PRIVACY POLICY

1. INTRODUCTION

(a) This Privacy Policy explains how The Advice Business Pty Ltd ACN 700 107 393 ABN 79 700 107 393 (The Advice Business, we, us or our) collects, uses, stores, discloses and handles personal information.

(b) We are committed to handling personal information responsibly and in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where the privacy laws of another country apply to our handling of your personal information, we will comply with those laws.

(c) This Privacy Policy forms part of our Terms and Conditions.

(d) This Privacy Policy applies to all of our Services, including our website, programs, events, tools and communications.

(e) Information about our use of artificial intelligence and automated processing is set out in section 5.

(f) We may update this Privacy Policy from time to time to reflect changes in our operations, technology, legal obligations or business practices. The latest version will be available on our website. Where a change materially affects how we handle your personal information, we will notify you by email.

2. THE INFORMATION WE COLLECT

(a) The types of personal information we may collect include:

(i) name, email address, phone number and contact details;

(ii) business and professional information, including entity name, ABN or equivalent business number, role and industry;

(iii) billing, transaction and payment-related information;

(iv) information provided in an application or expression of interest, including information about your business, your goals and how you found us;

(v) information about business operations, goals, performance, strategy or challenges;

(vi) commercially sensitive or confidential information shared during coaching, advisory or support interactions;

(vii) records of our communications and interactions with you, including emails, messages, support requests and internal notes;

(viii) audio recordings, video recordings, transcripts and summaries of sessions, coaching calls, workshops, events or support interactions;

(ix) files, documents, forms, worksheets or other materials you upload or share with us;

(x) behavioural assessment or profiling information, including DISC assessments and related reports;

(xi) testimonials, feedback, survey responses and questionnaires;

(xii) photographs, videos or other media captured at events;

(xiii) information relating to your participation in our programs, tools and events;

(xiv) device, browser and usage information, including IP address, cookies, analytics data and website interaction information; and

(xv) any other information you voluntarily provide in connection with our Services.

(b) Where you attend an event, we may collect dietary requirements, allergies and information about medical conditions relevant to your participation. This is

sensitive information. We collect it only with your consent, use it only for the purpose of running the event safely, and retain it only while you continue to attend our events.

(c) We may also hold personal information about other people that you provide to us. Section 7 explains how we handle it.

(d) We do not store full credit card details. Payment transactions are processed by third-party payment providers.

(e) You may deal with us anonymously or using a pseudonym where it is lawful and practicable. It is not practicable for us to provide most of our Services

anonymously, because we need to identify you in order to deliver them, but you may browse our website without identifying yourself.

3. HOW WE COLLECT INFORMATION

(a) We collect most personal information directly from you, including when you:

(i) visit our website or use our online platforms and tools;

(ii) submit an application or expression of interest;

(iii) participate in an assessment or discovery call;

(iv) enrol in a program or purchase a ticket to an event;

(v) communicate with us by email, phone, messaging platforms, social media or online forms;

(vi) participate in coaching, advisory, support or training sessions;

(vii) attend an event;

(viii) upload documents, files or materials;

(ix) complete assessments, surveys, questionnaires or forms;

(x) interact with our marketing, advertising or content; or

(xi) otherwise engage with our Services.

(b) We may also collect personal information about you from other sources, including:

(i) other people in your business, where they provide information in connection with our Services;

(ii) publicly available sources, such as your business website or professional profiles;

(iii) referrals from people who recommend you to us; and

(iv) our service providers, including payment providers and analytics platforms.

(c) Where we collect personal information about you from a source other than you, we will take reasonable steps to notify you of the collection unless it is

unreasonable or impracticable to do so, or you would reasonably expect us to collect it in that way.

(d) We may collect information automatically through cookies, analytics tools, advertising platforms and similar technologies, including website analytics tools, advertising and remarketing platforms, tracking pixels and tags, and audience and conversion tracking technologies. Section 10 explains this in more detail.

(e) If we receive personal information that we did not ask for and could not have collected ourselves, we will destroy or de-identify it if it is lawful and reasonable to do so.

4. HOW WE USE INFORMATION

(a) We use personal information to:

(i) provide coaching, advisory, educational, event and support services;

(ii) assess applications and determine suitability for our programs;

(iii) operate programs, tools, portals and events;

(iv) communicate with you and provide support;

(v) process payments, manage accounts and maintain financial records;

(vi) personalise our services and your experience;

(vii) generate insights, summaries, resources and recommendations;

(viii) administer assessments and profiling tools;

(ix) improve our services, systems, workflows and operations;

(x) conduct internal analysis, planning and operational improvement;

(xi) create and improve educational materials, tools and resources;

(xii) provide marketing communications and promotional material;

(xiii) monitor and improve website performance and advertising effectiveness;

(xiv) maintain internal records;

(xv) comply with our legal obligations; and

(xvi) protect our business, systems, users and services.

