Privacy Policy — au.myfacedr.com (Australia)

Last updated: 8 September 2026

FD Group Pty Ltd (ABN: 28 127 647 429) (“Face Dr Australia”, “we”, “us” or “our”) operates au.myfacedr.com (the “Website”) and provides online skincare retail and consultation services.

We respect your privacy and are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) (the “Privacy Act”) and the Australian Privacy Principles (“**APPs”), where applicable.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you:

• visit or use the Website;
• create an account;
• purchase products;
• contact us;
• subscribe to marketing communications;
• book or participate in a skincare consultation; or
• otherwise communicate or interact with us.

By using the Website or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

The entity responsible for the handling of your personal information is:

FD Group Pty Ltd
ABN: 28 127 647 429
Address: 81 Watt Road, Mornington VIC 3931, Australia
Email: hello@myfacedr.com

For privacy enquiries, access or correction requests, or complaints, please contact us using the details above.

2. What Is Personal Information?

“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or recorded in a material form.

The kinds of personal information we collect and hold depend on how you interact with us.

3. Personal Information We Collect

3.1 Identity information

We may collect:

• your name;
• date of birth or age information where relevant;
• gender or preferred pronouns where voluntarily provided;
• account login details;
• information used to verify your identity; and
• information included in communications with us.

3.2 Contact and delivery information

We may collect:

• email address;
• telephone or mobile number;
• billing address;
• delivery address;
• postal address; and
• communication preferences.

3.3 Order and transaction information

When you purchase products or use our services, we may collect:

• products purchased;
• order numbers;
• order history;
• delivery and return details;
• payment status;
• discount codes or promotional details;
• customer service correspondence; and
• information required to manage refunds, exchanges or product issues.

3.4 Financial information

Payment information may include payment method, payment status, billing details and transaction identifiers.

Payments are generally processed by third-party payment providers. We do not ordinarily store complete payment card numbers or security codes on our own systems. Payment providers may collect and process payment information in accordance with their own privacy policies and terms.

3.5 Technical and usage information

When you use the Website, we may automatically collect:

• IP address;
• browser type and version;
• device type;
• operating system;
• language and time-zone settings;
• referring website;
• pages viewed;
• links clicked;
• search queries;
• browsing activity;
• approximate location derived from IP address;
• session information;
• information about how you interact with emails, advertisements and the Website; and
• error, diagnostic and performance information.

3.6 Marketing information

If you subscribe to our marketing communications, enter a promotion or otherwise interact with our marketing, we may collect:

• your marketing preferences;
• records of consent or opt-out requests;
• information about communications sent to you;
• information about whether communications were opened or links were clicked; and
• your responses to surveys, competitions or promotional activities.

3.7 Consultation and health-related information

If you voluntarily participate in a skincare consultation or request personalised skincare advice, you may choose to provide information such as:

• skin concerns and goals;
• skin type and sensitivities;
• allergies or known reactions;
• current skincare routine;
• relevant medical or treatment information;
• information about products previously used;
• photographs of your skin;
• information about medications or other products that may be relevant to skincare advice; and
• other information you choose to share with our skincare experts.

Some of this information may be health information or other sensitive information under the Privacy Act.

We only collect health-related or other sensitive information where it is reasonably necessary for our functions or activities and, unless an exception applies, with your consent. Consent may be provided through a consultation form, online interaction, email, telephone conversation or other appropriate method.

Some consultations may be AI-assisted. Where applicable, information and photographs you choose to provide may be processed by technology providers supporting the consultation service. AI assistance does not replace the need for appropriate human oversight. Skincare information and recommendations are provided for general skincare and product guidance and are not a substitute for diagnosis or treatment by a qualified medical practitioner.

We do not use consultation health information for direct marketing unless you have separately consented to that use.

4. How We Collect Personal Information

We may collect personal information in the following ways.

4.1 Directly from you

We may collect information directly when you:

• use or browse the Website;
• create or update an account;
• place an order;
• complete a checkout form;
• book or participate in a consultation;
• submit a contact or enquiry form;
• contact customer service;
• subscribe to marketing communications;
• provide feedback or reviews;
• enter a competition or promotion;
• provide information by email, telephone, live chat or social media; or
• voluntarily provide information in another way.

