Privacy Policy

Last updated: 30 September 2026

Privacy Policy

Your privacy matters to us. This policy explains, in plain terms, how Tailored Plastic Surgery collects, uses, stores and protects your personal and health information. If you have any questions, please call us on 1300 532 956 or email reception@tailoredplasticsurgery.com.

Tailored Plastic Surgery is committed to protecting the privacy and confidentiality of personal information entrusted to us by our patients, prospective patients, employees, contractors and other individuals. This Privacy Policy explains how we collect, hold, use and disclose personal information and how we comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). As a medical practice, we recognise that health information is particularly sensitive and take additional steps to protect the privacy of our patients.

What information do we collect?

Depending on our relationship with you and the services we provide, we may collect and hold personal information and health information.

Personal information may include your name, date of birth, address, telephone numbers, email address, emergency contact details, Medicare and private health insurance details, billing and payment information, appointment information, correspondence and communications with the practice, and information required for administrative and business purposes.

Health information may include your medical history, current and previous medical conditions, medications and allergies, clinical notes, consultation records, diagnoses, treatment plans, surgical information, pathology, imaging and other investigation results, specialist and other healthcare provider reports, photographs and clinical images (including before-and-after photographs where applicable), and information relating to your physical or psychological health and your treatment and recovery.

Health information is classified as sensitive information under Australian privacy law and is subject to additional privacy protections.

How do we collect information?

Where reasonably practicable, we collect personal information directly from you, for example during consultations, when you contact the practice by telephone, email or online enquiry, through patient registration and consent forms, through our website or online booking systems, through correspondence with you, and through clinical photographs, other investigations and our electronic medical record systems.

We may also collect information from your nominated representatives where appropriate, from other healthcare providers involved in your care, from hospitals, pathology providers, imaging providers or other relevant organisations, from your health insurer or Medicare where necessary, and from a person responsible for you where legally permitted. Where information is collected from a third party, we will take reasonable steps to ensure that the collection is lawful and appropriate.

Why do we collect and use personal information?

We collect, hold, use and disclose personal information to provide medical and surgical care, assess and manage your health, make diagnoses and treatment decisions, coordinate your healthcare with other providers, arrange referrals, investigations and follow-up care, and maintain accurate medical records.

We also use it to manage appointments, process payments and accounts, process Medicare and private health insurance claims, and communicate with you about your treatment and appointments. Other purposes include meeting legal and regulatory obligations, managing complaints and incidents, quality assurance and clinical governance, practice administration and management, maintaining the security of our systems and premises, responding to emergencies or serious threats where permitted by law, and conducting research or quality improvement activities where permitted and appropriately authorised.

We will generally only use or disclose personal information for the purpose for which it was collected, or for another purpose permitted by law.

Consent

Where required by law, we will obtain your consent before collecting, using or disclosing sensitive information.

In a healthcare setting, consent may be express or, in appropriate circumstances, implied. We will ensure that consent is obtained appropriately for the circumstances and that patients understand what they are consenting to.

Separate consent may be required for particular activities, including the use of clinical photographs for purposes beyond providing healthcare.

Disclosure of information

We may disclose personal information where reasonably necessary for the provision of healthcare or for another purpose permitted or required by law.

This may include disclosure to your treating doctors and specialists, general practitioners, hospitals, anaesthetists, nurses and other healthcare professionals, pathology and imaging providers, allied health professionals, pharmacies and other healthcare organisations involved in your care. It may also include private health insurers, Medicare, medical indemnity insurers, professional advisers, information technology and practice management providers, payment and billing providers, and government agencies and regulators where required or authorised by law.

We will only disclose information to third parties where permitted by applicable privacy legislation and, where required, with your consent.

Clinical photographs and images

Clinical photographs may form part of your medical record and may be collected where reasonably necessary for assessment, treatment, monitoring or documentation of your care. Photographs will be stored securely and treated as confidential health information.

Where photographs are proposed to be used for purposes outside your direct healthcare, such as education, training, presentations, publications, research or marketing, we will obtain appropriate consent before using or disclosing the photographs, unless otherwise permitted by law.

Consent for secondary use of photographs may be withdrawn, subject to any legal, clinical or practical limitations.

