Effective Date: 19 September 2026

Gold Coast Hair Transplant ("we", "us", "our") is committed to protecting the privacy of every individual who engages with our clinic. This Privacy Policy explains how we collect, hold, use and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

We may collect and hold the following categories of personal information:

  • Identity and contact details — full name, email address, phone number, postal address.
  • Health and medical information — medical history, current medications, photographs of hair and scalp, treatment notes and records. This is classified as sensitive information under the Privacy Act and is collected only with your express consent.
  • Enquiry and booking details — information you provide when completing a contact or booking form on our website, including preferred appointment dates and any questions you submit.
  • Financial information — payment details required to process consultation fees or treatment costs. We do not store full credit card numbers on our systems.
  • Website usage data — IP address, browser type, device information, pages visited, time spent on pages, and referral source. This data is collected automatically through cookies and analytics tools (see Section 5).

2. How We Collect Information

We collect personal information directly from you when you:

  • Submit a form on our website
  • Telephone, email or visit our clinic
  • Attend a consultation or undergo treatment
  • Communicate with us through social media

We may also collect information indirectly through website analytics tools and cookies placed on your device when you browse our site.

3. Purpose of Collection

We collect and use your personal information to:

  • Respond to your enquiry and arrange consultations
  • Provide hair restoration treatments and clinical care
  • Maintain accurate medical records as required by law
  • Process payments and issue receipts
  • Send appointment reminders and follow-up communications
  • Improve the quality and usability of our website
  • Comply with legal and regulatory obligations, including AHPRA requirements

We will not use your personal information for direct marketing unless you have given us your consent to do so, and you may opt out at any time.

4. Disclosure to Third Parties

We may share your personal information with:

  • Healthcare professionals — referring practitioners or specialists involved in your care, with your consent.
  • Service providers — trusted third parties who assist us with website hosting, email delivery and payment processing. These providers are contractually obligated to handle your data securely and only for the purpose we specify.
  • Legal and regulatory bodies — where we are required to do so by law, court order, or regulatory obligation.

We do not sell, rent or trade your personal information to any third party for marketing purposes.

5. Cookies and Analytics

Our website uses Google Analytics 4 (operated by Google LLC) to collect anonymised usage data. Google Analytics uses cookies to help us understand how visitors interact with our site. The information generated by these cookies is transmitted to and stored by Google on servers that may be located outside Australia.

We may also use Google Ads conversion tracking and Meta (Facebook) Pixel to measure the effectiveness of our advertising campaigns. These tools may collect data such as pages visited and actions taken on our site.

You can control or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain parts of our website.

6. Data Security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. Measures include:

  • Secure, encrypted connections (SSL/TLS) on our website
  • Access controls limiting staff access to personal information on a need-to-know basis
  • Secure storage of physical records at our clinic
  • Regular review of our data handling and security practices

7. Retention of Information

We retain personal information for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Medical records are retained in accordance with Queensland Health record-keeping requirements, which generally require a minimum retention period of seven years from the date of last entry for adult patients.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you
  • Request correction of any inaccurate or out-of-date information
  • Withdraw consent for the use of your sensitive information at any time
  • Lodge a complaint if you believe your privacy has been breached

To exercise any of these rights, please contact us using the details below. We will respond to your request within 30 days.

9. Complaints

If you are not satisfied with our response to a privacy concern, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The revised policy will be posted on this page with an updated effective date. We encourage you to review this page periodically.

11. Contact Us

If you have any questions about this Privacy Policy or wish to make a request regarding your personal information, please contact us: