1. Who handles your information
This policy concerns The Mind Paradigm and the business operator supplied above. Contact the privacy contact at Info@themindparadigm.com or +61 7 3303 0129 about your information.
2. Information we may collect
Depending on your interaction, information may include your name, contact details, enquiry, application responses, program choices, booking details, communications, participation and membership records, transaction references and marketing preferences. Payment details entered at checkout are handled through the configured payment service. Contact us for details of the payment arrangements for your offer.
Only information reasonably needed for the stated purpose should be requested. You can ask about using a first name or pseudonym where practical, although enrolment, payment, certification or account administration may require identification. Without necessary information we may be unable to complete the relevant service.
Do not include sensitive personal information in a general enquiry or advertising lead form. If sensitive information is reasonably necessary for a service, its purpose, lawful basis, handling and any required consent should be explained before collection.
3. How information is collected
Information may be provided directly through email, phone, applications, registrations, bookings, purchases and membership activity. When you use a form on another platform, the collection should be explained there as well as in this policy.
We use existing GoHighLevel infrastructure for program journeys and member access. Our website may link you to those destinations. A Meta lead form, if used, collects information through Meta before it is supplied to us or our authorised systems for the disclosed enquiry or offer.
4. Purposes and recipients
Information is used to respond to enquiries, assess applications, arrange and deliver requested services, administer accounts and payments, communicate essential program information, keep necessary records, handle complaints and meet legal obligations. Marketing use is addressed separately below.
Information may be handled by authorised staff, contractors and service providers where needed for those purposes, including CRM/membership, hosting, communications, payment and professional advisory services. Disclosure may also occur where required or authorised by law. Access should be limited to what the role or task requires.
A service provider’s involvement is not permission for unrestricted secondary use. Any new purpose or disclosure must be assessed and explained, with consent obtained where required.
5. Marketing preferences
Promotional email and SMS should be sent only with an appropriate consent or other lawful basis. Messages should identify the sender and provide an effective way to unsubscribe. You may also email us to change your marketing preferences.
Choosing not to receive promotions does not cancel a paid program. Necessary booking, payment, security and service messages may still be sent when relevant to the service you requested. A privacy policy link does not itself authorise every form of marketing or retargeting.
6. Cookies, analytics and advertising tracking
The custom code for this website does not install an advertising pixel, analytics tag or marketing cookie. Our hosting provider may process technical information, such as IP addresses and request logs, to deliver and secure the website. GHL pages and third-party destinations may operate differently; refer to their notices and contact us with questions.
If the public site or funnels use Meta Pixel, Conversions API, analytics or similar tools, this policy and the relevant collection notice must describe the actual data, purposes, recipients and choices. Sensitive application responses and private coaching content should not be transmitted to advertising tools.
7. Overseas processing
Cloud and communications providers can involve overseas storage, support or other processing. The places and recipients depend on the configured services and their contractual arrangements. Do not assume Australian-only storage because the business is based in Australia.
8. Storage, security and retention
Our approach is to use reasonable organisational and technical safeguards, restrict account access to authorised people and review access when roles change. No internet service can promise absolute security.
Information should be retained only as needed for the purpose of collection, the service relationship and lawful record-keeping, then securely deleted or de-identified where appropriate. A request for deletion may be limited by lawful retention obligations or technical constraints that must be explained.
9. Sessions, recordings and optional tools
Any session recording, transcript, testimonial or promotional use should have a clear purpose, audience and access period explained before collection or use, with any required consent. Group participation should not be treated as automatic consent to public promotion.
Before using personal client material with an AI or transcription tool, assess the provider, intended use, retention and disclosure arrangements, explain the relevant processing and obtain any required consent.
10. Access, correction and complaints
Contact us to request access to, or correction of, your personal information, ask about deletion, or raise a privacy concern. We may reasonably verify your identity before releasing information. We should explain any lawful reason for refusing a request and the available next steps.
Our complaint process is to acknowledge your concern, investigate the relevant records and providers, and respond within a reasonable time. If unresolved, you may seek independent advice or contact the Office of the Australian Information Commissioner where it has jurisdiction.
11. Updates and business transition
This policy is effective from 6 November 2026. We will update it when information handling changes and communicate material changes in an appropriate way.
If the business transfers to a new company, we will assess the legal and privacy requirements, provide appropriate notices and obtain any consent required before transferring customer information or contracts.