Direct marketing

We may communicate with patients about practice services, relevant health information or other matters where permitted under applicable privacy and marketing laws. Where required, we will provide an appropriate opportunity to opt out of receiving direct marketing communications. We will not use sensitive health information for direct marketing purposes unless permitted by law.

Storage and security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Personal information may be stored electronically and/or in physical records.

Security measures may include password protection, access controls and role-based access, secure information systems, staff confidentiality obligations, secure physical storage, system monitoring, backup procedures, secure disposal of records, and appropriate security measures when information is transmitted electronically. Access to patient information is restricted to staff and providers who require access for legitimate work-related purposes.

Overseas disclosure

We do not disclose personal information to overseas recipients.

Access to your information

You generally have a right to request access to personal information we hold about you. Requests for access can be made by email to reception@tailoredplasticsurgery.com or by phone on 1300 532 956.

We will respond to requests within a reasonable period and may require reasonable identification before providing access. In some circumstances, access may be refused where permitted or required by law. If access is refused, we will explain the reasons where appropriate.

Correction of information

We take reasonable steps to ensure that personal information we hold is accurate, complete and up to date.

If you believe information we hold about you is inaccurate, incomplete or out of date, you may request that it be corrected. Requests should be directed to our Privacy Officer by email to reception@tailoredplasticsurgery.com or by phone on 1300 532 956. Where appropriate, we will correct the information or explain why we consider the information to be accurate.

Privacy complaints

If you believe that we have breached the Australian Privacy Principles or otherwise mishandled your personal information, you may make a complaint to us by email to reception@tailoredplasticsurgery.com or by phone on 1300 532 956.

We will acknowledge your complaint, assess and investigate the matter, consult relevant staff or service providers where necessary, take reasonable steps to resolve the complaint, and communicate the outcome to you. We aim to resolve privacy complaints promptly and fairly.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Privacy incidents and data breaches

We maintain procedures for identifying, responding to and managing privacy incidents and data breaches.

Where a data breach occurs, we will assess the incident and take appropriate action in accordance with applicable privacy legislation, including the Notifiable Data Breaches scheme where applicable. Our response may include containing the breach, assessing the risks, taking steps to prevent further disclosure, notifying affected individuals and the OAIC where required, and reviewing and improving our privacy and security procedures.

Staff confidentiality

All employees, contractors, students, consultants and other persons who have access to patient information are required to maintain confidentiality. Access to patient information is limited to information required to perform legitimate duties.

Staff must not access patient records without a legitimate work-related reason, access their own records without following the appropriate process, access records of family members, friends or acquaintances without authorisation, discuss patients or their information in inappropriate locations, share passwords or system access, photograph or copy patient information without authorisation, or disclose patient information to unauthorised persons. Breaches of confidentiality may result in disciplinary action and/or other consequences.

Electronic communications

We take reasonable steps to protect information communicated electronically. Patients should be aware that ordinary email and other electronic communication methods may carry privacy and security risks. Where appropriate, we may use secure electronic systems or portals for the transmission of sensitive information.

Third-party service providers

We may engage external providers to assist with practice operations, including practice management software, electronic medical records, cloud storage, IT support, appointment and communication systems, payment processing, medical billing, transcription services, marketing and website services, and document storage and destruction. Where these providers handle personal information on our behalf, we will take reasonable steps to ensure appropriate privacy and security arrangements are in place.

Quality improvement and research

We may use appropriately managed information for clinical governance, quality improvement, audit and research activities where permitted by law. Where information is used for purposes beyond providing healthcare, we will take appropriate steps regarding consent, de-identification, ethics approval and other applicable requirements.

Children and individuals with impaired capacity

Where a patient is a child or is unable to make decisions regarding their personal information, we will manage information in accordance with applicable privacy, healthcare and consent laws. Information may be provided to a parent, guardian, substitute decision-maker or other responsible person where legally authorised and appropriate.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, technology, our services or our privacy practices.

Contact us

For privacy enquiries, requests for access or correction, or privacy complaints, please contact:

Tailored Plastic Surgery
345 Balaclava Rd, Caulfield North VIC 3161
Peninsula Private Hospital, Suite 17/525 McClelland Dr, Langwarrin VIC 3910
Phone: 1300 532 956
Email: reception@tailoredplasticsurgery.com

You can also contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.

This Privacy Policy should be read together with the practice's privacy management plan, data breach response procedure, records management procedures and staff confidentiality requirements.