Last updated: 30 October 2026
1. Who we are
Mirror Mirror (Mirror Mirror Directory Pty Ltd, ABN 94 678 551 801) runs mirrormirror.au, an independent Australian platform that helps people find verified practitioners in the surgical and non-surgical cosmetic industry. In this policy, “we”, “us” and “our” mean Mirror Mirror.
We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). This policy explains what we collect, why, who we share it with, and how you can access, correct or complain about it.
2. Who this policy covers
- Visitors and clients: anyone who browses our site, reads our articles, takes our quiz or contacts a practitioner through us.
- Practitioners: anyone who joins, applies to join or holds a profile on Mirror Mirror.
- Subscribers: anyone who signs up to our emails.
3. Information we collect
From visitors and clients
- Your name, email, phone number and message when you contact a practitioner or us through a form
- Your answers if you take our consultation quiz
- Technical information such as your IP address, device, browser and how you use the site
From practitioners
- Contact details: name, email, phone, clinic name and address
- Professional details: Ahpra registration number and registered name, profession, qualifications, training dates, scope of practice and professional memberships
- Verification documents: Ahpra certificate, training certificates, dermal qualifications and insurance certificate
- Profile content you write and upload: bio answers, headshot, clinic photos, website and social links
- Account and billing details: login details, membership plan, payment history and invoices
We don’t collect health information about clients, and we don’t ask for or store your credit card number. Payments are processed securely by our payment provider.
How we collect it
Mostly directly from you, when you fill in a form, create an account, build your profile or email us. We also collect technical information automatically through cookies (see section 8). To verify practitioners, we may check public registers such as the Ahpra register.
4. What’s public on a practitioner profile, and what isn’t
Your profile exists to help clients find and trust you, so some details are public. Your verification documents never are.
| Shown publicly on your profile | Kept private, seen only by our team |
|---|---|
| Name and Ahpra registered name | Ahpra, training and dermal qualification certificates |
| Profession and time in the cosmetic industry | Insurance certificate |
| Clinic name, address, phone and email | Login details |
| Headshot, clinic photos and bio answers | Billing details, invoices and payment history |
| Treatments within your scope of practice | Notes from our verification and compliance checks |
| Website and social links | Your personal contact details, if different from your clinic’s |
| Verified badge and the year you were verified |
5. How we use your information
- To connect clients with practitioners: when you send an enquiry through a practitioner’s profile, we pass your name, contact details and message to that practitioner so they can reply.
- To verify practitioners: we check your documents and registration before your profile goes live, and keep them current, for example with insurance renewal reminders.
- To run memberships: to create your account, process payments, send invoices and manage your plan.
- To communicate with you: to reply to enquiries, send account and service emails, and, if you’ve agreed, send newsletters and updates.
- To improve the site: to understand how people use it and fix problems.
- To meet our legal obligations: for example, keeping tax records.
We only use your information for these purposes, or for a related purpose you’d reasonably expect.
6. What we never do
- We never sell your personal information.
- We never pass your details to pharmaceutical companies, product suppliers, sponsors or advertisers. Some companies may sponsor content on our site, but they never receive personal information about our visitors or practitioners.
- We never show practitioners’ verification documents publicly.
- We never share client enquiries with anyone other than the practitioner you contacted.
7. Who we share it with
We use a small number of trusted service providers to help us run our website, take payments, send emails and understand how our site is used. They can only use your information to provide their service to us, and they never receive it for their own marketing.
We may also disclose information if the law requires it, or to protect someone’s safety.
Overseas storage
Some of our service providers store or process information outside Australia, mainly in the United States and Europe. We choose providers with strong security and privacy commitments, but by using our site you acknowledge your information may be handled overseas.
8. Cookies, analytics and advertising
We use cookies and similar tools to keep you logged in, understand how visitors use our site, protect forms from spam and measure how our advertising performs. You can block or delete cookies in your browser settings, though some parts of the site may not work properly. See our Cookie Policy for more.
9. Emails
We send account and service emails, such as invoices, verification updates and insurance reminders, because they’re part of your membership. Newsletters and updates are optional: you can unsubscribe at any time using the link at the bottom of every email.
10. Automated tools and decisions
We use automated tools to help run Mirror Mirror, for example to send insurance renewal reminders on a schedule, calculate your time in the cosmetic industry from your first training date, and, when it launches, check practitioner websites for advertising compliance.
We don’t make decisions about you solely by computer. Whether a practitioner is verified, approved, or has a profile changed or removed is always decided by a person on our team. The automated tools use your contact details, profile details, training dates, insurance expiry date and public website content.
11. Keeping your information safe
We take reasonable steps to protect your information from misuse, loss and unauthorised access. These include secure (HTTPS) connections, restricted admin access, login protection, and keeping verification documents out of public view. No system is completely secure, but if a data breach is likely to cause you serious harm, we’ll tell you and the Office of the Australian Information Commissioner (OAIC) as the law requires.
12. How long we keep it
We keep your information while you have an account or profile with us, and for up to 7 years afterwards for tax and legal reasons. After that, we securely delete or de-identify it. If you leave Mirror Mirror, your public profile is taken down.
13. Accessing and correcting your information
You can ask to see the personal information we hold about you, or ask us to correct it, by emailing hello@mirrormirror.au. We’ll respond within 30 days. Practitioners can also update most profile details themselves by logging in.
You can also ask us to delete your information. We’ll do so unless we need to keep it for legal reasons.
14. Making a complaint
If you’re concerned about how we’ve handled your information, email hello@mirrormirror.au with the details. We’ll acknowledge your complaint within 7 days and aim to resolve it within 30 days.
If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
15. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.
16. Contact us
Mirror Mirror Directory Pty Ltd. Email: hello@mirrormirror.au