(b) Information, materials, documents, submissions, assessments and communications you provide may be reviewed and analysed for the purposes of providing

feedback, support, coaching, education and service delivery, and to improve our Services.

(c) We do not share your submissions, documents or materials with other participants without your permission. We may use insights, themes, patterns and

learnings derived from participant interactions and submissions to improve our services, resources and tools.

(d) Where more than one person from your business participates in our Services, we may share and discuss assessment results, session content and related information between them for the purposes of delivering the program.

(e) Where you provide a testimonial, review, case study or endorsement for publication, we may use it in connection with the marketing and promotion of our Services. If you later ask us in writing to stop using it, we will take reasonable steps to remove it from future marketing material within a reasonable time. Photography and recording at events is dealt with in section 6.

(f) We will only use your personal information for a purpose other than the one it was collected for where you would reasonably expect us to, where you have consented, or where the law permits or requires it.

(g) We do not sell personal information.

5. AI TOOLS AND AUTOMATED PROCESSING

(a) We use artificial intelligence, automation systems and AI-assisted technologies to support our operations and service delivery. We may use these tools to:

(i) transcribe and summarise sessions, meetings and communications;

(ii) generate content, resources and recommendations;

(iii) assist with support, administration and workflow;

(iv) analyse information, submissions and assessment results;

(v) personalise our services and your experience;

(vi) analyse engagement, participation, feedback or sentiment; and

(vii) develop and improve our internal tools, systems and automations.

(b) Where we record a session, the recording, transcript and summary may be processed by these tools and used as described in this section. Section 6

explains how we handle recordings.

(c) Our Services rely on these tools. It is not practicable for us to deliver most of our Services without using AI-assisted processing.

(d) Information you provide to us, and information generated through your use of our Services, may be used to build and maintain contextual knowledge about

you and your business over time. We do this so that our coaching, recommendations and support are informed by your history with us rather than starting from scratch each time. This information is retained in accordance with section 11.

(e) Information provided to us may be processed by third-party AI and technology providers used in our operations. These providers may include large language

model platforms, AI-assisted transcription and summarisation services, marketing and content generation tools, workflow automation platforms, productivity and collaboration platforms, and analytics and operational support systems. Some of these providers process information on servers outside Australia. Section 9

explains this further.

(f) We do not use identifiable customer data to train third-party public AI models. We use these providers on terms under which submitted information is not used to train their models.

(g) Automated decisions. We do not use automated processes to make decisions that significantly affect your rights or interests. Decisions about whether to accept an application, whether to continue providing our Services, and all decisions about how we deliver coaching and advice, are made by people. AI tools may inform those decisions by producing summaries, analysis or recommendations, but the decision itself is made by a person. If this changes, we will update this Privacy Policy and tell you.

(h) AI-generated outputs may contain inaccuracies. Our Terms and Conditions set out your responsibility to assess and verify any output before relying on it.

6. RECORDINGS, TRANSCRIPTS AND EVENT MEDIA

(a) We may record sessions, coaching calls, workshops, webinars, events and support interactions for service delivery, training, quality assurance, educational

and administrative purposes.

(b) Where a session is conducted using a video or online meeting platform, participants will receive an automated recording notification. For other recorded interactions, we will take reasonable steps to notify participants before recording begins. By continuing to participate after receiving notification, you consent to

the recording.

(c) Recordings, transcripts and summaries may be accessed by our personnel, contractors, service providers and the AI-assisted systems described in section 5.

(d) Where a group session is recorded, the recording or a summary of it may be made available to other participants in that program. If you do not want something you say in a group session to be shared in that way, tell us at the time.

(e) Recordings and transcripts may contain information about your business, your clients and other people. You should consider this before sharing information you would not want recorded. If you need us to delete or redact part of a recording, contact us using the details in section 15 and we will consider your request.

We may take photographs, video and audio recordings at events and use them for marketing, promotional, educational and administrative purposes. If you do not wish to appear, tell us in writing (which for this purpose includes in person at the event) before or at the event, and we will take reasonable steps to accommodate that.

(g) Where an event is held at a third-party venue, that venue may operate its own security cameras or recording systems. We do not control those systems.

