Privacy Policy

Australian Trichology & Aesthetics Clinics
Last updated: 6 October 2026

Australian Trichology & Aesthetics Clinics (“ATAC”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal and health information entrusted to us.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you interact with ATAC, including through our clinics, website, online booking systems, consultations, treatments and other services.

We handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and other applicable Australian privacy and health information laws.

1. About ATAC

Australian Trichology & Aesthetics Clinics provides hair and scalp, trichology, skin and aesthetic services and associated healthcare services.

Services may be provided by appropriately qualified professionals including trichologists, registered nurses, medical practitioners and other healthcare professionals, depending on the service concerned.

Services provided under the ATAC brand may be delivered by related clinic operating entities, including ATAC BNE OP Pty Ltd.

This Privacy Policy applies to personal information handled by ATAC and its related clinic operating entities in connection with ATAC services.

2. The information we collect

The information we collect depends on how you interact with us and the services you receive.

Personal and contact information

We may collect:

• your name;
• date of birth;
• residential or postal address;
• telephone number;
• email address;
• emergency contact details;
• appointment and booking information;
• payment and transaction information;
• correspondence and enquiries;
• communication preferences; and
• other information reasonably necessary to provide or administer our services.

Health and sensitive information

When reasonably necessary to provide healthcare, assessment or treatment, we may collect sensitive information and health information including:

• your medical and family history;
• current and previous medical conditions;
• medications and allergies;
• hair-loss history;
• scalp and hair concerns;
• skin and aesthetic treatment history;
• previous treatments or procedures;
• relevant hormonal, nutritional or other health information;
• pathology and blood test results;
• prescription and medication information;
• clinical assessments and diagnoses where applicable;
• treatment recommendations and treatment plans;
• clinical notes and treatment records;
• treatment outcomes and progress information;
• photographs, scalp images and other clinical images; and
• information provided by your medical practitioner, pathology provider, pharmacy or other healthcare professional where authorised or otherwise permitted by law.

We generally collect sensitive and health information with your consent or where otherwise permitted or required by law.

3. Hair, scalp and clinical imaging

As part of hair, scalp, skin or aesthetic assessment and treatment, ATAC may capture photographs or other images where reasonably necessary for clinical purposes.

These images may be used for purposes such as:

• assessing hair and scalp condition;
• assessing skin concerns;
• supporting treatment planning;
• documenting baseline clinical presentation;
• monitoring treatment progress;
• comparing changes over time;
• maintaining appropriate clinical records; and
• supporting clinical review by healthcare professionals involved in your care.

Clinical images form part of your confidential clinical information where they are associated with you.

Marketing photographs and videos

Clinical consent and marketing consent are separate.

ATAC will not use identifiable clinical photographs or videos for advertising, social media, promotional materials, testimonials or similar marketing purposes unless appropriate consent has been obtained.

Declining marketing consent will not affect your ability to receive treatment or healthcare services from ATAC.

4. Hair & Scalp AI Analysis and digital assessment technology

ATAC may use digital imaging, analytical software and artificial intelligence-assisted technology as part of hair and scalp assessment.

Depending on the technology used, information processed or generated may include:

• scalp and hair images;
• hair density or distribution measurements;
• hair and scalp characteristics;
• measurements or observations derived from images;
• comparison of images over time; and
• analysis results or other information generated or inferred by the technology.

Information generated or inferred through these technologies will be handled as personal information or health information where it relates to an identifiable individual.

AI-assisted or digital analysis is intended to support assessment and clinical decision-making. It does not replace appropriate professional judgement.

Where appropriate, results will be interpreted or reviewed by a suitably qualified ATAC practitioner or healthcare professional in the context of your individual circumstances.

We take reasonable steps to ensure that personal information used in connection with these technologies is handled securely and that the technology is used only for appropriate purposes.

Where a third-party technology provider processes personal information on our behalf, that provider may receive or access information necessary to provide the relevant service.

Where required, we will provide additional information or obtain appropriate consent before sensitive information is processed using particular technologies.

