Your privacy matters to us.

Comfort Through Care is a private post-operative nursing service for cosmetic surgery clients, operated by LAAC Pty Ltd. Because we handle health information as part of that service, this policy explains how we collect, use, store and disclose personal and health information, consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and the NSW Health Records and Information Privacy Act 2002 (HRIP Act) and its Health Privacy Principles.

Health service providers must comply with these laws regardless of business size — there is no small-business exemption for us.

Comfort Through Care is the trading name of LAAC Pty Ltd (ABN 43 701 231 085), based in Sydney, NSW. Our registered nurse delivers in-home post-operative aftercare to clients following cosmetic surgery, working alongside each client’s treating surgeon.

We collect two broad categories of information — only what we need to deliver safe and coordinated aftercare:

Personal information — name, date of birth, contact details, emergency contact, and billing and payment details.

Health information — medical history, current medications and allergies, the procedure and scheduled date, the treating surgeon and clinic, and clinical notes and observations recorded during aftercare visits.

Health information is sensitive information under the APPs and the HRIP Act, and is handled with a higher standard of care than ordinary personal information.

We usually collect this information directly from you, through our intake and consent process before your first visit. We may also receive limited details, such as procedure type and date, from your treating surgeon or clinic, but only where you have agreed to that referral and the information sharing it involves.

We use your information to plan and deliver your aftercare visits and monitor your recovery; communicate with you about scheduling and your care; coordinate with your treating surgeon on your recovery, where you have consented to this; invoice for services and manage our business records; and meet our legal, clinical record-keeping and insurance obligations.

We do not use your information for direct marketing without your consent, and we do not sell your information.

Because your aftercare is part of your overall recovery, we typically share relevant updates with your treating surgeon or clinic — for example, if something during a visit needs their attention. We only do this on the basis of the consent you give us as part of your intake, and only share what is clinically relevant.

No fee or other benefit is paid or received by Comfort Through Care for client referrals in either direction.

We may disclose information to trusted service providers who support our business, for example our practice management, email and cloud storage providers, and where required or authorised by law — such as a genuine clinical emergency or a lawful request from a regulator. We do not disclose your information to any other third party without your consent unless the law requires it.

Client records are stored electronically through our business Google Workspace environment, with access limited to our registered nurse and any other authorised Comfort Through Care staff involved in your care. We apply technical and organisational safeguards appropriate to health information, including multi-factor authentication, access controls limited to staff who need the information, and a documented process for responding to any security incident.

Our cloud service provider may store or process information on servers located outside Australia as part of its ordinary global infrastructure. We take reasonable steps to ensure any such handling meets Australian privacy standards.

If we become aware of a data breach involving your information that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme, and take steps to contain and remediate the incident.

You can ask to see the information we hold about you, or ask us to correct it, at any time. We will respond within a reasonable period. In limited circumstances permitted by law we may need to decline a request, and if so we will explain why.

We generally retain adult clients’ health records for at least 7 years from your last visit, and longer where required by law. After that, records are securely destroyed or de-identified.

If you have a concern about how we have handled your information, contact us using the details below and we will aim to resolve it directly. If you are not satisfied with our response, you can complain to the OAIC (oaic.gov.au) or, for NSW health records specifically, the NSW Information and Privacy Commission (ipc.nsw.gov.au).

We may update this policy from time to time as our services or the law changes. The current version will always be available from us on request and published on our website.