Privacy Policy

1. Introduction and Scope

This Privacy Policy outlines how Aesthetica Clinic, operated by ANNA THE COSMETIC NURSE LIMITED ("we", "us", "our"), collects, uses, stores, and protects your personal and health information. We are strictly bound by the New Zealand Privacy Act 2020 and the Health Information Privacy Code 2020.

2. Information We Collect

To provide safe and effective medical aesthetic treatments, we must collect comprehensive data. This includes:

• Identity & Contact Data: Name, date of birth, address, email, and phone number.
• Health & Medical Data: Medical history, current medications, allergies, previous cosmetic procedures, pregnancy/nursing status, and general health condition.
• Clinical Records: Treatment notes, dosages used, batch numbers of products injected, and clinical clinical photographs (before, during, and after treatments).
• Financial Data: Payment details and transaction history (processed securely via third-party gateways; we do not store full credit card numbers).
• Technical & Usage Data: IP addresses, browser types, and website interaction data collected via cookies when you use www.aesthetica.co.nz.

3. How We Collect Your Information

We collect data directly from you when you book an appointment, complete our digital intake/consent forms, communicate with us via email or social media, or attend an in-clinic consultation.

4. Purpose of Data Collection

Your information is collected solely for lawful purposes directly related to our business functions, including: (a) Assessing your medical suitability for requested treatments; (b) Safely administering medical aesthetics; (c) Maintaining accurate medical records as required by NZ law; (d) Managing bookings, reminders, and aftercare follow-ups; (e) Processing payments; and (f) Sending marketing communications (only if you have explicitly opted in, with the ability to opt-out at any time).

5. Disclosure of Information

We treat your medical and personal data with the utmost confidentiality. We do not sell, rent, or trade your data. We may share your data only with: (a) Trusted third-party service providers (e.g., our clinical booking software, payment gateways) who are also bound by strict privacy agreements; (b) Other medical professionals, only in the event of a medical emergency or adverse reaction, to ensure your safety; and (c) Regulatory or law enforcement bodies if required by New Zealand law.

6. Data Storage, Security, and Retention

All digital health records are encrypted and stored in secure, cloud-based clinical management software. Access is restricted to authorized clinic personnel only. In accordance with New Zealand health regulations, we are required to retain patient medical records for a minimum of 10 years from the date of your last treatment.

7. Your Rights

Under the Privacy Act 2020, you have the right to request access to the personal and health information we hold about you, and to request corrections if you believe the information is inaccurate. To make a privacy request or lodge a complaint, please contact our Privacy Officer at anna@aesthetica.co.nz.