5. How we collect information

We may collect personal information:

• directly from you during consultations, assessments or treatments;
• through our website;
• through online booking and enquiry forms;
• through our practice management and booking systems, including Zenoti;
• through telephone, email, SMS or other communications;
• through medical history, intake and consent forms;
• through digital or AI-assisted assessment technology;
• from a medical practitioner involved in your care;
• from pathology providers, pharmacies or other healthcare providers where authorised or otherwise permitted by law;
• from a parent, guardian or authorised representative;
• from referral partners or other third parties where appropriate; and
• through advertising or enquiry platforms where you submit your information to contact us.

Where practical and appropriate, we collect health information directly from you.

6. Why we collect and use personal information

We may collect, hold, use and disclose personal information for purposes including:

• responding to enquiries;
• booking and managing appointments;
• providing consultations and assessments;
• providing hair, scalp, skin and aesthetic services;
• assessing your suitability for particular treatments;
• identifying contraindications or clinical risks;
• developing and reviewing treatment plans;
• monitoring treatment progress;
• arranging medical assessment where required;
• facilitating pathology or blood testing;
• facilitating prescriptions or pharmacy services where applicable;
• communicating with healthcare professionals involved in your care;
• maintaining appropriate clinical and business records;
• processing payments and accounts;
• sending appointment confirmations and reminders;
• managing clinical quality and patient safety;
• responding to feedback and complaints;
• meeting professional, regulatory, insurance and legal requirements;
• operating and improving our clinics, website and services;
• analysing service usage and customer experience; and
• communicating information about ATAC services where permitted by law.

We will only use or disclose personal information for purposes permitted under applicable privacy laws.

7. Doctors, pathology providers, pharmacies and other healthcare providers

Where relevant to your care, ATAC may disclose or receive information from:

• medical practitioners;
• registered nurses;
• pathology providers;
• pharmacies;
• allied health professionals;
• other healthcare professionals; and
• other clinical service providers involved in your care.

Information will only be shared where reasonably necessary, authorised by you or otherwise permitted or required by law.

A medical practitioner involved in your care may also have independent professional and legal obligations concerning your health information and clinical records.

8. Online booking and technology providers

ATAC uses third-party technology and service providers to operate our clinics and website.

These may include providers of:

• practice management and online booking systems, including Zenoti;
• payment processing;
• email and SMS communications;
• cloud storage;
• information technology and cybersecurity;
• website hosting;
• accounting and administration;
• analytics;
• digital advertising;
• customer relationship management; and
• clinical or digital assessment technologies.

These providers may process personal information on our behalf to the extent reasonably necessary to provide their services.

We take reasonable steps appropriate to the circumstances when selecting and working with service providers that handle personal information.

9. Website, cookies and analytics

When you visit our website, we or our service providers may automatically collect technical information such as:

• your IP address;
• browser and device information;
• approximate location derived from technical information;
• pages viewed;
• referring website or source;
• date and time of access;
• interactions with website content; and
• information collected through cookies or similar technologies.

We may use cookies, pixels and similar technologies to:

• operate our website;
• remember preferences;
• understand website usage;
• improve website performance;
• measure advertising effectiveness;
• understand how people discover ATAC; and
• deliver or measure relevant advertising where permitted.

Our website may use services provided by organisations such as Google, Meta and other analytics, advertising or technology providers.

You may be able to control or disable certain cookies through your browser or device settings.

10. Direct marketing

Where permitted by law and where any required consent has been obtained, ATAC may contact you about:

• clinic news and updates;
• educational information;
• services that may be relevant to you;
• promotions or offers; and
• events or other ATAC communications.

Marketing communications may be sent by email, SMS or other permitted channels.

You may withdraw your consent or opt out of marketing communications at any time using the unsubscribe or opt-out mechanism provided or by contacting us.

Opting out of marketing does not prevent us from sending communications reasonably necessary for your appointments, treatment, clinical care, payments or other service-related matters.

We do not sell patient personal details and health information for third-party marketing.

