visitors use the site.

We use:

• Essential cookies - required for our online shop, cart, checkout and account login to work
• Analytics cookies - Google Analytics helps us understand which pages are visited, how people find us and how we can improve the site. This information is aggregated and does not identify you personally
• Advertising cookies - Google Ads may use cookies to measure the results of our advertising and to show you relevant Ora Skin ads on other websites (remarketing).

You can block or delete cookies in your browser settings, although some parts of our website may not work properly if you do. You can manage how Google uses your information for ads at Google My Ad Center and opt out of Google Analytics with the Google Analytics opt-out browser add-on.

Our website may link to other sites, such as our booking page, Facebook and Instagram. We are not responsible for the privacy practices of those sites, so please review their privacy policies.

Marketing communications

With your consent, we may send you news, promotions, skincare tips and special offers by email or SMS. We comply with the Spam Act 2003 (Cth), and every marketing message we send includes a simple way to unsubscribe.

You can opt out at any time by using the unsubscribe link, replying STOP to an SMS, or contacting us. Opting out of marketing will not stop us sending messages about your appointments, orders or treatment.

How we store and protect your information

We store personal information electronically in secure, password-protected systems, and any paper records are kept securely at our clinic. We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access, change or disclosure. These steps include restricting access to staff who need it, using reputable service providers with strong security, and secure disposal of records we no longer need.

No method of transmission over the internet is completely secure, so we cannot guarantee the security of information you send us online.

How long we keep it

We keep treatment and health records for as long as we need them to provide care and meet our legal and insurance obligations. For adults, this is generally at least seven years after your last appointment. For clients under 18, we keep records at least until they turn 25. When information is no longer needed, we securely destroy or de-identify it.

Data breaches

If a data breach is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

Accessing and correcting your information

You can ask to access the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete or misleading. Please contact us using the details below. We will respond within 30 days.

We may need to verify your identity before releasing information. Access is usually free, although we may charge a reasonable fee for copying large records. In limited cases the law allows us to refuse access, and if so we will tell you why in writing.

Complaints

If you have a concern about how we have handled your personal information, please contact us first so we can try to resolve it. We will acknowledge your complaint promptly and aim to respond within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

Contact us

For privacy questions, access or correction requests, or complaints, contact our Privacy Officer:

• Business: Ora Skin
• Address: 396 Charles Street, North Perth WA 6006
• Phone: (08) 9242 3155
• Email: results@oraskin.com.au

Changes to this policy

We may update this policy from time to time to reflect changes in the law or how we operate. The latest version will always be available on this page, with the date it was last updated shown at the top.