Privacy Policy

Medical Hair Restoration Australia Pty Ltd, trading as Foli Sim (ABN 12 150 677 277), provides scalp micropigmentation (SMP) and hair tattoo services from clinics in Perth, Sydney and Melbourne. This policy explains how we collect, use, store and share your personal information, both on this website and in our clinics. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Last updated: 25 September 2026

The information we collect

• When you enquire or request a booking: your first and last name, email address, phone number, preferred clinic, how you would like to be contacted, the type of consultation you want, preferred appointment times and any notes you add.
• How you found us: the page you enquired from and, if you arrived from an advert or a tracked link, the campaign details attached to that link (for example a Google Ads click identifier or UTM tags).
• When you become a client: your treatment plan, appointment history, session notes, before and after photographs, signed consent forms, and details you tell us about your hair loss or scalp.
• When you pay: the payment amount, date and receipt. Card details are entered directly with our payment provider, Stripe; we do not see or store your full card number.
• When you message us: the contents of your emails, WhatsApp messages or calls with our team.

You can browse this website without telling us who you are. If you would rather not give us some information, we may not be able to book or treat you.

Health information

Information about your hair loss, scalp condition, medical history and your treatment photographs is sensitive (health) information. We collect it only with your consent, only when it is needed to assess and carry out your treatment, and we store it with extra protection: it is kept in Australia, in private storage that is not publicly accessible, and every time a staff member opens a treatment record, the access is logged.

We will never use your photographs in marketing, on this website or on social media without your separate written consent.

How we use your information

• To respond to your enquiry and arrange your consultation.
• To plan, carry out and follow up your treatment, including aftercare and top-up reminders.
• To take payments and issue receipts.
• To send you our newsletter, only if you have opted in. Every email has an unsubscribe link.
• To understand which of our advertising brings enquiries, so we spend less on advertising that does not work.
• To meet our legal, insurance and record-keeping obligations.

Cookies and tracking

This website uses:

• Our own cookies (fs_track and fs_gclid), which remember the advertising campaign that brought you to the site for up to 90 days, so we can connect an enquiry to the advert that produced it.
• Google Tag Manager, Google Analytics and Google Ads, which use cookies to measure visits and advertising results.
• Google Maps, embedded on our clinic pages, which may set Google’s own cookies.

You can block or delete cookies in your browser settings. The site still works without them; we simply cannot tell which advert you came from.

Who we share information with

We do not sell or rent your personal information. We share it only with service providers that help us run the business, and only what they need:

• Supabase: our client and enquiry database, including treatment records and photographs. Held in Sydney, Australia.
• Cloudflare: hosting this website and protecting it from attacks. Global network.
• Google (Workspace, Analytics, Ads, Maps): email, and measuring website visits and advertising results. United States and other countries.
• HubSpot: customer relationship records during our move to our own system. Held outside Australia.
• Brevo: sending our newsletter to people who have opted in. European Union.
• Stripe: taking card payments. United States and other countries.
• Southbank, our technology and marketing agency, and the automation tools it operates for us: building and running our website, systems and advertising. Australia and the European Union.
• Meta (WhatsApp): only when you choose to message us on WhatsApp. United States and other countries.

Because some of these providers store information overseas, your information may be held outside Australia. We choose providers that protect personal information to a standard comparable with Australian law, and your health information and treatment photographs stay in Australia.

We may also disclose information when the law requires it, or to protect someone’s safety.

How we protect your information

Our systems are available only to authorised staff, through individual logins with additional access controls. Each staff member sees only what their role needs; for example, an artist sees only their own clients. Access to treatment records is logged. Information is encrypted in transit.

How long we keep it

We keep client and treatment records for 7 years after your last treatment, or longer if the law requires. Enquiries that do not become bookings are kept for 2 years, then deleted. You can ask us to delete your information sooner; we will do so unless the law requires us to keep it.

Seeing, correcting or deleting your information

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email info@folisim.com.au or call 1300 668 490. We will respond within 30 days. There is no charge for making a request.

Complaints

If you have a concern about how we have handled your personal information, contact us at info@folisim.com.au. We will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this policy

We will post any changes on this page and update the date above.