7. INFORMATION ABOUT OTHER PEOPLE

(a) In the course of providing our Services, you may give us personal information about other people, including your clients, employees, contractors and business partners. This may happen when you share documents, discuss a client scenario in a session, upload files, or use our tools.

(b) Where you provide us with personal information about another person, you are responsible for ensuring you are authorised to do so and that you have obtained any consents required under privacy laws that apply to you. Clause 8(h) of our Terms and Conditions sets this out as a warranty you give us.

(c) We rely on you having that authority. We do not have a direct relationship with those people and it is generally not practicable for us to notify them that we hold their information.

(d) We use personal information about other people only for the purpose of delivering our Services to you. We do not use it to market to those people, and we do not add them to our mailing lists.

(e) Where you no longer need us to hold information about another person, or where that person asks you to have it removed, contact us using the details in section 15 and we will take reasonable steps to delete or de-identify it, subject to section 11.

(f) If a person contacts us directly about personal information we hold about them that was provided by a participant, we will respond to them and, where appropriate, refer them to the participant who provided it.

(g) We encourage you to remove or de-identify personal information about your clients before sharing documents with us, where doing so does not reduce the usefulness of the material.

8. WHO WE SHARE INFORMATION WITH

(a) We may disclose personal information to the following, for the purposes described in section 4:

(i) our employees, contractors and authorised personnel;

(ii) cloud, software and hosting providers;

(iii) email, communication and marketing platforms;

(iv) payment processors;

(v) event, webinar and video conferencing platforms;

(vi) analytics and advertising providers;

(vii) AI and automation technology providers;

(viii) accounting, bookkeeping and financial service providers;

(ix) event venues and suppliers, where necessary to run an event;

(x) our professional advisers, including lawyers, accountants and insurers;

(xi) any person you authorise us to disclose it to; and

(xii) any person to whom we are required or permitted by law to disclose it.

(b) Many of these providers are located outside Australia. Section 9 explains this.

(c) We take reasonable steps to work with reputable providers and to satisfy ourselves that their terms provide appropriate protection for personal information

handled on our behalf.

(d) If our business, or part of it, is sold, transferred or restructured, personal information may be disclosed to the acquiring party as part of that transaction. Clause 15(k) of our Terms and Conditions deals with assignment.

(e) We do not sell personal information, and we do not disclose it to third parties for their own marketing purposes.

9. OVERSEAS DISCLOSURE AND PROCESSING

(a) We use cloud, software, AI, communication, analytics and automation providers that operate or store information outside Australia. As a result, your personal information may be stored, processed or accessed outside Australia.

(b) The countries in which our providers are most likely to store or process personal information are Australia, the United States and countries within the European Union. This may change as our providers and systems change.

(c) Where practicable, we choose providers that offer Australian data storage, and we configure them to store data in Australia where that option is available. Where we use video conferencing and backup providers, session recordings, transcripts and backups are stored in Australia. Our payment processor stores data in the United States, and our email marketing provider stores data in the European Union.

(d) Before engaging a provider that will handle personal information overseas, we take reasonable steps to satisfy ourselves that the provider has appropriate

privacy and security practices in place. However, privacy and data protection laws differ between countries, and an overseas provider may not be subject to laws

that are substantially similar to the Australian Privacy Principles.

(e) By providing personal information to us and continuing to use our Services, you acknowledge that your personal information may be handled overseas as described in this section, and that we will not be accountable under the Australian Privacy Principles for how an overseas recipient handles it. This does not affect our own obligations under this Privacy Policy or the Australian Privacy Principles.

10. MARKETING, ANALYTICS AND TRACKING

(a) We may send you marketing communications about our Services, including newsletters, program information, event invitations and promotional material. We send these where you have given us your consent, or where you have an existing business relationship with us and would reasonably expect to hear from us.

(b) You may opt out of marketing communications at any time using the unsubscribe link in any email, or by contacting us using the details in section 15. We will action your request within five working days.

(c) Opting out of marketing does not stop us sending you communications necessary to deliver our Services, such as session reminders, invoices, account notices and program updates.

(d) We use cookies, pixels, tags and similar technologies on our website to:

(i) understand how our website is used;

(ii) improve our website and Services;

(iii) measure the effectiveness of our advertising;

(iv) personalise content and marketing; and

(v) create audiences and marketing segments.

(e) These technologies may include website analytics tools, advertising and remarketing platforms operated by third parties, and conversion tracking tools.

