Privacy Policy

Last updated: 3 September 2026

1. About this Privacy Policy

Toowoomba Positive Psychology Pty Ltd (“Toowoomba Positive Psychology”, “we”, “us” or “our”) is committed to respecting and protecting your privacy.

This Privacy Policy explains how we collect, hold, use, disclose and protect personal information through:

  • the Toowoomba Positive Psychology website;

  • the AaBC123 Framework™ website pages and resources;

  • mailing lists and electronic communications;

  • enquiries and contact forms;

  • webinars, courses, programs, events and professional development;

  • coaching, consultation and mentoring services;

  • assessments, surveys and feedback processes;

  • online bookings, registrations and payments; and

  • related services and communications.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply. We also seek to use these principles as our general standard for responsible information handling.

This Privacy Policy is a statement about how we manage personal information. It is not a contract and does not limit any rights you may have under applicable law.

2. What is personal information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Sensitive information is a category of personal information that includes information about matters such as a person’s health, racial or ethnic origin, religious beliefs, sexual orientation, professional memberships and certain other personal characteristics.

Health information includes information or opinions about a person’s physical or psychological health, disability, health services or health-related wishes.

3. Information we may collect

The kinds of personal information we collect depend on how you interact with us.

Contact and identity information

We may collect:

  • your name;

  • email address;

  • telephone number;

  • location, state or country;

  • postal or billing address;

  • occupation, professional role or organisation;

  • employer, school or institution;

  • professional interests; and

  • other information you include in an enquiry or communication.

Mailing-list and resource-access information

When you join a mailing list or request access to AaBC123 Framework™ resources, we may collect:

  • your name and email address;

  • your organisation or professional role;

  • your areas of interest;

  • your communication preferences;

  • the date, time and method of your consent;

  • your agreement to applicable resource terms; and

  • information about how you engage with our emails and resources.

Program, webinar and event information

When you enquire about, register for or participate in a course, program, webinar or event, we may collect:

  • registration and attendance details;

  • professional and educational background;

  • program selections and preferences;

  • correspondence about your participation;

  • survey, evaluation and feedback responses;

  • participation records and course progress;

  • certificates or completion information; and

  • recordings, images or contributions where you have been appropriately informed.

Some programs are provided in association with external program owners or providers. Information you submit directly to those organisations is also governed by their privacy policies.

Booking and transaction information

When you book or purchase a service, we may collect:

  • the service or program selected;

  • appointment dates and times;

  • billing and transaction details;

  • invoice and payment status;

  • relevant administrative correspondence; and

  • limited payment information supplied by a payment processor.

Full payment-card details are ordinarily collected and processed by the relevant payment provider rather than being stored directly by us.

Coaching, consultation and wellbeing information

When reasonably necessary to provide coaching, consultation, mentoring, assessment or wellbeing-related services, we may collect information about:

  • your goals, needs and reasons for seeking the service;

  • your personal, professional or organisational circumstances;

  • wellbeing, stress, strengths, challenges and life experiences;

  • assessment or questionnaire responses and results;

  • session notes, action plans and progress;

  • accessibility or support requirements; and

  • physical or psychological health information you choose to provide.

We will only collect sensitive or health information when it is reasonably necessary for our activities and you have consented, or where collection is otherwise permitted or required by law.

You are not required to provide information that is irrelevant to the service you are seeking.

Website and technical information

When you visit our website, our website platform and analytics services may automatically collect information such as:

  • your IP address;

  • browser, device and operating-system information;

  • approximate location;

  • referring website;

  • pages viewed and links selected;

  • date, time and duration of visits;

  • website interactions and navigation patterns; and

  • cookie and similar technology identifiers.

This information helps the website operate, maintain security and provide aggregated information about website use.

4. How we collect information

We primarily collect information directly from you when you:

  • submit a website form;

  • join a mailing list;

  • request or download a resource;

  • contact or correspond with us;

  • register for a program, webinar or event;

  • make a booking or payment;

  • participate in coaching, consultation, mentoring or training;

  • complete an assessment, questionnaire, survey or evaluation; or

  • interact with our website, emails or online services.

We may also receive information:

  • from an organisation arranging services on your behalf;

  • from a program, event, booking or payment provider;

  • from a referring person or organisation, with appropriate authority;

  • from publicly available professional sources where appropriate;

  • through website cookies, analytics and similar technologies; or

  • where authorised or required by law.

