BareWolf® respects the private and sensitive nature of the information clients share with us. This policy explains how BareWolf collects, holds, uses, discloses and protects personal information across our clinics, website, app, booking systems, treatments, rewards and referral programs.
We handle personal information under the Privacy Act 1988 (Cth), the Australian Privacy Principles and applicable NSW health-privacy laws.
We may collect:
Information collected to assess, provide or record a health-related service may be health and sensitive information. We generally collect it with consent and where reasonably necessary for suitability, treatment, safety, record keeping or legal obligations. Accurate information is important to treatment safety.
We may collect information directly from you, through forms, our website, app and booking systems, during consultations and treatments, through transactions and promotions, from cookies and analytics, from an authorised representative, or from another practitioner where you consent or the law permits.
You may be able to make a general enquiry anonymously or using a pseudonym. Correct identification may be required for bookings, treatments, records, payments, safety or legal compliance.
We may use information to:
Clinical photographs may be taken for assessment, planning, monitoring, documentation or safety. Clinical consent does not authorise public marketing use. Separate permission will be requested before identifiable photographs, videos, testimonials or results are used for advertising, social media or education. Declining marketing use will not affect ordinary services.
We may send promotional communications where consented to or otherwise permitted. You may unsubscribe at any time. Unsubscribing does not stop necessary booking, receipt, safety, aftercare or service communications.
Where reasonably necessary, information may be shared with authorised BareWolf staff and practitioners; booking, app, payment, hosting, analytics, communications and technology providers; advisers, insurers and auditors; another practitioner with consent or lawful authority; emergency services; regulators or law enforcement; or parties involved in a proposed business transaction under appropriate safeguards.
We do not sell health information or treatment records.
Some service providers may store or process information outside Australia. BareWolf will take reasonable steps required by Australian privacy law and identify relevant countries in this policy or a collection notice where practicable. Our provider list and overseas locations must be confirmed before publication.
Third-party providers may process payments. BareWolf may receive transaction details, payment status, limited card information or secure tokens according to the systems used.
Our website and app may use cookies and similar technology for functionality, preferences, analytics, security and permitted campaign measurement. Information may include IP address, device identifiers, browser, pages viewed, actions, referral source and approximate location. Browser or device settings can manage cookies, although functionality may be affected.
BareWolf takes reasonable steps to protect information using access controls, staff confidentiality and training, secure systems, device security, restricted records, secure disposal and incident-response processes.
No system is completely secure. Suspected breaches will be contained and assessed. Where serious harm is likely and notification is required, BareWolf will notify affected individuals and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.
We retain information as reasonably necessary for treatment, safety, continuity, legal, insurance and operational purposes. NSW health-record requirements may include at least seven years for adult records and longer for records created while a client is under 18. Information no longer required will be securely destroyed or de-identified where permitted.
You may request access to, or correction of, personal information we hold. We may require a written request, details of the information, identity verification and authority for representatives. Access may be limited only where permitted by law; reasons and complaint options will generally be provided.
Contact BareWolf first with your concern. We will acknowledge, investigate and respond within a reasonable period. If unresolved, you may contact the Office of the Australian Information Commissioner or another appropriate privacy or health-complaints body.
OAIC: oaic.gov.au | 1300 363 992
The current policy and effective date will be published on our website. Material changes apply prospectively, with additional notice or consent where required.
Sydney CBD: 128 Castlereagh Street, Sydney NSW 2000
Belfield: 1A Burwood Road, Belfield NSW 2191
Phone: 1300 227 953
Privacy email: To be confirmed before publication