Last updated: 21 October 2026

Who we are

We protect your personal and health information and handle it in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Rosacea Care Clinic and Eyes by Brianna are both run by Brianna Lee Caldow, optometrist (ABN 56 962 510 727). Rosacea Care Clinic is our dry eye and ocular rosacea clinic in Perth. Eyes by Brianna is our mobile optometry service, including visits to aged care facilities. In this policy, "we", "us" and "our" mean both services.

This policy explains what we collect, why, who we share it with, and how you can see or correct it. If you buy from our online shop, our online shop privacy policy also applies.

What we collect

We collect only what we need to look after your eyes and run our practice.

• Contact and identity details: name, date of birth, address, phone, email, and an emergency contact or carer if relevant.
• Health information: your eye and general health history, medications, allergies, family history, symptoms, examination findings, test results, diagnoses and treatment plans.
• Images: photographs and scans of your eyes, eyelids and facial skin taken during assessment and treatment (for example before and after IPL).
• Treatment and prescription records: treatments given, medicines prescribed, and spectacle or contact lens prescriptions and orders.
• Billing details: Medicare number, health fund details, invoices and payments. We don't store your full card number; card payments are processed by our payment terminal provider.
• Booking details: appointments you make with us, including online bookings.

How we collect it

Most information comes directly from you: when you book (including online), fill in a patient form, or talk with us during an appointment.

With your consent, or where the law allows, we may also receive information from:

• your GP, ophthalmologist, dermatologist or another health practitioner who refers you or shares results with us
• staff at your aged care facility, or a carer, guardian or family member helping with your care
• Medicare or your health fund, when we check eligibility or process a claim

Why we use it

We use your information to provide safe, ongoing eye care, and for purposes directly related to it:

• assessing, diagnosing and treating your eyes, and keeping an accurate clinical record
• booking appointments and sending confirmations, reminders and recall notices
• writing referrals and reports to other practitioners involved in your care
• ordering spectacles and contact lenses from optical laboratories and suppliers
• invoicing, and claiming from Medicare and health funds
• meeting our legal and professional obligations as a registered optometrist

We never sell your information. We won't use it for marketing unless you've agreed, and you can opt out at any time.

Who we share it with

We share your information only for the purposes above, with your consent, or where the law requires or allows it.

• Other health practitioners involved in your care, such as your GP or ophthalmologist
• Your aged care facility, carer or guardian, where you receive care through them
• Services Australia (Medicare) and your health fund, to process claims
• Optical laboratories and suppliers, who receive your name and prescription to make your spectacles or lenses
• Government or regulators where the law requires it, for example a court order or a serious threat to someone's safety

We also use trusted service providers to run our practice. They handle information only to provide their service to us:

Provider	What it does for us	Where your information is held
Supabase	Stores our clinical records and bookings	Sydney, Australia
ClickSend	Sends appointment text messages	Sydney, Australia (message content deleted after 4 months)
Resend	Sends appointment emails	Japan (Tokyo) and the United States
Google Workspace	Our clinic email (enquiries@rosaceacareclinic.com.au)	Australia and overseas, including the United States
Shopify	Our website and online shop	Overseas, including Canada and the United States

Information sent overseas

Your clinical record stays in Australia. Some information may be sent overseas when we contact you or you contact us.

• Appointment emails (your name, email address, and appointment day, time and location) pass through Japan and the United States.
• Emails you send us may be stored by Google in the United States and other countries.
• Website and online shop details may be stored by Shopify in Canada and the United States.

We take reasonable steps to make sure these providers protect your information to Australian standards, including written data protection agreements. If you'd rather not receive emails from us, tell us and we'll contact you by phone or text instead.

How we keep it safe

Your records are held in an encrypted database in Sydney, backed up daily.

• Only our clinical team can open your record. Each person signs in with their own account and a two-step code.
• Every change to a record is logged, and our software signs out automatically after 30 minutes of inactivity.
• Paper records, if any, are kept locked and securely destroyed when no longer needed.

We keep health records for at least 7 years after your last visit, or until you turn 25 if you were under 18 when we last saw you. After that we securely delete or destroy them.

If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

Texts and emails we send

We send texts and emails about your care: booking confirmations, appointment reminders, recall notices when you're due for a check, and messages when your glasses or products are ready.

These messages include your first name and appointment details, so please tell us if your mobile number or email changes, or if someone else can read your messages. To stop reminders or recall messages, email enquiries@rosaceacareclinic.com.au and we'll update your preferences.

Seeing and correcting your information

You can ask for a copy of your records, or ask us to correct anything that's wrong, out of date or incomplete. Email enquiries@rosaceacareclinic.com.au and we'll respond within 30 days.

There's no charge to make a request. We may charge a reasonable fee to cover copying costs, and we'll tell you the amount first. If we can't give you access or make a correction, we'll explain why in writing.

You can make a general enquiry without giving your name. To examine or treat you, or claim from Medicare, we need to know who you are.

Questions and complaints

If you have a question or a concern about your privacy, contact us first and we'll respond within 30 days.

• Email: enquiries@rosaceacareclinic.com.au
• Post: Brianna Caldow, Rosacea Care Clinic, Suite 8295, 125 Stirling Street, Perth WA 6000

If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner on 1300 363 992.

We review this policy every year and when our practice changes. The latest version is always on our website.