Privacy Policy

Coming to a clinic means sharing personal things about yourself. We take that seriously. This page explains what we collect, why we need it and how we look after it. If anything here is unclear, please ask us. We are happy to talk it through.

In this policy, we, us and our mean Daniela Tanevski trading as Mirage Medical Aesthetics (ABN 35 698 253 182), of 2/457 Heidelberg Road, Fairfield VIC 3078.

We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth). As a health service provider in Victoria, we also follow the Health Privacy Principles in the Health Records Act 2001 (Vic).

The short version

• We collect what we need to reply to you and to care for you.
• We take reasonable steps to keep your health information private and secure.
• We do not sell your information.
• We only send you marketing if you say yes.
• You can see and correct the information we hold about you.

Using your name, or staying anonymous

You can ask us a general question without giving your name. For example, you can call to ask about opening hours or costs.

Due to the nature of the health services we provide, it is generally impracticable for us to deal with individuals who have not identified themselves. Accurate identification is required to ensure the safety and continuity of clinical care, and to comply with our legal and professional obligations under applicable health legislation. This means we cannot provide a consultation or treatment to someone who stays anonymous or uses a false name.

Who this policy is about

Our services are for adults aged 18 and over. We may ask to see photo ID to confirm your age. We use it only for that purpose.

We do not knowingly collect information about anyone under 18. If you think we hold information about a person under 18, please tell us. We will delete it unless the law requires us to keep it.

All consultations and treatments happen in person, at our clinic in Fairfield. We do not provide consultations by video, phone, email or online form. A treatment is only provided after an in-person consultation and assessment, and only if it is clinically appropriate for you.

What we collect

Personal information

This includes your name, date of birth, gender, address, phone number and email. It also includes an emergency contact, payment details and records of what you and the clinic have said to each other.

Health information

Health information is sensitive information. The law gives it extra protection, and so do we. The health information we may collect includes:

• your medical history, allergies, medicines and supplements;
• whether you are pregnant or breastfeeding, where this is relevant;
• cosmetic treatments you have had before, here or elsewhere;
• notes from your consultation and the findings of our assessment;
• the assessment of whether a procedure suits you, including your reasons, your expectations and screening for conditions such as body dysmorphic disorder;
• clinical photographs, taken only with your specific consent;
• details of any treatment we provide, including the products used, batch numbers, amounts and the areas treated;
• your consent forms, the aftercare advice we give you, review appointments and any side effects you report;
• referrals and letters to or from other health practitioners about your care;
• appointment records, such as dates, times and who was present.

We assess the psychological side of a procedure because the national Boards' practice guidelines for non-surgical cosmetic procedures require it. These guidelines took effect on 2 September 2025. We keep a record of that assessment in your file.

Clinical photographs are used for your clinical record and to follow your care over time. We never publish them, in advertising, on social media or anywhere else.

Website information

When you visit this website, we may collect your IP address, your browser and device type, the page that sent you here and the pages you view. See Cookies and tracking below.

How we collect it

We usually collect information directly from you:

• when you send the enquiry form on this website;
• when you call or email the clinic;
• when you fill in forms at the clinic;
• during a consultation, treatment or review.

Sometimes we collect information from someone else. This might be another health practitioner involved in your care, or a person you have asked to act for you. We only do this with your consent, or where the law allows it.

Our enquiry form

The form asks for your name, email, phone number, the service you would like to talk about and a short message. It also records the page you sent it from. If you reached our site through an ad or a campaign link, it records which one.

The service you ask about can say something about your health. So before you send the form, we ask you to tick a box that says:

I consent to Mirage Medical Aesthetics collecting and using the details in this form, including the service I ask about, to reply to me and arrange a consultation, as set out in the Privacy Policy.

We use these details only to reply to you and to arrange a consultation. Please do not send detailed health information through the form. We will go through your health history with you in person, at your consultation.

Information we did not ask for

From time to time, we may receive personal or health information that we did not solicit. Where we receive unsolicited personal information, we will promptly assess whether that information is of a kind we could have collected under our standard collection practices. If it is not, and the law does not require us to keep it, we will destroy it or remove anything that identifies you as soon as practicable.

How we use it

• to reply to your enquiry and book your appointments;
• to assess whether a treatment is clinically appropriate for you, and to provide the care you have agreed to;
• to keep accurate clinical records and follow your care over time;
• to contact you about appointments, aftercare and reviews;
• to take payments and keep our accounts;
• to meet our legal, professional, insurance and regulatory obligations;
• to look into and resolve a complaint or a side effect.

We only use or share your information for another purpose if you agree, if you would reasonably expect it and it relates to your care, or if the law requires or allows it.

Who we share it with

• other health practitioners involved in your care, such as your GP, with your consent;
• a pharmacy, if your treatment involves a prescription;
• the companies that help us run the clinic and this website, such as our email, website, records and payment providers. They may only use your information to provide their service to us;
• our insurers, indemnity provider and professional advisers, where this is reasonably needed;
• a regulator, court or tribunal, or another person, where the law requires or allows it.

