Privacy Policy

Your health, identity and contact details deserve the same care as your treatment. This page explains how Link Cosmetic Clinic and Link Medspa collect, use and protect your information.

01 Who we are

Link Cosmetic Clinic and Link Medspa are operated from 4/146 Sunnynook Road, Sunnynook, Auckland 0620, inside Sunnynook Link Pharmacy. In this policy, "we", "us" and "our clinic" refer to both practices, which share the same premises and clinical team.

We are bound by the New Zealand Privacy Act 2020, the Health Information Privacy Code 2020, and the standards of the Nursing Council of New Zealand and the Medical Council of New Zealand.

02 Information we collect

We only collect information that is necessary to provide safe, effective treatment and to run the clinic.

Personal details

• Full name, date of birth, address
• Phone number, email, preferred contact language
• Emergency contact (when relevant)

Health information

• Medical history, current medications, allergies
• Previous cosmetic treatments and outcomes
• Skin and clinical assessment notes from your consultation
• Treatment records (date, area, brand, dose, batch number, practitioner)
• Before-and-after clinical photographs (taken with your specific written consent)

Booking and website data

• What you submit on our online consult form
• Anonymous, aggregate usage data from this website (if analytics are enabled)

03 How we use your information

• To assess your suitability for treatment and recommend a clinical plan
• To deliver the treatment safely and document it for clinical, regulatory and product-traceability reasons
• To contact you about appointments, follow-up care, and clinically necessary recalls
• To respond to your questions and bookings
• To comply with our legal, regulatory and professional obligations

We do not use your information for marketing without your separate, opt-in consent.

04 Photography & portfolio

Clinical photography (before and after) is part of safe practice — it helps us track your outcome and plan your follow-up. These photos are kept in your clinical record only.

If we ever want to use a photograph publicly — on this website, social media, or for training — we will ask you separately, in writing, and only after the treatment is complete. You can decline, and your treatment will not be affected in any way.

05 Who can see your information

Your information stays inside our clinical team. We may share it only when:

• You ask us to (for example, with your GP or another clinician you nominate)
• It is required by law, court order, or a regulatory authority (Health & Disability Commissioner, Nursing Council, Medsafe, etc.)
• It is needed to manage an emergency or risk to your safety
• An external service provider (for example, secure cloud storage or a payment processor) needs limited access to do their job for us — those providers are bound by their own privacy obligations

We never sell, rent, or trade your information.

06 How we store and protect it

• Paper records are kept in a locked, access-restricted area of the clinic.
• Electronic records sit on access-controlled, encrypted systems used by our clinical team only.
• Photographs are stored against your clinical record, separate from any public-facing storage.
• Staff are trained on confidentiality as a condition of employment.

07 How long we keep it

Clinical records are retained for a minimum of 10 years from the date of your last treatment, as required by the Health (Retention of Health Information) Regulations 1996. Some records may be kept longer where there is a clinical, legal, or regulatory reason.

08 Your rights

Under the Privacy Act 2020 you have the right to:

• Ask us what information we hold about you
• Ask for a copy of that information
• Ask us to correct anything that is wrong or out of date
• Withdraw a consent you previously gave (for example, for portfolio photos)
• Make a complaint to the Office of the Privacy Commissioner — privacy.org.nz

Requests to access or correct your information are usually free and answered within 20 working days.

09 Website & cookies

This website is intentionally simple. We use a small amount of anonymous traffic data to understand which pages people read and to keep the site running. We do not place advertising trackers, and the online consult form is only used to arrange your appointment.

10 Changes to this policy

We may update this policy when our clinical practice, the law, or our systems change. The "Last updated" date above will always show the most recent revision.