If someone provides us with personal information about another person, they must have an appropriate basis for doing so and should make that person aware of this Privacy Policy where practicable.

5. Why we collect and use information

We may collect and use personal information to:

  • respond to enquiries and communicate with you;

  • provide requested resources, services and information;

  • manage bookings, registrations, payments and accounts;

  • deliver coaching, consultation, mentoring, education and training;

  • administer courses, webinars, events and professional-development programs;

  • personalise services and provide appropriate support;

  • administer assessments, surveys, evaluations and feedback;

  • maintain records of participation and completion;

  • operate, secure and improve our website and services;

  • understand website and communication engagement;

  • send research, resources, news and promotional communications where we have permission;

  • process permissions and manage our intellectual property;

  • conduct internal administration, quality assurance and service evaluation;

  • meet financial, insurance, professional and legal obligations;

  • prevent or investigate fraud, misuse or security incidents; and

  • exercise or defend legal rights.

We may use aggregated or de-identified information to evaluate and improve our resources, programs and services. We will not use identifiable coaching, health or assessment information for research or publication without an appropriate legal and ethical basis, including separate consent where required.

6. What happens if information is not provided?

You may interact with some parts of our website without identifying yourself.

However, if you do not provide requested information, we may be unable to:

  • respond to your enquiry;

  • provide access to a requested resource;

  • add you to a mailing list;

  • process a registration, booking or payment;

  • provide or appropriately tailor a service;

  • meet accessibility or support requirements; or

  • issue participation or completion records.

We will seek to collect only the information reasonably required for the relevant purpose.

7. Direct marketing and mailing lists

We may send you AaBC123 Framework™ updates, research, resources, event information, program information or other communications when:

  • you have expressly consented;

  • you would reasonably expect the communication and it is legally permitted; or

  • another lawful basis applies.

We do not use sensitive or health information for direct marketing without appropriate consent.

You can unsubscribe at any time by using the unsubscribe link in an email or contacting us. Unsubscribing from promotional communications will not prevent us from sending necessary service messages relating to an active booking, purchase, program or professional engagement.

We will process unsubscribe requests in accordance with applicable Australian spam laws.

8. When we disclose information

We may disclose personal information when reasonably necessary to:

  • website hosting, form-management and email-service providers;

  • booking and scheduling platforms;

  • payment processors and financial institutions;

  • webinar, video-conferencing and online-learning platforms;

  • analytics, advertising and website-security providers;

  • course owners, accreditation bodies or program delivery partners where relevant and disclosed;

  • contractors or facilitators assisting us to provide an agreed service;

  • information-technology, accounting, insurance and professional advisers;

  • government, regulatory, law-enforcement or judicial bodies where required or authorised by law;

  • a person or organisation involved in a business restructure, subject to appropriate safeguards; or

  • another party with your consent or at your direction.

Service providers are permitted to access personal information only to the extent reasonably required to provide their services or fulfil applicable legal responsibilities.

We do not sell or rent personal information to third parties.

9. Third-party services and external links

Our website and services may use or link to external platforms, including:

  • Squarespace for website hosting, forms, analytics and email campaigns;

  • scheduling or booking services such as Acuity Scheduling;

  • payment-processing services;

  • Google analytics technologies;

  • Meta technologies, where enabled;

  • Zoom or similar video-conferencing services;

  • online-learning and program-registration platforms; and

  • social-media services.

When you use an external website or submit information directly to a third-party provider, that provider may collect and handle information under its own privacy policy and terms.

We encourage you to review the privacy information provided by relevant third parties. We are not responsible for the independent privacy practices of external websites or services that we do not control.

10. Overseas storage and processing

Some technology and service providers we use operate internationally. Personal information may therefore be stored, processed or accessed outside Australia, including in the United States and other countries in which those providers or their service providers operate.

The countries involved may change as providers update their infrastructure and subcontractors.

Where the Australian Privacy Principles apply, we take reasonable steps appropriate to the circumstances when using overseas service providers and handling cross-border disclosures. However, privacy protections and legal requirements in other countries may differ from those in Australia.

11. Cookies and analytics

Our website uses cookies and similar technologies to:

  • make the website function correctly;

  • remember visitor preferences;

  • maintain website security;

  • understand how visitors use the website;

  • measure website and campaign performance; and

  • support analytics or advertising functions where enabled.