We do not sell your personal information. We do not share it with other businesses for their marketing.

Sending information overseas

Some of the companies we use may store or process information outside Australia. These are:

• Amazon Web Services, which delivers the emails sent from our enquiry form. It may process them in Australia or overseas.
• Microsoft, which provides the clinic's email. Your emails and form enquiries arrive in this mailbox. Microsoft may store data overseas, including in the United States.
• Cloudflare, which helps host and protect this website. It runs a global network, so your visit may pass through servers outside Australia.
• Google and Meta, if we use their analytics or advertising tools. These companies are based in the United States. They only receive information if you accept these cookies.

We take reasonable steps to make sure these companies handle your information in line with the Australian Privacy Principles. You can ask us for more detail about any of them, including where they store data. We will ask for your consent before we send your health information overseas for any other purpose.

Marketing

We only send you marketing, such as clinic news, if you have clearly said yes. We always ask for this separately. It is never part of your consent to treatment or to our enquiry form.

Every marketing email has an unsubscribe link. You can also ask us to stop at any time. We never use your health information, or the treatments you have asked about, to decide what marketing to send you.

Cookies and tracking

Cookies are small files that a website saves in your browser. Visiting a clinic website can say something about your health. So we keep tracking to a minimum, and we ask first.

When you first visit, a notice lets you accept or decline cookies that are not essential. We remember your choice in your browser.

• Essential: these make the site and the enquiry form work, help block spam and remember your cookie choice. They are always on.
• Analytics: these show us, in total, how people use the site. For example, we may use Google Analytics. They only load if you accept.
• Advertising: these show us whether a visit came from one of our ads. For example, we may use Google Ads or Meta. They only load if you accept.

If you have accepted advertising cookies and you send an enquiry, we may share some details with Google or Meta. These are a scrambled (hashed) copy of your name, email and phone number, your IP address and browser details, and the page you sent the form from. This tells us that an ad led to an enquiry. We do not share your message or the service you asked about.

You can also block or delete cookies in your browser settings. Some parts of the site may not work as well if you do. We never add the pages you view on this website to your clinical record.

Government identifiers

We do not use a government identifier, such as a driver licence number, as our own way of identifying you. If you show us photo ID to confirm your age, we use it only for that purpose.

My Health Record

We do not upload information to My Health Record, and we do not view records in it. If this changes, we will update this policy first.

Automated tools and artificial intelligence

We do not use artificial intelligence or automated tools to make decisions about your care. Every clinical decision is made by the practitioner who sees you, in person. Our website uses automated spam checks on the enquiry form. These only filter out junk messages.

How we keep it secure

We take reasonable steps to protect your information from misuse, loss, and unauthorised access, change or disclosure. These steps include password-protected systems, limiting who can see your records, encrypted website connections and keeping any paper records locked away. No system can be completely secure, so we review how we protect information over time.

If there is a data breach

If we think your information has been accessed or lost without permission, we act quickly to contain it. We assess what happened within 30 days. If the breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner as soon as practicable. This follows the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth).

How long we keep your records

The Health Records Act 2001 (Vic) says how long we must keep health records. We keep your records for at least 7 years after the last time we provided a health service to you. If any information was collected before a person turned 18, we keep it until they turn 25, if that is later.

After that, we destroy the records securely or remove anything that identifies you. When we delete health records, we keep a note of whose they were, the period they covered and the date we deleted them.

Seeing and correcting your information

You can ask to see the personal and health information we hold about you. You can also ask us to correct it if it is out of date, incomplete or inaccurate. Please send your request to [email protected].

We will ask you to confirm who you are. We aim to reply within 30 days. There is no charge to ask or to correct your information. We may charge a fee to provide copies, within the limits the law sets. We will tell you the cost first.

In a small number of cases, the law allows us to refuse access. One example is where access would pose a serious threat to someone's life or health. If we refuse, we will explain why in writing and tell you how to complain.

Making a complaint

If you are unhappy with how we have handled your information, please talk to us first. You can email [email protected] or call 0468 964 303. We will let you know we have received your complaint, and we aim to reply within 30 days.

If you are not satisfied with our reply, you can contact:

• the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992; or
• for health records in Victoria, the Health Complaints Commissioner at hcc.vic.gov.au or 1300 582 113.

Our other legal terms

This policy sits alongside our Terms & Conditions. They set out how we provide consultations and treatments. Our Disclaimer explains what the information on this website is for.

Changes to this policy

We review this policy from time to time and may update it. The latest version is always on this page, with the date it was last updated.

Contact us

For any privacy question or request, please contact:

Daniela Tanevski trading as Mirage Medical Aesthetics
2/457 Heidelberg Road, Fairfield VIC 3078
Phone: 0468 964 303
Email: [email protected]