Privacy Policy

Last updated: 30 June 2026

1. Introduction

Canvas Skin Co. ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, store and disclose your personal information, including health information, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Canvas Skin Co. operates as a skin clinic and retailer of skincare products, located at 9 Balaka Place, Bundoora VIC 3083. Because we provide health-related services (skin consultations and treatments), we are treated as a health service provider under the Privacy Act, which means certain obligations apply regardless of business turnover.

By using our website, booking a service, or purchasing a product from us, you consent to the practices described in this policy.

2. What Personal Information We Collect

We may collect the following types of personal information:

General personal information

  • Name, email address, phone number, postal address

  • Payment and billing information (processed via Squarespace Commerce)

  • Booking and appointment history (via our booking platform, Ovatu)

  • Communications you send us (enquiries, emails, contact form submissions)

  • Marketing preferences (if you subscribe to our mailing list)

Sensitive and health information

  • Skin consultation notes, including skin type, conditions, history and treatment goals

  • Information about medical conditions relevant to treatment safety (e.g. allergies, skin conditions, medications affecting skin, pregnancy status where relevant to treatment)

  • Photographs of skin taken during consultations or treatments, where applicable [PLACEHOLDER: confirm if photos are taken and stored]

  • Records of products and treatments recommended or prescribed (including Prologic Skincare consultation status)

Health information is considered "sensitive information" under the Privacy Act and is afforded a higher level of protection. We only collect this information with your consent, and only to the extent necessary to provide safe and effective treatment.

Information collected automatically

  • Website usage data via Squarespace analytics (e.g. IP address, browser type, pages visited)

  • Cookies

3. How We Collect Personal Information

We collect personal information directly from you when you:

  • Book an appointment via our online booking platform (Ovatu, at canvasskin-co.book.app)

  • Complete a skin consultation in person

  • Purchase a product through our website (Squarespace Commerce)

  • Subscribe to our email list

  • Contact us via phone, email or our website contact form

  • Create a customer account via our booking platform

We do not knowingly collect personal information from third parties except where necessary (e.g. payment processing confirmation from our payment gateway).

4. Why We Collect, Use and Disclose Your Information

We use personal information to:

  • Provide and personalise skin consultations, treatments and treatment plans

  • Process bookings, payments, exchanges and returns

  • Assess suitability for restricted products, including Prologic Skincare (consultation-required range)

  • Communicate with you about appointments, orders, and clinic updates

  • Send marketing communications, where you have opted in (you may unsubscribe at any time)

  • Comply with legal and regulatory obligations, including those under Australian Consumer Law

  • Improve our services and website

We do not sell personal information to third parties.

We may disclose personal information to:

  • Our booking platform provider (Ovatu) for appointment management

  • Squarespace, for website hosting, e-commerce and payment processing

  • Payment processors, to complete transactions

  • Email marketing platform, if you subscribe

  • Regulatory or law enforcement bodies, where required by law

5. Storage and Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. This includes:

  • Storing client and booking data within Ovatu's secure platform

  • Storing website and shop data within Squarespace's secure infrastructure

  • Restricting access to consultation and health records to authorised Canvas Skin Co. staff only

If we experience a data breach likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches (NDB) scheme, including notifying affected individuals and the OAIC where required.

6. Access, Correction and Complaints

You have the right to:

  • Request access to the personal information we hold about you

  • Request correction of inaccurate or outdated information

  • Make a complaint if you believe we have mishandled your personal information

To make a request, contact us at: Email:hello@canvasskinco.com.auPhone: (03) 9191 6278 Post: 9 Balaka Place, Bundoora VIC 3083

We will respond to access, correction or complaint requests within a reasonable timeframe.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

7. Retention and Destruction of Information

We retain personal and health information only for as long as necessary to provide our services and to meet legal, accounting or reporting obligations.

When information is no longer required, we take reasonable steps to securely destroy or de-identify it.

8. Cookies and Online Tracking

Our website, hosted on Squarespace, may use cookies to improve user experience and analyse website traffic.

9. Overseas Disclosure

Some of our service providers (such as Squarespace, which may store data on servers outside Australia) may process personal information overseas.

10. Changes to This Policy

We may update this policy from time to time. The most current version will always be available on our website, with the date of last update shown at the top of this page.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

Canvas Skin Co. 9 Balaka Place, Bundoora VIC 3083 Phone: (03) 9191 6278 Email: hello@canvasskinco.com.au

‍