Where we collect sensitive information, we will take appropriate steps to obtain consent where required.

4.2 Automatically

We may collect technical and usage information using cookies, pixels, tags, web beacons, software development kits and similar technologies.

These technologies may be operated by us or by third-party service providers acting on our behalf.

4.3 From third parties

We may receive personal information from third parties, including:

• Shopify and other e-commerce platform providers;
• payment processors;
• delivery and fulfilment providers;
• fraud prevention and security providers;
• analytics and advertising providers;
• customer relationship management and support providers;
• consultation, booking and communications providers;
• social media platforms;
• marketing providers;
• publicly available sources; and
• other service providers that assist us in operating the Website and our business.

We expect third parties that provide information to us to collect and disclose it lawfully.

5. Why We Collect, Hold, Use and Disclose Personal Information

We may collect, hold, use and disclose personal information for the following purposes.

5.1 Providing products and services

We use personal information to:

• process and fulfil orders;
• process payments;
• arrange delivery;
• provide order confirmations and updates;
• manage returns, exchanges and refunds;
• provide customer support;
• maintain customer accounts;
• provide requested consultations and skincare guidance;
• develop personalised skincare recommendations;
• respond to enquiries;
• administer promotions and loyalty activities; and
• provide other products or services requested by you.

5.2 Consultation and personalised skincare advice

Where you provide consent, we may use consultation information and photographs to:

• understand your skincare concerns and goals;
• provide personalised product and routine recommendations;
• monitor or discuss your skincare progress;
• communicate with you about your consultation;
• provide follow-up support; and
• improve the consultation service.

You may withdraw your consent to the collection or use of consultation health information at any time by contacting us. Withdrawal may affect our ability to provide certain consultation or personalised advice services.

5.3 Marketing and advertising

Subject to applicable law and your preferences, we may use personal information to:

• send promotional emails, text messages or other marketing communications;
• provide information about products, services, offers and events;
• personalise marketing communications;
• measure the effectiveness of advertising and campaigns;
• display advertisements that may be relevant to you; and
• conduct customer research and surveys.

You can opt out of marketing communications at any time by:

• using the unsubscribe link in an email;
• replying “STOP” to an eligible text message;
• changing your account preferences, where available; or
• contacting us at hello@myfacedr.com.

We may continue to send non-promotional communications reasonably necessary to administer your orders, account, consultations or other services.

We do not use sensitive consultation information for direct marketing without your express consent.

5.4 Security and fraud prevention

We may use personal information to:

• detect, prevent and investigate fraud;
• verify transactions and account activity;
• protect the security of the Website, our systems and our customers;
• identify unauthorised access or misuse;
• manage cyber-security risks;
• enforce our terms and policies; and
• protect our rights, property and people.

5.5 Improving our services

We may use personal information to:

• analyse Website use;
• troubleshoot and improve Website functionality;
• evaluate and improve our products and services;
• understand customer preferences;
• conduct analytics and reporting;
• develop new products and services;
• improve customer support; and
• maintain and improve our business operations.

Where reasonably practicable, we use aggregated, de-identified or anonymised information for analytics and reporting.

5.6 Legal and business purposes

We may use and disclose personal information to:

• comply with applicable laws, regulations, court orders or legal processes;
• respond to requests from regulators, government authorities or law enforcement agencies;
• establish, exercise or defend legal claims;
• obtain professional advice;
• manage actual or potential business transactions;
• protect the rights, safety or property of Face Dr Australia, our customers or others; and
• perform other purposes permitted or required by law.

6. Grounds for Handling Sensitive Information

We will only collect, use or disclose sensitive information where permitted by the Privacy Act.

This may include circumstances where:

• you have given consent;
• the information is reasonably necessary for a service you have requested;
• the handling is required or authorised by law;
• a permitted health situation applies;
• the handling is necessary to prevent or lessen a serious threat to life, health or safety; or
• another exception under the Privacy Act applies.

Where we rely on consent, consent should be informed, voluntary, current and specific to the relevant purpose. You may withdraw consent, subject to legal or operational limitations.

