Core Aesthetics uses personal and health information to respond to enquiries, manage appointments, provide consultation, keep clinical records, communicate about care and meet legal or professional obligations. Optional website analytics are blocked unless you expressly allow them. Booking-form contents, enquiry answers and clinical records are not sent to advertising platforms. Optional advertising measurement has separate choices described below.
What Does This Policy Cover?
Core Aesthetics collects and uses personal and health information to respond to enquiries, manage appointments, provide consultation, keep clinical records, communicate about care and meet legal or professional obligations. Health information is sensitive information and is handled separately from public marketing.
This policy applies to the Core Aesthetics website, clinic communications and records under the clinic’s control. Separate services such as Square, Google, Meta, Microsoft, Ahrefs and MailerLite also operate under their own privacy terms.
What Information May Be Collected And Why?
| Context | Information may include | Purpose |
|---|---|---|
| Essential website operation | Security logs, IP address, browser and device information | Deliver, secure and troubleshoot the website |
| Optional website analytics | Online identifiers, approximate location, device and browser information, pages viewed and interaction data | Understand aggregate website use and improve the site, only after express consent |
| Enquiry or appointment | Name, contact details, availability and appointment information | Respond and administer appointments |
| Consultation and care | Relevant health history, medicines, allergies, symptoms, previous care, consent and clinical records | Assessment, safety, records and follow up |
| Mailing list | Email address and consent record | Send general clinic updates when you choose to subscribe |
Your Analytics Choice
Across the website, optional Google Analytics, Microsoft Clarity and Ahrefs Web Analytics stay off until you allow analytics in Privacy choices. These services can receive online identifiers, device and browser information, approximate location, pages viewed and interaction data.
On the advertising consultation page, the choices are separate: Google Analytics measures visits, active time, video viewing, booking-link clicks and whether an enquiry was saved. Google Ads measurement also permits advertising cookies and ad-click identifiers to attribute those generic events to an ad. That page does not run Clarity, Ahrefs or session recording. A booking-link click is not a confirmed appointment.
Optional Meta page views: only on the advertising consultation page, a separate choice allows a basic Meta Pixel image to report a PageView. Meta receives your IP address, browser connection information, the clinic domain and any Meta cookies your browser permits. This reveals that you visited the clinic website; Meta may associate the visit with your account and use it for ad measurement under its own terms. We do not send the page path, query string, page text, enquiry answers, selected concerns, names, email addresses, phone numbers, enquiry events or booking events to Meta. The full Meta tracking script and automatic matching are not installed.
Meta measurement is off by default. Allowing Google analytics or Google Ads does not allow Meta. You can enable or disable Meta separately on the advertising page, or choose Use Essential Only to turn off optional measurement. Choices are remembered for up to six months in this browser. Changing your choice stops future collection; it does not recall information already sent. Refusing does not affect enquiries or booking.
Core Aesthetics does not use Meta Conversions API, enhanced conversions, patient/customer-list uploads or patient-activity retargeting for these campaigns. Browser or ad-blocking settings may prevent measurement. Read Meta’s Privacy Policy for its processing, retention and account controls.
Square Appointment Booking
You can book through the on-site consultation form or continue to Square’s own booking website. The on-site form uses your name, email address, phone number, selected consultation and appointment time to arrange and manage an appointment in Square. Please do not enter medical history, medicines, allergies or other clinical information into this booking form. It does not collect payment-card details.
Before you submit, the form asks for your agreement to this use and sharing. It checks the selected time again and shows whether Square has accepted the appointment or whether it is still awaiting acceptance. Choosing a time alone does not reserve it.
The on-site form does not run advertising pixels, session recording or optional booking-step measurement. Essential technical checks record only bounded error categories and counts. A secure session cookie helps separate your booking attempt from another person’s. The page is designed to clear displayed contact details 20 minutes after opening, when you use Clear this page, or when you leave. Browser-managed features and interrupted or crashed browser sessions are outside our full control. Clearing the page does not cancel an appointment already sent to Square.
Temporary server-side sessions and unsubmitted contact details expire after 30 minutes. If a customer-creation response is uncertain, its contact payload expires after 24 hours. A limited encrypted recovery record is kept for up to 30 days after the later of the request or appointment date to check the result and avoid duplicate submissions. Expired records are removed by scheduled cleanup, normally within another five minutes; technical failures can delay that cleanup and trigger an administrator alert. These limits do not delete Square’s records or clinical records held under separate obligations.
The private booking-state directories are excluded from new routine server backups. Earlier encrypted backups may remain under the existing backup-retention schedule, including a policy retaining three yearly snapshots. Expiry in the live application is not a promise of immediate deletion from those historical backups. Authorised hosting administrators can access server data for security and recovery.
The embedded clinic map loads from Google. It receives no booking-form fields or page referrer from this form. Google’s own privacy terms apply to that separate connection. If you choose the external Square booking link, you leave this website and Square handles the information you enter under Square’s Privacy Notice.
Website And Communication Providers
| Provider or function | When used | Information and control | Retention and location |
|---|---|---|---|
| Website hosting, WordPress, LiteSpeed and Cloudflare | Essential | Technical and security data needed to deliver and protect the site | Provider and clinic security settings apply; processing may occur outside Australia |
| Google Tag Manager and Google Analytics | Optional, after Allow Analytics | Online identifiers, device, approximate location, page and interaction data; no form or booking contents | Retention follows the clinic’s configured Google settings and Google terms; processing may occur outside Australia |
| Microsoft Clarity | Optional, after Allow Analytics | Device, page and interaction data; sensitive form and appointment contents are not configured for collection | Retention follows the clinic’s configured Microsoft settings and Microsoft terms; processing may occur outside Australia |
| Ahrefs Web Analytics | Optional, after Allow Analytics | Website-use and page interaction data for aggregate performance reporting | Retention follows the clinic’s configured Ahrefs settings and Ahrefs terms; processing may occur outside Australia |
| Meta Pixel, basic image only | Optional, after separate Meta consent on the advertising consultation page | PageView, IP/browser information, clinic domain and any Meta cookies permitted by the browser; no form answers, page text or booking events | Meta may associate the visit with an account; processing and retention follow Meta terms and may occur outside Australia |
| Google Ads measurement | Optional, after its separate choice on the advertising consultation page | Advertising cookies, ad-click identifiers and generic interaction events, not enquiry answers or clinical records | Google settings and terms apply; processing may occur outside Australia |
| Google Maps | When an embedded map loads, or you open a Google Maps link | Your browser connects to Google separately from our optional analytics choices. Google may receive IP address, browser/device information and request/referrer information. | Google’s Privacy Policy and Maps terms apply. Processing and retention follow Google’s terms and your settings; processing may occur outside Australia. |
| Square | When you choose to book | Information you enter to administer the appointment | Square terms and applicable clinic record obligations apply; processing may occur outside Australia |
| MailerLite | When you choose to open and submit the mailing-list form | Email address and subscription consent | Kept until unsubscribe or another lawful retention requirement applies; processing may occur outside Australia |
Provider settings and terms can change independently. Contact us if you have questions about how a listed service handles your information.
Clinical Photographs And Separate Consent
Clinical photographs, if taken, require a clinical purpose and consent. Consent for a clinical record image is separate from consent for advertising or public use. You can refuse public advertising use without losing the ability to ask about consultation.
Core Aesthetics does not rely on public patient before-and-after galleries or personal outcome testimonials to promote the paid consultation pathway.
Access, Correction And Privacy Complaints
You may ask about access to personal information, correction of inaccurate details, communication preferences or a privacy concern. Identity may need to be verified before records are discussed or changed.
- Email: support@coreaesthetics.com.au
- Telephone: 0491 706 705
- Post: Core Aesthetics, 12A Atherton Road, Oakleigh VIC 3166
If a concern cannot be resolved directly, the Office of the Australian Information Commissioner provides privacy guidance and complaint information.
For questions about your records, clinical photographs or website privacy choices, use the contact details above. You do not need to book a cosmetic consultation to request access, correction or help with a privacy concern.
Official Privacy Guidance
Privacy Questions
Does Core Aesthetics collect health information?
Consultation and care may require relevant health information such as medical history, medicines, allergies, symptoms, previous care and consent details so Corey Anderson RN can assess risks and safe next steps.
Do optional analytics run before I consent?
No. Optional analytics stay off unless allowed in Privacy choices. On the advertising consultation page, Google Ads measurement and Meta page views have separate consent choices; accepting analytics alone does not enable them.
Can I use the website with essential technology only?
Yes. Select Use Essential Only. The website and external Square booking link remain available while optional analytics stay blocked.
Can I change my analytics choice?
Yes. Open Privacy Choices from the persistent control and choose again. The page reloads so the new setting applies to future website activity.
Does Core Aesthetics send appointment or patient information to advertising platforms?
We do not send enquiry answers, selected concerns, contact details, clinical records or Square booking-form contents to advertising platforms. With separate consent on the advertising consultation page, Meta receives a basic page-view signal, IP/browser information, the clinic domain and any Meta cookies the browser permits. This reveals a visit to the clinic website, but not an enquiry or booking. Google measurement has its own choices. We do not use Meta Conversions API, enhanced conversions or patient-list uploads for these campaigns.
What happens when I continue to Square?
You leave the Core Aesthetics website and Square collects the information you choose to enter to administer the appointment under its privacy terms.
Are clinical photographs used for advertising automatically?
No. Clinical-record consent is separate from advertising consent. Public use requires a separate, informed decision and is not required to ask about consultation.
Can I ask to access or correct my information?
Yes. Contact Core Aesthetics. Identity may need to be verified before records are discussed or changed.
Who do I contact about a privacy concern?
Email support@coreaesthetics.com.au, call 0491 706 705 or write to Core Aesthetics, 12A Atherton Road, Oakleigh VIC 3166.
Is this policy legal advice?
No. This page explains Core Aesthetics information handling and privacy choices. It is general information, not legal advice. Provider arrangements are rechecked when they materially change.