Privacy policy
Last updated November 2026
The Face by Georgia Hale ("we", "us") respects your privacy. This policy explains what personal information we collect, how we use it and how you can access it. We follow the Privacy Act 2020 and, for health information, the Health Information Privacy Code 2020.
What we collect
- Contact details, such as your name, email address and phone number.
- Booking details, such as the appointments you book, cancel or change.
- Health information, such as your medical history, medications, allergies, treatment notes and consent forms.
- Clinical photos taken before and after treatment for your records.
- Payment and membership details needed to process payments.
- Website information, such as the pages you visit, collected through cookies and analytics tools.
Our contact form
When you use the contact form on our website, we collect your name, email address, phone number (if you give it) and your message. We use these details only to reply to you. Please don't include medical information in the form. We'll talk about your health privately at your consultation.
Bookings
Online bookings are made through Timely, our booking system. Timely stores your contact and booking details so we can manage your appointments and send you confirmations and reminders by email and text. Timely has its own privacy policy, which applies to how it handles your information.
Health information
We collect health information so we can assess whether a treatment is safe and suitable for you, plan your treatment and keep accurate clinical records, as Registered Nurses are required to do.
- We collect it directly from you, at your consultation and on our client forms.
- Only the clinicians involved in your care can see your health information.
- We don't share it with anyone else without your consent, unless the law requires or allows it. For example, we may share it if there's a serious threat to your health or safety.
- We keep health records for at least 10 years after your last treatment, as required by the Health (Retention of Health Information) Regulations 1996.
Photos
Clinical photos are part of your treatment record. We'll only use your photos on our website or social media if you've given us separate written consent, and we'll take care not to identify you unless you've agreed to that. You can withdraw your consent for future use at any time.
Payments and memberships
Card payments are processed by our payment providers, and we don't store your full card details. Memberships are managed through Payleadr, which handles your direct debit details under its own privacy policy. Afterpay payments are handled by Afterpay.
Our website and cookies
Our website may use cookies and analytics tools, such as Google Analytics, to understand how people use the site and improve it. This information doesn't identify you personally. You can turn off cookies in your browser settings.
Storing and protecting your information
We store your information securely, using reputable systems that may hold data outside New Zealand. We take reasonable steps to protect your information from loss, misuse and unauthorised access, and we only keep it for as long as we need it or the law requires.
Marketing
We'll only send you marketing emails or texts if you've agreed to receive them. You can unsubscribe at any time.
Accessing and correcting your information
You have the right to ask for a copy of the personal and health information we hold about you, and to ask us to correct it. To make a request, email hello@theface.co.nz. We'll respond within 20 working days.
Questions or concerns
If you have a question or concern about your privacy, please contact our privacy officer, Georgia Hale, at hello@theface.co.nz, or write to us at Level 1, 169 Victoria Street, Christchurch. If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner.