Privacy Policy

Types of Personal Information We Collect & Hold

The types of personal information that we may collect includes:

• Personal details such as name, age, gender, date of birth
• Contact details such as billing and delivery address, home address, email address, telephone number and other contact details
• Health and lifestyle information including previous and current health and medical history, and risk factors plus associated images where relevant
• Profile data including username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses
• Transaction data which may include details about payments to and from you and other details of products and services you have purchased from us
• Records of our interactions with you including any customer service and customer survey results
• If you are a supplier or prospective supplier, information about your business skills, services, products, and prices
• Your computer and connection information, statistics on page views, traffic to and from and other standard web log information
• Marketing and communication preferences
• Any other personal information that may be required to facilitate your dealings with us
• Any other personal information you may volunteer
• Information required for automated decision making processes, including where we use artificial intelligence (AI) or other software

Wherever lawful and practical, you have the option of not identifying yourself (or using a pseudonym) when dealing with us.

Sensitive information: As noted above, due to the nature of our business, we may collect sensitive personal information from you such as your health information. This sensitive information will be used by us only: for the primary purpose for which it was obtained; for a secondary purpose that is directly related to the primary purpose; with your consent; or where required or authorised by law.

How We Collect Personal Information

We collect your personal information in several different ways, including by way of:

• When you voluntarily acquire our Services
• Personal contact with us at a face-to-face meeting or situation
• Correspondence, chats, social applications or services, mail, email, or telephone
• When you visit our Website

Where possible, we will collect your personal information directly from you. However, where it is not reasonable or practicable to do so, we may collect information about you from third parties, such as:

• Your guardian or responsible person (if under 18)
• Third-party booking app or payment provider
• Public sources
• Our service providers

In such a case we will take reasonable steps to ensure that you are made aware of the information provided to us by the third party.

If you do not provide us with personal information when requested to do so, we may not be able to provide our Services to you, carry out your instructions, or otherwise achieve the purpose for which the information has been sought.

We may hold your personal information in hard copy files and/or electronic files. We will destroy or de-identify information where we form the opinion that the information has been provided to us unlawfully or unfairly.

Why We Collect, Hold, Use & Disclose Your Personal Information

We will use and disclose your personal information only for the purpose (the "primary purpose") for which you provide it to us, which may include:

• To provide you with any goods or services that you may request, including enabling you to access and use the Services
• To contact and communicate with you and otherwise provide customer support
• To maintain a database of customers, subscribers or similar
• For internal administration and operational purposes such as preventing fraud and abuse of our systems
• To assist in providing better products and services to you by tailoring the Services to meet your needs
• To consider your employment or contractual engagement application
• To provide you with further information about us or other products or services we consider may be of interest to you
• To carry out marketing, promotional and publicity activities (including direct marketing), market research and surveys
• To keep our Website relevant and of interest to users
• To show you advertising and information that is most relevant to you and your interests
• To allow us to run our business and perform administrative and operational tasks
• To comply with legal and regulatory requirements
• For any other purpose which is stated to you at the time of collection or that you otherwise authorise

When we collect personal information, we will, where appropriate and where possible, explain to you why we are collecting the information and how we plan to use it.

Automated Decision Making & AI Transparency

If we use automated systems such as Artificial Intelligence (AI) or algorithms either now or at any time in the future, we will:

• Inform you when a decision affecting you has been made automatically
• Provide transparency on the criteria that is used in the automated processes used
• Allow you to request human review of an automated decision where legally required or where decisions significantly impact your rights

Cookies, Web Beacons & Google Analytics

While we do not use browsing information to identify you personally, we may use cookies and tracking technologies to collect certain information about your use of our website and enhance user experience.

A cookie is a small file containing a string of characters that is sent to your computer or mobile device when you visit a website. When you visit the website again, the cookie allows that site to recognise your browser. Cookies may store unique identifiers, user preferences and other information. You can reset your browser to refuse or disable all cookies or to indicate when a cookie is being sent. However, some website features or services may not function properly without cookies.

While cookies don't tell us your email address, they do allow third parties, like Google and Facebook, to track you as part of re-targeting campaigns (where they are used). If and when you choose to provide our website with personal information, this information may be linked to the data stored in cookies.

Web beacons monitor the behaviour on our website and collect data about your web page viewing. We also use Google Analytics to collect and process data from time to time.

Who Do We Share Your Personal Information With?

We may disclose your personal information to:

• Third party contractors engaged to perform functions or provide services relating to the purposes for which we collect personal information
• Third party service providers or affiliates within or outside of Australia who work on behalf of or with us to provide some of our administrative and other services, such as processing payments
• Our employees, contractors and/or related entities on a 'need to know' basis
• Professional advisers, dealers, and agents
• Any party to whom our assets or business may be transferred or with whom we are merged
• When it is necessary to lessen or prevent a serious threat to a patient's life, health or safety or public health or safety
• When you are unable to act on your own behalf due to a health condition, we may need to discuss your health information with relatives or emergency contacts
• When there is a statutory requirement to share certain personal information (e.g., some diseases require mandatory notification)

We are committed to ensuring that any personal information we share is complete, accurate, up-to-date and relevant.

We may also disclose your personal information if we determine in good faith that disclosure is reasonably necessary to protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

At your request, we will share your personal information with your representative or any person acting on your behalf (for example, financial advisers, lawyers, attorneys, accountants, executors, administrators, trustees or auditors).

Doxxing

It is a criminal offence to publish personal information online with the intent to harass, threaten or cause harm. We comply with all laws relating to privacy and doxxing and take measures to prevent unauthorised disclosure of personal information online.

Communication & Marketing

We may from time to time use your personal information in order to communicate and market our products and services to you via newsletters, email invitations and updates about our products and/or services, upcoming workshops and events. These communications may be sent in various forms, including without limitation mail, SMS, fax and email, in accordance with applicable marketing laws, such as the Spam Act 2003 (Cth).

If you indicate a preference for a method of communication, we will endeavour to use that method whenever practical to do so. You may opt out of direct marketing at any time by notifying us in writing or by using the opt-out facilities provided in the communication.

We do not provide your personal information to other organisations for the purposes of direct marketing.

How We Store & Protect Your Personal Information

We are committed to ensuring the safety and security of your personal information. We will take reasonable technical and organisational precautions to protect your information from misuse, interference, loss, unauthorised access, modification, or disclosure. For example:

• We limit access to personal information to a "need-to-know" basis
• We keep all hard copies of personal information in secure premises, accessible by authorised personnel only
• Our devices are protected by password and are stored in secure premises
• The devices we use contain anti-virus software
• All conversations involving the discussion of personal information take place in private, where they are unable to be overheard by unauthorised personnel

Despite our best efforts to securely store your information, due to the nature of email and the internet, we cannot guarantee the privacy or confidentiality of your personal information.

If you communicate with us via electronic means such as email, Zoom, Instagram, Pinterest, Messenger, Skype, contact forms or social media platforms, we do not have full control over the transmission or storage of any personal information disclosed. By participating in such forms of communication you understand and accept that there is an inherent risk of disclosure or loss of your personal information for which we cannot be held responsible.

We will destroy or de-identify your personal information when it is no longer needed, except where we have a legal obligation to retain such information. We will never permanently store complete credit card details.

Links to Other Sites

We may provide links on our Website to third party websites, for your information and convenience. Please note we do not have any control over such websites and are therefore not responsible for the protection and privacy of any personal information which you provide whilst visiting those websites. Those websites are not governed by this policy. We encourage you to read their privacy policy before giving them your personal information.

How You Can Access & Correct Your Personal Information

We will take reasonable steps to ensure that any personal information we collect is up-to-date, complete, relevant and not misleading. You may contact us using the details set out below to seek any of the following:

We will respond to any request to access information within a reasonable time. We will not charge any fee for your access request but may charge an administrative fee for providing a copy of your personal information.

Complaints About a Privacy Breach

We take complaints and concerns regarding privacy seriously. You should express any privacy concerns you may have in writing. We will then attempt to resolve it within 30 days.

If you are not satisfied with our response, you may also contact the Office of the Australian Information Commissioner (OAIC). Generally, the OAIC will require you to give them time to respond before they will investigate. For further information visit www.oaic.gov.au or call the OAIC on 1300 363 992.

Overseas Transfer

We may disclose personal information to third parties and contracted service providers (such as virtual assistants) located outside Australia for processing, storage, administrative or back-up purposes. Overseas recipients are generally located in Nigeria.

If we transfer personal information overseas, we take reasonable steps to ensure that overseas recipients handle personal information in accordance with the Australian Privacy Principles (APPs) and applicable privacy laws. However, you acknowledge that:

• We may not be able to monitor or control how those overseas recipients handle your personal information
• We are not required to take further steps to ensure compliance beyond those prescribed by law
• We will not be liable for any breach of the APPs or the Privacy Act 1988 (Cth) by those overseas recipients

GDPR — Rights for EU & UK Residents

If you are a resident of the European Union (EU) or the United Kingdom (UK), the General Data Protection Regulation (GDPR) governs how we collect, store and process your personal data. As the "controller" of your personal data, we are committed to compliance with GDPR data protection principles.

If you are an EU or UK resident, you have the following rights concerning your personal data:

• Right to be informed – you have the right to be informed about how and why your personal data is collected, the purposes for its processing, how long it will be retained, and who it will be shared with
• Right of access – you can request access to a copy of the personal data we hold about you
• Right to rectification – if your personal data is inaccurate or incomplete, you have the right to request corrections or updates
• Right to erasure ("Right to be forgotten") – you may request the deletion of your personal data if it is no longer necessary for the purpose it was collected, or if you withdraw consent
• Right to withdraw consent – if we process your personal data based on your consent, you may withdraw your consent at any time
• Right to restrict processing – in certain circumstances, you may request that we restrict how we process your personal data
• Right to data portability – you can request to receive your personal data in a structured, commonly used and machine-readable format
• Right to object – you can object to the processing of all or some of your personal data in certain circumstances, including direct marketing
• Rights related to automated decision making – you have the right to be informed about and challenge any automated decisions made using your personal data, and to request human intervention

If you wish to exercise any of these rights, please contact our Privacy Officer using the contact details at the end of this policy.

Changes to the Privacy Policy

Any changes to this Privacy Policy will be posted onto the Website. Unless stated otherwise, changes will be effective immediately upon being placed onto the Website. Your continued use of the Website means you agree to be bound by the amended Privacy Policy.

Contact Details

For any questions or notices, please contact us using the details below: