Privacy Policy.

Power to Practice is a Western Australia-based distributor of medical aesthetic devices and skin technologies, supplying healthcare practitioners and clinics across Australia. References in this Policy to "we", "us" or "our" mean Power to Practice.

If you have any question about this Policy or how we handle personal information, please contact our Privacy Officer at info@powertopractice.com.au.

We collect personal information that is reasonably necessary for our business activities. The categories of information we typically collect include:

• Identity and contact details — your name, clinic or practice name, email address, phone number and postal address.
• Professional information — your role at the clinic, AHPRA registration number where relevant, and the products or platforms you have enquired about.
• Communications — the content of enquiries, partner-form submissions and email correspondence with our team.
• Technical and usage information — IP address, browser type, device information, pages visited, referring URLs and approximate location, collected via cookies and analytics tools.
• Practitioner-portal information — for verified healthcare practitioners, the credentials submitted to access HCP-only content (email, AHPRA registration number) and an audit log of access to therapeutic-good information.

We do not knowingly collect personal information from children. The Site is intended for adult clinic owners, healthcare practitioners and members of the public seeking general information about our brand.

Most personal information is collected directly from you when you submit a contact or partner enquiry form, register for the practitioner portal, send us an email, or speak with our team by phone.

We may also collect technical information automatically when you visit the Site — see the cookies section below — and we may collect publicly available information about your clinic from professional registries, your clinic website or LinkedIn for the purpose of partnership outreach.

We use personal information for the purposes for which it was collected, and for related secondary purposes you would reasonably expect. Specifically:

• To respond to your enquiries and provide product, training and pricing information.
• To verify your status as a healthcare practitioner before granting access to HCP-only therapeutic-good information.
• To process orders, fulfil partner agreements and provide ongoing service, support and clinical mentorship.
• To send you operational communications about products you have ordered or expressed interest in.
• To improve the Site and our services, including through analytics and user-experience research.
• To comply with our obligations under the Therapeutic Goods Act 1989 (Cth) and other applicable laws.

Where you have consented (or where we are otherwise permitted under the Spam Act 2003 (Cth)), we may send you marketing communications about our products, training events and clinical updates. Every marketing email contains an unsubscribe link, and you can opt out at any time by replying to any email or contacting info@powertopractice.com.au.

We disclose personal information only where necessary to provide our services or comply with the law. Categories of recipient include:

• Manufacturers we represent (for example, GENOSS in South Korea and Apolomed in China) where disclosure is required to fulfil orders, training and warranty obligations.
• Service providers including our email delivery provider (Resend), website hosting provider, customer-relationship management systems and accounting providers.
• Professional advisers including lawyers, accountants and auditors, where reasonably required.
• Government and regulatory authorities, including the Therapeutic Goods Administration, where required by law or in the course of adverse-event reporting.

We do not sell or rent your personal information.

Some of our service providers and manufacturer partners are located outside Australia, including in South Korea, China, the United States and the European Union. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles, including through contractual protections and assessment of the recipient's privacy framework.

We use cookies and similar technologies on the Site to maintain session state, remember preferences, and understand how visitors use the Site. Some cookies are strictly necessary; others (analytics, advertising and performance cookies) are used only with your consent where required.

If we operate analytics or advertising pixels, you can manage cookie preferences through our cookie banner, your browser settings, or by contacting us. Disabling non-essential cookies will not affect your ability to use core areas of the Site.

Personal information is stored in cloud-hosted systems operated by reputable Australian and international providers. We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure — including encryption in transit, access controls, and regular review of our systems and processes.

Despite these measures, no electronic transmission or storage method is completely secure. If you are concerned about the security of any information you provide to us, please contact us before submitting it.

If a data breach occurs that is likely to result in serious harm to any individual whose personal information is involved, we will respond in accordance with the Notifiable Data Breaches scheme established under Part IIIC of the Privacy Act 1988 (Cth). We will notify affected individuals and the Office of the Australian Information Commissioner where required.

You have the right under the Australian Privacy Principles to request access to the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date, incomplete or misleading. To make such a request, please contact info@powertopractice.com.au.

We will generally respond to access and correction requests within 30 days. There is no fee for making a request, although a reasonable cost-recovery fee may apply for complex or extensive requests.

If you are unhappy with the way we have handled your personal information or believe we have breached the Australian Privacy Principles, please contact us first. We will investigate and respond within a reasonable period (typically 30 days). If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au or by phoning 1300 363 992.

We retain personal information only for as long as it is needed for the purposes set out in this Policy, or to satisfy legal, accounting, audit or therapeutic-goods record-keeping obligations. When personal information is no longer required, we take reasonable steps to delete or de-identify it.

We may update this Policy from time to time to reflect changes to our business, the law or industry practice. The current version will always be available at powertopractice.com.au/legal/privacy and the Effective date at the top of this page will indicate when it was last updated. We encourage you to review this Policy periodically.

If you have any questions about this Policy, would like to access or correct your information, or wish to lodge a privacy-related complaint, please contact our Privacy Officer:

• Email: info@powertopractice.com.au
• Mail: Privacy Officer, Power to Practice, Western Australia