11. Disclosure of personal information

We may disclose personal information where reasonably necessary to:

• ATAC staff and authorised contractors;
• healthcare professionals involved in your care;
• pathology providers and pharmacies;
• technology and practice-management providers;
• payment processors;
• IT, hosting and cloud service providers;
• professional advisers including lawyers and accountants;
• auditors and insurers;
• regulatory or professional bodies;
• government agencies, courts or law enforcement bodies where required or authorised by law; and
• other persons or organisations where you have consented or disclosure is otherwise permitted by law.

We limit disclosure to information reasonably necessary for the relevant purpose.

12. Overseas access and disclosure

Some technology, cloud, communications, analytics, advertising or other service providers used by ATAC may operate or process information outside Australia.

This means personal information may, in some circumstances, be accessible from or disclosed to recipients located overseas.

Where the Australian Privacy Principles apply to an overseas disclosure, ATAC will take reasonable steps as required by law in relation to the handling of that information.

Where practicable, information about the countries in which overseas recipients are likely to be located will be made available or this Privacy Policy will be updated as our technology arrangements are confirmed.

13. Security of your information

ATAC takes reasonable steps to protect personal and health information from:

• misuse;
• interference;
• loss;
• unauthorised access;
• unauthorised modification; and
• unauthorised disclosure.

Security measures may include, as appropriate:

• role-based access controls;
• password and authentication controls;
• secure electronic systems;
• staff confidentiality obligations;
• staff privacy and security training;
• secure storage;
• technology and cybersecurity safeguards; and
• procedures for responding to privacy and data-security incidents.

No electronic or internet-based system can be guaranteed to be completely secure.

If we become aware of a suspected data breach, we will assess and respond to it in accordance with applicable Australian privacy laws, including the Notifiable Data Breaches scheme where applicable.

14. Retention of information

ATAC retains personal and health information for as long as reasonably necessary to:

• provide services;
• maintain appropriate clinical records;
• meet professional and regulatory requirements;
• meet insurance requirements; and
• comply with applicable legal record-retention obligations.

When information is no longer required to be retained, we will take reasonable steps to securely destroy or de-identify it where appropriate.

15. Accessing your personal information

You may request access to personal information we hold about you.

We will respond to access requests in accordance with applicable privacy laws.

In some circumstances, access may be limited or refused where permitted by law. Where appropriate and legally permitted, we will explain the reason.

We may need to verify your identity before providing access to personal or health information.

16. Correcting your information

You may ask us to correct personal information you believe is inaccurate, out of date, incomplete, irrelevant or misleading.

We will take reasonable steps to ensure personal information we use or disclose is accurate, up to date, complete and relevant having regard to the circumstances.

17. Anonymity and pseudonyms

Where lawful and practicable, you may interact with ATAC anonymously or using a pseudonym.

However, we will generally need to identify you where necessary to:

• provide clinical assessment or treatment;
• maintain accurate clinical records;
• arrange medical assessment;
• facilitate pathology testing;
• facilitate prescriptions or medication-related services;
• process certain transactions; or
• comply with legal or professional requirements.

18. Children and young people

Where ATAC provides services to a person under 18 years of age, we will take reasonable steps to manage consent, privacy and disclosure having regard to the person's age, capacity, circumstances and applicable legal and professional requirements.

Where appropriate, information may be collected from or disclosed to a parent, guardian or authorised representative.

19. Privacy complaints

If you have a concern about how ATAC has handled your personal information, please contact our Privacy Officer using the details below.

Please provide sufficient information to allow us to understand and investigate your concern.

We will take reasonable steps to investigate your complaint and respond within a reasonable timeframe. We may contact you if we require further information.

If you are not satisfied with our response, you may have the right to seek further review or make a complaint to the relevant privacy regulator.

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• our services;
• technology;
• clinical practices;
• service providers; or
• legal and regulatory requirements.

The current version will be published on our website and will show the date of the latest update.

21. Contact us

For privacy enquiries, requests for access or correction, or privacy complaints, please contact:

Australian Trichology & Aesthetics Clinics

Brisbane Clinic
Shop 2, 669 Brunswick Street
New Farm QLD 4005
Australia

Email: info@ataclinics.com.au
Telephone: +61 7 2153 9168
Website: www.ataclinics.com.au

Privacy Officer: Australian Trichology & Aesthetics Clinics