Privacy Policy DERM Skin Specialists, Mount Gravatt

What Personal Information DERM Skin Specialists Collects

• Contact and identity details: name, date of birth, address, phone, email, emergency contact.
• Health information: your medical history, medications, allergies, examination findings, clinical photographs, pathology and imaging results, treatment notes, referral letters and correspondence with other doctors.
• Billing details: Medicare and private health insurance details, and payment records. We don't store full card numbers. Card payments are processed by our payment provider.
• Website and enquiry details: what you send us through our contact forms, live chat or email, and information about how you use our website (see "Our website" below).

We collect most information directly from you, at booking, on our forms and during your consultation. Sometimes we receive it from others with your consent or where the law allows, such as your referring GP or specialist, pathology and imaging providers, your health fund, or a parent or guardian.

You can ask to deal with us anonymously or under a pseudonym for general enquiries, but we can't usually treat you or claim Medicare rebates without identifying you.

Privacy and Your Clinical Photographs

We take clinical photographs as part of your medical record. We will only use a photograph of you in education, on our website or on social media with your separate, specific written consent, which you can withdraw at any time.

How the DERM Skin Specialists Website Uses Cookies and Tracking

Our website uses cookies and similar technologies to work properly, to understand how visitors use it, and to measure our advertising. These include:

• Google Analytics and Google Tag Manager to measure visits and which pages are used.
• Microsoft Clarity to understand how visitors use our pages, through heatmaps and session replays showing clicks, taps and scrolling. We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioural metrics, heatmaps and session replay to improve our services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of pages and online activity. This information is also used for site optimisation and fraud and security purposes. For more about how Microsoft collects and uses your data, see the Microsoft Privacy Statement (https://privacy.microsoft.com/privacystatement). Text you type into forms is masked and not recorded by Clarity.
• Advertising tags from Google Ads and Meta (Facebook and Instagram) to measure whether our ads lead to enquiries or bookings, and to show our ads to people who have visited our site.
• Call tracking that shows a different phone number to some visitors so we can tell which ads lead to calls.

These tools collect information such as your device, browser, approximate location, the pages you visit and how you got to our site. They are not used to identify you, and we do not put your health information into them. You can block or delete cookies in your browser settings, opt out of Google Analytics with Google's browser add-on, and manage ad personalisation in your Google and Meta account settings.

Online booking: when you book online you use Healthengine's booking system, which has its own privacy policy.

Accessing and Correcting Your Health Information

You can ask for a copy of your records or ask us to correct information you think is wrong. Please contact our Practice Manager in writing. We'll respond within 30 days. We may charge a reasonable fee for copying, which we'll tell you in advance, and in limited cases the law allows us to refuse access; if so, we'll explain why.

Changes to This Privacy Policy

We may update this policy from time to time. The current version is always on our website, and a copy is available at reception.