Legal
Privacy Policy
Last updated:
1. Data Controller
The data controller responsible for processing your personal data in connection with this website and our coaching services is:
Rejuvenherbal
455 George St, Sydney NSW 2000, Australia
Phone: +61 2 9265 6800
Email: touch@rejuvenherbal.world
Website: rejuvenherbal.world
For privacy-related enquiries, you may contact us using the details above. We will respond within thirty days where required by applicable law, and sooner where reasonably possible.
2. Scope of This Policy
This Privacy Policy applies to personal data collected when you visit our website, submit enquiries through our contact form, register for coaching programmes, communicate with us by email or telephone, or otherwise interact with Rejuvenherbal.
Our website provides general informational content about mini-habit formation coaching. We do not offer medical, psychological, or therapeutic services through this site. Personal data related to health is not intentionally collected unless you voluntarily include such information in correspondence, in which case we will process it only as necessary to respond to your enquiry and in accordance with this policy.
3. Categories of Personal Data We Collect
3.1 Data you provide directly
- Identity and contact data: name, email address, telephone number if provided
- Communication content: messages submitted via our contact form or email
- Coaching-related information: goals, schedule preferences, habit tracking notes shared during sessions
- Consent records: confirmation that you agreed to data processing and marketing where applicable
3.2 Data collected automatically
- Technical data: IP address, browser type and version, operating system, device type
- Usage data: pages visited, time spent, referral source, click patterns
- Cookie data: as described in our Cookie Policy
3.3 Data we do not collect
We do not intentionally collect special categories of personal data as defined under the GDPR (Article 9), including data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data beyond what you voluntarily share, or data concerning sex life or sexual orientation. Please avoid submitting such information unless necessary for your enquiry.
4. Purposes of Data Usage
We process personal data for the following specific purposes:
- To respond to enquiries submitted through our website or email
- To deliver coaching consultations, programmes, and educational materials you have requested
- To manage appointments, billing, and customer support
- To maintain internal records of coaching sessions and agreed action plans
- To improve our website content and user experience through aggregated analytics where consent is given
- To send service-related communications such as scheduling confirmations and policy updates
- To comply with legal obligations under Australian law and, where applicable, GDPR requirements for visitors from the European Economic Area
- To establish, exercise, or defend legal claims where necessary
We do not use your personal data for automated decision-making that produces legal or similarly significant effects.
5. Legal Basis for Processing
Where the GDPR applies, we rely on the following legal bases:
- Contract performance: Processing necessary to deliver coaching services you have purchased or requested
- Legitimate interests: Operating and improving our website, preventing fraud, and maintaining business records, balanced against your rights
- Consent: Analytics cookies, marketing communications, and optional data uses where you have provided explicit consent
- Legal obligation: Retaining records required by tax, consumer, or regulatory authorities
Under the Australian Privacy Act 1988, we collect personal information that is reasonably necessary for our functions and activities and handle it in accordance with the Australian Privacy Principles.
6. Data Retention Periods
We retain personal data only for as long as necessary to fulfil the purposes described in this policy:
- Contact form enquiries not converted to clients: up to twelve months from last communication
- Active coaching clients: duration of the coaching relationship plus seven years for business and tax records
- Session notes and habit tracking data: up to three years after the final session unless you request earlier deletion and no legal hold applies
- Marketing consent records: for as long as consent remains valid plus three years for audit purposes
- Server logs and analytics: typically ninety days, unless a security investigation requires longer retention
- Cookie consent preferences: twelve months from the date of your choice, then renewed upon your next visit
When retention periods expire, we securely delete or anonymise personal data so it can no longer be associated with you.
7. Data Sharing and Recipients
We do not sell your personal data. We may share data with:
- Service providers who assist with hosting, email delivery, appointment scheduling, payment processing, and analytics, bound by contractual confidentiality obligations
- Professional advisers such as accountants or lawyers when required for legitimate business purposes
- Law enforcement or regulatory authorities when required by applicable law or valid legal process
All processors are selected based on their security practices and are permitted to process data only according to our instructions.
8. International Data Transfers
Our primary operations and data storage are based in Australia. If we transfer personal data outside Australia or the EEA, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or ensure the recipient country has been deemed to provide adequate protection.
You may request details of specific safeguards by contacting us at the address above.
9. Security Measures
We implement technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction, including:
- HTTPS encryption for all website communications
- Access controls limiting employee access to personal data on a need-to-know basis
- Secure storage of digital records with regular backup procedures
- Staff training on data protection and confidentiality obligations
- Procedures for assessing and responding to suspected data breaches in accordance with notification requirements under applicable law
While we take reasonable precautions, no method of transmission over the internet is completely secure. We encourage you to use strong passwords for any accounts we provide and to contact us promptly if you suspect unauthorised access to your information.
10. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right of access: Request a copy of personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion where processing is no longer necessary or consent is withdrawn
- Right to restrict processing: Request limitation of processing in certain circumstances
- Right to data portability: Receive data you provided in a structured, machine-readable format where processing is based on consent or contract
- Right to object: Object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing
- Right to lodge a complaint: Contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or your local supervisory authority in the EEA
To exercise any of these rights, email us at touch@rejuvenherbal.world with sufficient detail to verify your identity. We may request additional information to confirm your identity before fulfilling requests.
11. Children's Privacy
Our services are directed at adults aged eighteen and over. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, contact us immediately and we will delete it without undue delay.
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. The date at the top of this page indicates when the policy was last revised. Material changes will be communicated through a notice on our website or by email where appropriate.
13. Contact for Privacy Matters
For questions, requests, or complaints regarding this Privacy Policy or our data practices, contact:
Rejuvenherbal
455 George St, Sydney NSW 2000, Australia
Email: touch@rejuvenherbal.world
Phone: +61 2 9265 6800