Where we use third-party advertising platforms, those platforms may also collect information about you and use it in accordance with their own privacy policies.

(f) You can adjust your browser settings to block or delete cookies. Some parts of our website may not work properly if you do.

11. STORAGE, RETENTION AND SECURITY

(a) We store personal information in the systems and platforms described in this Privacy Policy, including cloud storage, communication, video conferencing, payment, accounting and marketing platforms.

(b) We take reasonable administrative, technical and operational steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These include access controls, multi-factor authentication on our core systems, encryption in transit and at rest with our major providers, and regular backups.

(c) No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security of information stored or transmitted through our systems.

(d) We recognise that information shared during coaching, advisory, strategic and operational discussions may be commercially sensitive or confidential. We handle that information in accordance with this Privacy Policy and the confidentiality obligations in our Terms and Conditions.

(e) We retain personal information for as long as it is reasonably necessary for the purposes for which it was collected, including:

(i) delivering our Services and maintaining continuity of support;

(ii) maintaining customer and financial records;

(iii) meeting our legal, tax and regulatory obligations;

(iv) resolving disputes and enforcing our agreements; and

(v) internal analysis and improving our Services.

(f) Retention periods vary depending on the type of information. Financial and transaction records are generally kept for at least seven years, as required by

Australian tax law. Session recordings, transcripts and coaching records are retained while you remain a participant and for a reasonable period afterwards.

(g) When your access to our Services ends, we continue to hold information about you in accordance with this section. You may request deletion under section

13.

(h) Where information is no longer needed for any purpose for which it may be used or disclosed, and we are not required by law to retain it, we will take reasonable steps to destroy it or de-identify it.

12. DATA BREACHES

(a) We have processes in place to identify, contain and assess suspected data breaches, including assessing whether a breach is likely to result in serious harm within 30 days of becoming aware of it. This includes breaches affecting our service providers where they involve personal information we hold.

(b) If a data breach occurs that is likely to result in serious harm to any individual whose personal information is involved, we will notify the affected individuals

and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.

(c) Where a breach involves personal information you have provided to us about another person, we will notify you so that you can consider your own obligations to that person.

(d) If you believe your information held by us has been compromised, tell us immediately using the details in section 15. We will investigate and respond to you.

13. ACCESS, CORRECTION, DELETION AND COMPLAINTS

(a) You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete or misleading. Contact us using the details in section 15.

(b) We will respond to your request within a reasonable time, generally within 30 days. We may need to verify your identity before acting on a request.

(c) We do not charge for making a request. We may charge a reasonable fee for providing access where a request requires substantial work, and we will tell you the fee before we proceed.

(d) In some circumstances we may refuse access or correction. If we do, we will tell you in writing, explain our reasons, and tell you how to complain about the decision.

(e) You may ask us to delete personal information we hold about you. We will take reasonable steps to do so, but we may be unable to delete information where we are required or entitled to retain it for legal, financial, tax, contractual or operational reasons, or where it is held in backups. If this applies, we will explain the basis for retaining it.

(f) Where we rely on your consent to handle personal information, you may withdraw that consent by contacting us. Withdrawing consent does not affect anything we did before you withdrew it. Because our Services rely on the systems and processing described in this Privacy Policy, we may be unable to continue providing some or all of our Services if you withdraw your consent.

(g) If you are not satisfied with how we have handled your personal information or responded to a request, you may complain to us using the details in section

15. We will acknowledge your complaint and respond within a reasonable time, generally within 30 days.

(h) If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner:

Website: oaic.gov.au
Phone: 1300 363 992

14. THIRD-PARTY PLATFORMS AND LINKS

(a) Our Services may integrate with, link to, or be delivered through third-party websites, platforms and applications.

(b) Where you use a third-party platform to access or interact with our Services, that platform collects and handles your information in accordance with its own privacy policy and terms. We do not control those practices. This includes where you interact with us on social media.

(c) Our website and communications may contain links to other websites. We are not responsible for the content or privacy practices of those websites, and we encourage you to review their privacy policies.

(d) Where you engage a third party on our recommendation or through a link from our Services, your dealings with that third party are between you and them.

15. CONTACT US

If you have questions about this Privacy Policy, wish to access or correct your information, or would like to make a privacy-related enquiry or complaint, contact us:

The Advice Business Pty Ltd
ACN 700 107 393 · ABN 79 700 107 393
Email: [email protected]
Ground Floor, 470 St Kilda Rd
Melbourne VIC 3004 Australia

Privacy Policy effective 24 July 2026.