Legal
Privacy policy
What this site collects, why, where it lives, and the rights you have over it. Written to be read, like everything else here.
Last updated 11 August 2026. This site is operated by Medical Hair Restoration Australia (MHRA), part of the same group as Foli Sim. This policy explains how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
What we collect, and when
If you request an assessment, we collect what you put in the form: your name, your contact details (email and/or phone), roughly where you are, what you have told us about your hair loss, and any photographs you choose to send. Photographs of your scalp are health information, which is sensitive information under the Privacy Act — we collect it only because you provide it, and only to respond to your enquiry.
If you arrived from an advertisement, we record the campaign parameters on the link that brought you here (such as a Google click identifier and UTM tags). These are kept in your browser's local storage for up to 90 days and attached to your enquiry if you make one, so we know which advertising actually led to it. This measures campaigns, not you: we do not build profiles, and we do not share this with advertisers about you individually.
If you hit a page that does not exist, we log the path requested, the referring page and the browser's user-agent string so broken links can be fixed.
What we deliberately do not do: no advertising pixels, no third-party analytics cookies, no social media trackers, and no sale of personal information to anyone, ever.
Why we collect it
- To respond to your enquiry and provide the assessment you asked for.
- To route your enquiry to Foli Sim, which delivers treatment for our group.
- To measure which of our advertising produces genuine enquiries.
- To keep the site working — fixing broken links, filtering automated abuse.
Where it is stored, and who sees it
Enquiries are stored in our database hosted by Supabase in Sydney, Australia. A copy of your enquiry is created in HubSpot, our customer relationship system, and an email notification is sent to the team; HubSpot may store data on servers outside Australia, and by submitting the form you consent to that transfer. Our infrastructure providers (Cloudflare for hosting and delivery, Google for email) process data on our behalf under their own safeguards.
Within the group, your enquiry is shared with Foli Sim — the clinic that would actually treat you. We do not disclose your information to anyone else unless the law requires it.
How long we keep it
Enquiries are kept while they are active and for as long as needed to maintain a record of our correspondence. Attribution parameters expire from your browser after 90 days. You can ask us to delete your enquiry at any time, and unless we are required to keep it, we will.
Your rights
You may ask for access to the personal information we hold about you, ask us to correct it, or ask us to delete it — email info@folisim.com.au and we will respond within a reasonable time. If you believe we have mishandled your information, tell us first so we can put it right; if you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If this policy changes, the date at the top changes with it. Material changes to how enquiry data is handled will be noted here plainly rather than buried.
Questions about any of this: contact us or email info@folisim.com.au.