Privacy Policy

In effect 24 June 2026 · v1.0

David Collett, trading as Identity Academy (ABN 30 647 287 711), New South Wales, Australia — contact info@identityacademy.com.au — respects your privacy. This policy explains what personal information we collect, why, how we hold it, and your rights. By using our website, booking a call, or becoming a client, you agree to this policy. You must be 18 or over to use our services.

1. What we collect

Contact details: name, email, phone (if you give it).
Enquiry information: what you tell us via the website chat, a booking, or email — which may include personal circumstances.
Coaching information (clients): the contents of your Identity Blueprint, session notes, and progress — which can include sensitive information about your mental health, history and personal life.
Call recordings/transcripts: only where you have given explicit consent before a call is recorded.
Technical data: basic website/usage data.

2. Why we collect it

To respond to enquiries, arrange and deliver coaching, keep your records, improve our service, and meet legal obligations. For sensitive information we rely on your consent, which you can withdraw at any time (this may affect our ability to coach you).

3. How we hold it & who can access it

Your information is stored in our secured systems and is accessible only on a need-to-know basis. We apply access controls, account multi-factor authentication, and device security to protect it. Coaching and sensitive records are held to a higher standard.

4. Service providers

We use trusted providers to run the business, some based outside Australia (including the USA): Microsoft 365 (email), Google (calendar/booking), Cloudflare and Anthropic (website assistant), Web3Forms (form handling), and tl;dv (call recording/transcription, with your consent). Using them involves a cross-border disclosure of your information; we take reasonable steps to ensure they protect it.

5. How long we keep it

We keep your information only as long as needed for the purposes above and to meet legal obligations, then securely delete or de-identify it.

6. Your rights

You can ask to access, correct, or delete your personal information, or withdraw consent, by contacting info@identityacademy.com.au. UK/EU users have additional rights under the GDPR (including data portability and the right to object). We respond within a reasonable time.

7. Data breaches

If a breach likely to cause serious harm occurs, we will act under the Notifiable Data Breaches scheme and notify those affected and the regulator as required.

8. What we are not

Identity Academy provides coaching, not medical, psychological, or crisis services. If you are in crisis, contact 000 (emergency) or Lifeline 13 11 14.

9. Contact & complaints

Questions or complaints: info@identityacademy.com.au. If unresolved, you may contact the Office of the Australian Information Commissioner (OAIC).