Squarespace places cookies and collects certain website-usage information as part of operating the site. We may also use Squarespace Analytics, Google Analytics, Meta technologies or similar services.

Where available, you can use our cookie banner to accept, decline or manage non-essential cookies. You can also control cookies through your browser settings. Blocking some cookies may affect how the website functions.

Analytics information may be aggregated, but technical identifiers such as IP addresses and cookie identifiers may still constitute personal information in some circumstances.

12. Online sessions and recordings

We may use video-conferencing or online-learning platforms to deliver coaching, consultation, programs, webinars or events.

These platforms may process participant names, contact details, device information, chat contributions, audio, video and attendance information.

We will not intentionally record a private coaching or consultation session without informing the participant and obtaining appropriate agreement. If a webinar, course or group session will be recorded, participants will be informed and given relevant information about participation and recording arrangements.

Participants should avoid sharing sensitive information in group chats, recordings or other spaces visible to other attendees unless they are comfortable doing so.

13. Children and young people

Our website forms, resource signups, bookings and services are intended to be completed by adults. We do not knowingly invite children under 18 to submit personal information directly through the website.

We may receive information about a child or young person from a parent, guardian, school or other organisation where it is relevant to an agreed service. In those circumstances, we will seek to collect only the information reasonably necessary and expect the providing adult or organisation to have appropriate authority.

If you believe a person under 18 has submitted personal information directly to us without appropriate involvement or permission, please contact us.

14. Information security

We take reasonable administrative, technical and organisational steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

These steps may include:

  • using reputable technology and service providers;

  • restricting access to information;

  • using passwords and access controls;

  • maintaining secure devices and accounts;

  • using encryption where supported by our service providers;

  • reviewing our information-handling practices; and

  • deleting or de-identifying information when it is no longer reasonably required, subject to legal and professional recordkeeping obligations.

No website, email system or online storage method can be guaranteed to be completely secure. If you send sensitive information electronically, you should consider the associated risks and contact us if you would prefer to discuss another method.

15. Data retention

We retain personal information only for as long as it is reasonably required for:

  • the purpose for which it was collected;

  • providing and administering services;

  • maintaining appropriate professional and business records;

  • taxation, accounting, insurance and legal obligations;

  • resolving disputes; and

  • protecting or enforcing legal rights.

Retention periods vary according to the nature of the information and applicable requirements.

When information is no longer reasonably required, we take reasonable steps to securely delete or de-identify it, unless retaining it is required or authorised by law.

16. Accessing or correcting your information

You may contact us to:

  • request access to personal information we hold about you;

  • ask us to correct information that is inaccurate, incomplete, out of date, irrelevant or misleading;

  • update your communication preferences; or

  • ask a question about how your information is handled.

We may need to verify your identity before providing access or making a correction.

In limited circumstances, applicable law may allow or require us to refuse access or correction. If that occurs, we will ordinarily explain the reason and available complaint options, unless we are legally prevented from doing so.

17. Privacy complaints

If you have a privacy concern or believe we have mishandled your personal information, please contact:

Privacy Contact: Katie Ashburner
Toowoomba Positive Psychology Pty Ltd
Email: katie@toowoombapositivepsychology.com

Please describe your concern and provide enough information for us to investigate it.

We will acknowledge and investigate privacy complaints within a reasonable period and aim to provide a substantive response within 30 days. If additional time is required, we will explain why.

If the Privacy Act applies and you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner through www.oaic.gov.au.

18. Data breaches

If we become aware of unauthorised access, disclosure or loss of personal information, we will assess the incident and take appropriate steps to contain and respond to it.

Where the Notifiable Data Breaches scheme or another applicable law requires notification, we will notify affected individuals and the relevant regulator.

19. Changes to this Privacy Policy

We may update this Privacy Policy when our services, technology, information-handling practices or legal obligations change.

The current version will be published on our website with its last-updated date. We encourage you to review it periodically.

20. Contact us

Questions, access or correction requests, complaints and other privacy enquiries can be directed to:

Katie Ashburner
Toowoomba Positive Psychology Pty Ltd
Email: katie@toowoombapositivepsychology.com
Website: www.toowoombapositivepsychology.com