7. Disclosure of Personal Information

We may disclose personal information to organisations that assist us to operate our business and provide products and services.

These organisations may include:

• Shopify and e-commerce platform providers;
• payment processors and financial service providers;
• warehouses, fulfilment providers and delivery carriers;
• customer support and communications providers;
• consultation, booking and video-conferencing providers;
• AI-assisted consultation and technology providers;
• cloud storage, hosting and information technology providers;
• analytics providers;
• marketing, advertising and email or SMS providers;
• fraud prevention and security providers;
• professional advisers, including legal, accounting and insurance advisers;
• insurers;
• auditors and business consultants;
• related bodies corporate and business partners; and
• government agencies, regulators, courts and law enforcement bodies where required or authorised by law.

We seek to limit disclosures to information reasonably necessary for the relevant purpose.

We do not sell your consultation health information.

8. Overseas Disclosure

Some third-party service providers we use may be located outside Australia or may store, process or access personal information outside Australia. This may include providers such as Shopify, payment processors, cloud storage providers, analytics providers, marketing providers, customer support providers and technology providers supporting AI-assisted consultations.

Depending on the provider and the services used, personal information may be disclosed to or accessed from countries including:

• the United States;
• the United Kingdom;
• Canada; and
• other countries in which our service providers or their subcontractors operate.

The countries involved may change as our service providers and technology arrangements change. Where practicable, we will identify relevant overseas recipients or countries at the time information is collected or in a supplementary privacy notice.

Before disclosing personal information to an overseas recipient, we will take reasonable steps required by the Privacy Act and APP 8 to ensure that the recipient does not breach the APPs in relation to that information, unless an exception applies.

Depending on the circumstances, we may use contractual safeguards, due diligence, privacy and security assessments, data-processing terms, access controls or other reasonable measures.

Where permitted by law, we may ask for your consent to an overseas disclosure. If you consent to an overseas disclosure and the relevant statutory exception applies, you acknowledge that the overseas recipient may not be subject to the APPs and that Australian privacy protections may not apply in the same way.

9. Cookies and Similar Technologies

Cookies are small text files placed on your device when you visit a website. We and our service providers may use cookies and similar technologies to:

• operate the Website;
• remember your preferences;
• keep items in your cart;
• maintain account and session functionality;
• understand Website traffic and usage;
• measure advertising and marketing performance;
• detect fraud and security issues;
• personalise content and advertising; and
• improve the Website and customer experience.

Cookies may be session-based or persistent. Some cookies are essential for the Website to operate, while others support analytics, advertising or personalisation.

You can manage or disable cookies through your browser settings or, where available, our cookie preference tools. If you disable cookies, some Website functions may not operate correctly.

Third-party providers may also use cookies and similar technologies in accordance with their own privacy policies. Further information about Shopify cookies is available at shopify.com/legal/cookies.

Where applicable, we may recognise recognised browser or device-based privacy signals, such as the Global Privacy Control signal, for certain online advertising or sharing activities. The effect of such signals may depend on the technology and services in use.

10. How We Hold and Protect Personal Information

We may hold personal information in:

• electronic databases;
• cloud-based systems;
• e-commerce and customer relationship platforms;
• email and communications systems;
• consultation and booking systems;
• payment and transaction systems;
• paper records; and
• records held by service providers on our behalf.

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. These steps may include:

• access controls and user permissions;
• authentication and password protections;
• encryption or secure transmission where appropriate;
• security monitoring;
• staff and contractor confidentiality obligations;
• vendor due diligence;
• secure storage and backup arrangements;
• data minimisation;
• incident response procedures; and
• secure destruction or de-identification when information is no longer required.

No online transmission or storage system can be guaranteed to be completely secure. You are responsible for keeping account passwords and login information confidential and should notify us promptly if you believe your account has been compromised.

If we determine that an eligible data breach has occurred, we will take steps required by the Notifiable Data Breaches scheme under the Privacy Act.

11. Retention and Destruction

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• provide products and services;
• maintain business and transaction records;
• comply with legal, tax, accounting and regulatory obligations;
• resolve disputes;
• enforce agreements; and
• protect our legitimate business interests.

