Privacy policy

The Skin Shop

Effective date: 15 June 2026

This Privacy Policy explains how Collins Kelly Plastic Surgery Ltd (NZBN 9429050957460), trading as The Surgery Dunedin and The Skin Shop ("we", "us", "our"), collects, uses, stores and discloses your personal information and health information when you visit thesurgerydunedin.com (the "Site"), use our online store, or otherwise interact with us online.

We are committed to protecting your privacy and handling your information in accordance with the Privacy Act 2020, the Health Information Privacy Code 2020 (HIPC), and other applicable New Zealand laws.

Who We Are

The Surgery Dunedin is a medical practice operated by Dr Anne Collins. As a registered health practitioner, we are a health agency under the Privacy Act 2020 and are bound by the additional protections of the Health Information Privacy Code 2020 when handling health information.

The Skin Shop is operated by Collins Kelly Plastic Surgery Ltd and provides skincare, scar care and related products through our online store.

Information We Collect

We collect two categories of information through the Site.

Personal information, which may include:

• Your first and last name
• Email address
• Phone number
• Postal and billing address
• Payment information (processed by our payment provider and not stored directly by us)
• Any other information you choose to provide to us

Health information, which may include:

• The procedure or treatment you indicate you are considering or seeking advice about
• Any health-related details you choose to share in your enquiry

We only collect health information that is necessary for us to respond to your enquiry and provide our services. You are not required to provide health information through the Site and may prefer to discuss health matters during a consultation.

We also collect limited technical information automatically when you visit the Site, including your IP address, browser type and version, pages visited, and the date and time of your visit.

How We Use Your Information

We use the information we collect to:

• Respond to enquiries and arrange consultations or appointments
• Process and fulfil online store orders
• Provide the medical services you have requested
• Communicate with you about your enquiry, order or care
• Maintain accurate clinical and business records
• Improve our Site and services
• Comply with our legal and professional obligations

Where you have expressly opted in, we may send you marketing communications, skincare information, product updates, special offers and news about The Surgery and The Skin Shop.

You may unsubscribe from marketing communications at any time by using the unsubscribe link in our emails or by contacting us directly.

How We Share Your Information

We do not sell your information. We only share your information in the following circumstances:

• Shopify processes orders from our online store, including payment, shipping and order management. Order data is held on Shopify's infrastructure, which may be located outside New Zealand.
• Google Analytics processes anonymised website usage data on our behalf.
• Our clinical and administrative team may access your information internally where required to respond to you, process orders or provide care.
• Other healthcare providers may receive your health information where necessary for your care and where permitted under the Health Information Privacy Code 2020.
• Regulatory authorities, government agencies or courts where disclosure is required by law.

Overseas Storage and Disclosure

Some third-party providers, including Shopify and Google, store and process information on servers located outside New Zealand.

Where personal information is disclosed overseas, we take reasonable steps to ensure that recipients provide safeguards comparable to those required under New Zealand privacy law or otherwise comply with the Privacy Act 2020.

By using this Site and providing information to us, you acknowledge that your information may be processed and stored outside New Zealand by our service providers.

How Long We Keep Your Information

We retain health information for a minimum of 10 years from the date we last provided services to you, in accordance with the Health (Retention of Health Information) Regulations 1996.

Other personal information, including online store orders and general enquiries, is retained only for as long as required for the purpose it was collected or as required by law.

Security

We take reasonable steps to protect your information from loss, misuse, unauthorised access, modification or disclosure. These measures include access controls, secure storage and the use of reputable third-party providers.

While we use commercially reasonable safeguards, no method of electronic transmission or storage is completely secure and we cannot guarantee absolute security.

Your Rights

Under the Privacy Act 2020 and the Health Information Privacy Code 2020, you have the right to:

• Access the personal and health information we hold about you
• Request correction of information that is inaccurate, incomplete or out of date
• Withdraw consent where consent forms the basis on which we hold your information
• Make a complaint regarding our handling of your information

To exercise any of these rights, please contact us at shop@thesurgerydunedin.com.

We will respond to requests within 20 working days as required by the Privacy Act 2020.

Cookies and Analytics

Cookies are small text files placed on your device by websites you visit.

We use Google Analytics to understand how visitors use our Site and to help improve its functionality and performance.

We also use cookies and similar technologies provided by Shopify to support the operation of our online store, including shopping cart functionality, checkout services and store analytics.

You can set your browser to refuse cookies or to notify you when cookies are being used. If you disable cookies, some parts of the Site may not function correctly.

Children

This Site and our online store are not directed at children under 16 years of age. If you are under 16, please ask a parent or guardian to make any enquiry or purchase on your behalf.

Complaints

If you are unhappy with how we have handled your personal or health information, please contact us first at shop@thesurgerydunedin.com so we can try to resolve the matter.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner:

Website: privacy.org.nz
Phone: 0800 803 909
Email: enquiries@privacy.org.nz

For complaints specifically relating to health information, you may also contact the Health and Disability Commissioner:

Website: hdc.org.nz
Phone: 0800 11 22 33

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page and the effective date updated accordingly.

Your continued use of the Site following any updates constitutes acceptance of the revised Privacy Policy.

Contact Us

The Skin Shop / The Surgery Dunedin

Email: shop@thesurgerydunedin.com

Phone: 03 926 6223

Address: Suite 1B, 95 Hanover Street, Dunedin 9016, New Zealand