Privacy Policy

1. Introduction

Rebirth Retreat / Kelly Finnis ("we", "us", "our") is committed to protecting your privacy. This Policy explains how we collect, use, disclose and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Note: Businesses that provide a health service and hold health information must comply with the Privacy Act regardless of annual turnover — the usual $3 million small-business exemption does not apply to them. Because our services relate to wellness, yoga and shadow work practices, this Policy treats us as bound by the APPs in full, rather than relying on the small business exemption.

2. What Personal Information We Collect

We may collect:

• Your name, email address and phone number
• Mailing address (for retreat bookings)
• Date of birth (for eligibility or insurance purposes on retreats)
• Payment and billing information (processed by our payment processors — we do not store full card details)
• IP address and device/browser information
• Information you provide via contact or enquiry forms
• Information you share with us during Mentorship or Circle sessions

3. Sensitive & Health Information

Because our services involve wellness, shadow work and yoga practices, you may voluntarily share health-related or sensitive personal information with us during a session — for example, injuries, mental health history, or emotional disclosures. We do not create or retain formal client notes, health records, or session summaries containing this information.

Where you provide health or dietary information for a specific operational purpose (for example, a retreat booking form asking about allergies or medical conditions relevant to your safety while travelling), we collect only what is reasonably necessary for that purpose, retain it only as long as needed for that event, and do not use it for any secondary purpose such as marketing.

If our practices around retaining client information change in future — for example, if we begin keeping structured mentorship notes — this Policy will be updated to reflect that before it happens.

4. How We Collect Information

• Directly from you, via website forms, checkout pages, email, phone, or in person at events
• Automatically, via cookies and analytics tools when you browse the Site
• From our service providers — for example, a payment processor confirming a transaction was completed

5. Why We Collect and Use Your Information

We use your information to:

• Provide and manage the services you've purchased or enquired about
• Process payments and manage billing and subscriptions
• Send transactional communications such as booking confirmations, receipts and class reminders
• Send marketing communications (such as Deep Drops) where you've consented, in accordance with the Spam Act 2003 (Cth)
• Respond to your enquiries
• Improve our Site and services
• Comply with our legal obligations

6. Cookies & Analytics

Our Site may use cookies and similar tracking technologies to understand how visitors use the Site and to improve performance. You can control cookies through your browser settings.

7. Direct Marketing

We will only send marketing communications, such as Deep Drops, where you have opted in, or where otherwise permitted by law. Every marketing email includes a functional unsubscribe link, in line with the Spam Act 2003 (Cth). You can also opt out at any time by emailing hello@rebirthretreat.com.au.

8. Who We Share Your Information With

We share personal information with trusted third-party service providers who help us operate our business, including:

• GoHighLevel / LeadConnector — our customer relationship management (CRM) and marketing automation platform, used to store contact details, manage bookings, and send emails/SMS.
• FastPayDirect and/or Stripe — our payment processors, who handle payment card information directly; we do not store full card details.
• Email and communication platforms used to deliver newsletters and automated sequences.
• Our accountant or bookkeeper, where necessary for financial administration.

We do not sell your personal information to third parties.

9. Overseas Disclosure

Some of our service providers — including GoHighLevel/LeadConnector and our payment processors — may store or process personal information on servers located outside Australia, including in the United States. Where this occurs, we take reasonable steps to ensure these providers handle your information consistently with the Australian Privacy Principles. However, you should be aware that overseas recipients may not be subject to the same privacy laws as Australia, and it may in some circumstances be more difficult to enforce your privacy rights against an overseas recipient.

10. Data Security

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

11. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this Policy, including ongoing service delivery and legal, accounting or reporting requirements. When information is no longer needed, we take reasonable steps to destroy or de-identify it.

12. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or outdated information
• Opt out of direct marketing at any time
• Make a complaint about how we've handled your personal information

To exercise these rights, contact us at hello@rebirthretreat.com.au. We will respond within a reasonable time, generally within 30 days.

13. Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact us first at hello@rebirthretreat.com.au so we can investigate and respond. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

14. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from children without parental or guardian consent. If you believe a child has provided us with personal information without appropriate consent, please contact us so we can remove it.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The "last updated" date below reflects the most recent revision. We encourage you to review this Policy periodically.

16. Contact Us

Kelly Finnis, trading as Rebirth Retreat (Sole Trader)
Perth, Western Australia
Email: hello@rebirthretreat.com.au
ABN: 55 240 598 562