Retention periods vary depending on the type of information and the purpose for which it was collected.

When personal information is no longer required, we will take reasonable steps to securely destroy it or ensure that it is de-identified, unless we are required or permitted by law to retain it.

12. Access to Personal Information

You may request access to personal information we hold about you.

To make an access request, contact us at hello@myfacedr.com and provide sufficient information to help us identify you and locate the relevant records.

We will generally respond to a valid request within a reasonable period. We may need to verify your identity before providing access.

In some circumstances, we may refuse access or provide limited access where permitted or required by law. For example, access may be refused where it would:

• pose a serious threat to the life, health or safety of an individual;
• have an unreasonable impact on another person’s privacy;
• prejudice legal or enforcement-related activities;
• reveal commercially sensitive information;
• be unlawful; or
• fall within another exception under the Privacy Act.

If we refuse access, we will provide written reasons where required and explain available complaint options.

We will generally provide access without charge, although we may charge a reasonable administrative cost where permitted by law. We will not charge for making an access request.

13. Correction of Personal Information

You may request that we correct personal information we hold about you if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a correction request, contact hello@myfacedr.com, identify the information concerned and explain the correction required.

We will take reasonable steps to correct information where appropriate and will generally respond within a reasonable period.

If we refuse a correction request, we will provide written reasons where required. You may ask us to associate a statement with the information explaining your view that it is inaccurate, out of date, incomplete, irrelevant or misleading.

14. Children and Young People

The Website and our products and services are intended for adults. We do not knowingly invite children under 18 to participate in skincare consultations or submit health-related information through the Website.

The Privacy Act does not establish one fixed age at which a person can provide valid privacy consent. Capacity to consent is assessed having regard to the individual’s age, maturity and understanding. Where appropriate, we may require a parent or guardian to provide consent or assist with a request.

If you are under 18, do not provide health information or photographs for a consultation unless you have the required capacity and, where appropriate, the involvement or consent of a parent or guardian.

If you believe a child has provided personal information to us, please contact us at hello@myfacedr.com. We will consider whether the information should be deleted or handled in another way permitted by law.

15. Direct Marketing Choices

You can opt out of direct marketing at any time.

Every electronic marketing communication will include an unsubscribe or opt-out facility where required by law. You may also contact us directly to withdraw your marketing consent.

Opting out of marketing will not affect:

• order processing;
• delivery communications;
• account administration;
• consultation administration;
• service messages; or
• other communications necessary to provide services you have requested.

We may retain a record of your opt-out request to ensure that we do not send you further marketing communications.

16. Third-Party Websites and Services

The Website may contain links to third-party websites, applications, social media platforms or services.

This Privacy Policy does not apply to the privacy practices of third parties that we do not control. You should review the privacy policies of those third parties before providing them with personal information.

17. Complaints

If you believe we have mishandled your personal information or breached the Privacy Act or APPs, please contact us first at:

FD Group Pty Ltd
81 Watt Road
Mornington VIC 3931
Australia
Email: hello@myfacedr.com

Please include:

• your name and contact details;
• details of the issue;
• relevant dates or transaction details;
• copies of supporting information, where available; and
• the outcome you would like us to provide.

We will acknowledge and investigate your complaint and respond within a reasonable period, generally within 30 days where practicable.

If you are not satisfied with our response, or we do not respond within a reasonable period, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

The OAIC can be contacted at:

Office of the Australian Information Commissioner
Website: oaic.gov.au/privacy/privacy-complaints
Telephone: 1300 363 992

The OAIC generally expects you to complain to the relevant organisation before lodging a complaint with it, unless an exception applies.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to our business or services;
• changes to the way we collect, use or disclose personal information;
• changes to technology or service providers;
• changes to applicable laws or regulatory guidance; or
• improvements to the clarity or operation of this Privacy Policy.

The updated version will be published on the Website with a revised “Last updated” date. Where required by law, we will take additional steps to notify you of material changes.

19. Contact Us

For questions, requests or complaints about this Privacy Policy or the handling of your personal information, contact:

FD Group Pty Ltd
81 Watt Road
Mornington VIC 3931
Australia

Email: hello@myfacedr.com