Privacy Policy

Last updated:

1. Data Controller

The data controller responsible for your personal data is:

Clearearthherb
65 Hepburn St, Mount Magnet WA 6638, Australia
Email: response@clearearthherb.world
Phone: +61 8 9963 4110

2. Scope and Purpose

This Privacy Policy describes how we collect, use, store, and protect personal information when you visit clearearthherb.world or contact us. We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) for visitors and clients in Australia, and with the General Data Protection Regulation (GDPR) for visitors from the European Economic Area where applicable.

Because we provide wellness and educational body awareness coaching that may involve personal health information, we are not exempt from the Privacy Act under the small business exemption and must comply with the APPs.

3. Data We Collect

We may collect the following categories of personal data:

  • Identity data: your name
  • Contact data: email address, phone number, postal address
  • Communication data: messages you send through our contact form
  • Technical data: IP address, browser type, device information, pages visited
  • Cookie data: preferences stored via our cookie consent mechanism

4. How We Collect Personal Information

We collect personal information directly from you when you:

  • Submit our contact form or send us an email
  • Call us or communicate with us by phone
  • Engage our coaching services under a separate agreement
  • Interact with our website, including through cookies where you have given consent

We may also collect limited technical information automatically when you visit our website, such as your IP address and browser type, as described in section 3.

5. Legal Basis for Processing

For Australian residents (Privacy Act 1988): We collect, use, and disclose personal information only where reasonably necessary for our functions and activities, including responding to inquiries, delivering coaching services, operating our website, and meeting legal obligations. Where required, we obtain your consent before collecting sensitive information or using your data for direct marketing.

For EEA visitors (GDPR): We process your personal data on the following legal bases:

  • Consent: when you submit the contact form and agree to data processing
  • Legitimate interests: to operate and improve our website, ensure security, and respond to inquiries
  • Legal obligation: when required to comply with applicable laws

6. Purposes of Processing

Your personal data is processed for the following purposes:

  • Responding to your inquiries and contact requests
  • Providing information about our body awareness coaching services
  • Maintaining and improving website functionality and user experience
  • Analysing website usage when you consent to analytics cookies
  • Complying with legal and regulatory requirements

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact form submissions: up to 24 months from the date of last communication
  • Cookie consent records: up to 12 months
  • Server logs and technical data: up to 90 days
  • Analytics data: up to 26 months, subject to your cookie preferences

After the retention period expires, data is securely deleted or anonymised.

8. Data Sharing and Transfers

We do not sell your personal information. We may disclose personal information to:

  • Service providers who assist with website hosting, email delivery, or analytics, under contractual obligations to protect your data
  • Professional advisers where reasonably necessary
  • Law enforcement or regulatory bodies when required or authorised by Australian law

Some service providers may be located outside Australia. Where personal information is disclosed overseas, we take reasonable steps to ensure the recipient complies with the APPs or is bound by a substantially similar privacy regime, unless an APP 8 exception applies.

Where data is transferred outside the EEA under GDPR, we ensure appropriate safeguards such as Standard Contractual Clauses are in place.

9. Data Security and Notifiable Data Breaches

We implement appropriate technical and organisational measures to protect your personal information, including HTTPS encryption, access controls, secure hosting infrastructure, and regular security reviews. While we take reasonable precautions, no method of transmission over the internet is entirely secure.

Under the Notifiable Data Breaches (NDB) scheme in the Privacy Act 1988, if a data breach is likely to result in serious harm to individuals whose personal information is involved, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.

10. Your Rights

Under the Australian Privacy Principles, you may:

  • Request access to the personal information we hold about you (APP 12)
  • Request correction of inaccurate, out-of-date, incomplete, or misleading information (APP 13)
  • Request deletion of your personal information where we are not legally required to retain it
  • Opt out of direct marketing communications at any time
  • Make a complaint about how we handle your personal information

Under GDPR (EEA visitors), you also have the right to:

  • Restrict processing and object to processing based on legitimate interests
  • Data portability: receive your data in a structured, machine-readable format
  • Withdraw consent at any time without affecting prior lawful processing
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at response@clearearthherb.world. We will respond within a reasonable period, and in any event within 30 days, as required by the Privacy Act and GDPR.

11. Complaints

If you have a concern about how we handle your personal information, please contact us first using the details in section 13. We will acknowledge your complaint promptly and aim to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

EEA residents may also contact their local data protection supervisory authority.

12. Children's Privacy

Our website and coaching services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will take steps to delete it.

13. Direct Marketing

We will only send you marketing communications where permitted by law and, for Australian residents, where you have consented or would reasonably expect us to contact you. Every marketing message includes a simple way to unsubscribe. You may opt out at any time by contacting us.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Changes will be posted on this page with an updated revision date. Where changes are material, we will take reasonable steps to notify you.

15. Contact

For questions about this Privacy Policy or our data practices, contact:

Clearearthherb
65 Hepburn St, Mount Magnet WA 6638, Australia
Email: response@clearearthherb.world
Phone: +61 8 9963 4110