Privacy Policy — Tilrupa

Tilrupa Aesthetic Clinic (“Tilrupa”, “we”, “us”) is committed to protecting your privacy and complying with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and the Health Records and Information Privacy Act 2002 (NSW).

What we collect

Identity and contact details: your name, email, phone number and address.
Health information: medical history, allergies, medications, treatment notes and consent forms you give at the clinic.
Booking information: your appointment times, services, invoices and payment status.
Technical information: IP address, device and browser type for site security and analytics (aggregated and anonymised where possible).
Photographs: before-and-after images only where you have given written consent.

How we use it

To provide the treatment or consultation you have booked.
To send booking confirmations, reminders, invoices and aftercare instructions.
To meet our clinical record-keeping and regulatory obligations.
To respond to your enquiries.
To improve the website and our services. We never sell your information.

Who we share it with

Our treating clinicians and administrative staff on a need-to-know basis.
Service providers who help us run the clinic: Supabase (database and authentication), Resend (email delivery), Stripe/PayPal (payments). These providers are bound by their own privacy obligations.
Regulators, courts or law enforcement where we are required by law.

We do not transfer your personal information overseas except through the service providers listed above, which may store data in Australia, the United States or the European Union.

How we keep it safe

Access is restricted to authorised staff; data in transit is encrypted (HTTPS); clinic records are stored on secure, access-controlled systems; and we review our safeguards regularly. Our website uses CAPTCHA to protect sign-in, signup and contact forms from abuse.

How long we keep it

Clinical records are kept for at least seven years from the date of the last entry, or longer if required by law. Other information is kept only as long as necessary.

Your rights

You can ask to see the personal information we hold about you, correct it if it is wrong, or ask us to delete it where the law allows. You can also opt out of marketing communications at any time by using the unsubscribe link or by contacting us.

Cookies

We use essential cookies to keep you signed in and to remember your preferences. We do not use third-party advertising cookies.

Contact us

If you have a question or a complaint about privacy, email anisha@tilrupa.com or call 0497 681 395. You can write to us at 457 Church St, North Parramatta. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Material changes will be posted here and, where appropriate, communicated by email.