Last updated: January 2026

Savu Studio (“we,” “our,” or “us”) is committed to protecting your privacy and safeguarding your personal and health information. This policy explains how we collect, use, disclose, store, and protect your information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

A copy of the APPs is available from the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

1. Personal Information We Collect

Personal information is information or an opinion that identifies you or could reasonably identify you.

We may collect the following types of information:

• Name, date of birth, address, email, and phone number

• Medical history, medications, allergies, and previous treatments

• Clinical photographs and skin imaging, including digital systems such as Canfield Nexa ST

• Health information relevant to your aesthetic, dermatologic, or medical weight management care

• Payment and billing details, where applicable

This information is collected for the primary purpose of delivering safe, effective clinical care, maintaining accurate medical records, and supporting practice operations.

We may also use your information for directly related purposes you would reasonably expect, such as appointment reminders, follow-up communication, and internal clinical quality review.

With your consent, limited information may also be used for practice communications such as updates, education, or service announcements. You may opt out of these communications at any time.

2. How Information Is Collected

We collect information in several ways, including:

• When you complete online or in-clinic forms

• During in-person or telehealth consultations

• Through email, SMS, or phone communication

• When you use our website or patient systems such as DappleOS

• From referring practitioners, pharmacies, or pathology providers, with consent

We may also collect limited information automatically through website analytics and cookies. You can adjust cookie settings through your browser preferences.

3. Sensitive Information

Sensitive information, including health data, is collected only where necessary for your care or where required by law.

This information is used or disclosed only:

• For the purpose for which it was collected

• For a directly related clinical purpose

• With your explicit consent

• Where required or authorised by law

4. Information from Third Parties

Where possible, we collect information directly from you. In some circumstances, we may receive relevant information from other healthcare providers involved in your care. When this occurs, we take reasonable steps to ensure you are aware of the information received and its intended use.

5. Disclosure of Personal Information

Your information is disclosed only when necessary to support your care or meet legal obligations. This may include:

• Treating clinicians, pathology services, or compounding pharmacies

• Secure clinical software providers such as DappleOS

• Regulatory or government authorities where required by law

We do not sell, rent, or trade your personal information for unrelated commercial purposes.

6. Storage and Security

We take reasonable steps to protect your information from misuse, loss, unauthorised access, modification, or disclosure.

Electronic records are stored securely within DappleOS, an encrypted, Australian-based clinical platform that complies with the Privacy Act and relevant digital health standards.

When information is no longer required, it is securely destroyed or permanently de-identified in accordance with legal and professional obligations.

7. Access and Correction

You have the right to access the personal information we hold about you and to request corrections if it is inaccurate or incomplete.

Requests can be made in writing using the contact details below. For security purposes, identification may be required before information is released. There is no charge for accessing or correcting your information.

8. Keeping Information Accurate

We take reasonable steps to ensure your records are accurate and up to date. Please let us know if your personal or health details change so we can maintain safe and effective care.

9. Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in legislation, technology, or clinical practice. The most current version will always be available on the Savu Studio website.

10. Contact & Complaints

If you have any questions or concerns about this Privacy Policy or how your information is handled, please contact:

Savu Studio
Located within The Derm Clinic
Email: simon@savustudio.com.au
Address: 15/11–13 Pearl Street, Kingscliff NSW 2487

We take privacy matters seriously and aim to resolve any concerns promptly. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au/privacy/privacy-complaints.