Dizzy Resolve Integrative Coaching

Privacy Policy

Effective Date: 15th November 2025

1. Commitment to Privacy

Dizzy Resolve Integrative Coaching (Dizzy Resolve Pty Ltd ABN 21 669 541 486) ("The Company", "we", "us" or "our") is committed to safeguarding the privacy of our clients, staff, facilitators, and participants in the Company's programs and services, as well as those who visit our website or engage with the Company on our social media platforms.

The Company is bound by the Privacy Act 1988 (Cth) (Privacy Act), the Australian Privacy Principles (APPs), and applicable state and territory health records legislation including the Information Privacy Act 2009 (Qld). This Policy explains how we comply with these laws when handling your personal information.

This Privacy Policy (Policy) sets out how we collect, use, disclose, store, and protect your Personal Information and Sensitive Information. The Policy applies to:

  • Our website: www.dizzyresolve.com

  • Social media platforms operated by us (including Facebook, YouTube, TikTok, and Instagram)

  • All products and services provided by us in-person and online, including but not limited to:

    • Fear-to-Calm Method for Dizziness (mini-course)

    • THE SHIFT: Dizziness Transformation Program

    • Inner Balance membership

    • Private one-on-one coaching

    • Any other current or future programs and services


2. Definitions

In this Policy:

"Personal Information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not. This may include your name, address, email address, phone number, date of birth, payment information, and other identifying information. It does not include "Sensitive Information".

"Sensitive Information" is a sub-set of personal information and means information or an opinion about an individual's racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices, criminal record, health information, genetic information, or biometric information.

"Health Information" means information or an opinion about the health or a disability of an individual, including information about an individual's physical, mental or psychological health, disability status, health services provided or to be provided, and other health-related matters.

"Your Data" means your Personal Information and Sensitive Information together.

"APPs" means the Australian Privacy Principles contained in Schedule 1 of the Privacy Act 1988 (Cth).


3. Collection of Your Data

3.1 What Information We Collect

To provide our services to you, The Company may receive and store Personal Information and Sensitive Information (together, 'your Data') that you enter onto our website, provide to us directly, or give to us in any other form or by any other means, including through our intake forms, waiver and release forms, participant information sheets, and communications with us.

Your Data may include:

  • Contact details: Name, phone number, address, email address, location (city/state)

  • Account information: Username, password (encrypted), account preferences

  • Payment and billing information: Credit card details (processed securely by third-party payment processors), billing address, transaction history

  • Health information: Information about dizziness conditions, vestibular disorders, symptoms, duration of symptoms, medical history, current medications, injuries past or present, mental health information, pregnancy status, healthcare providers you see

  • Demographic information: Age, gender, occupation (if voluntarily provided)

  • Usage information: How you interact with our website, programs, and services

  • Technical information: IP address, device type, browser type and version, operating system, referring website

  • Communications: Emails, messages, feedback, survey responses, testimonials

  • Program participation information: Course progress, attendance at group sessions, participation in forums or community areas

  • Other information voluntarily provided by you

3.2 Purpose of Collection

Your Data is collected for the following purposes:

  • To ensure your safety and wellbeing, and that of other participants and facilitators

  • To provide you with our programs, products, and services

  • To assess your suitability for participation in our programs

  • To communicate with you about your participation

  • To send information, updates, and educational content

  • To process purchases, payments, and billing

  • To provide customer support and respond to inquiries

  • To improve our services and understand your needs

  • To comply with legal obligations

  • To protect our rights and property

  • For research, analytics, and quality improvement purposes

3.3 Legal Basis for Collection

We collect your Personal Information:

  • With your consent (APP 3)

  • Where collection is necessary to provide services you have requested

  • Where required or authorized by law

  • Where collection is reasonably necessary for our functions or activities

Sensitive Information (including health information) will only be collected with your consent, except in limited circumstances permitted by law such as where necessary to prevent or lessen a serious threat to life, health or safety (APP 3.4).

3.4 How We Collect Your Data

The Company collects your Data from you in a variety of ways, including:

  • When you interact with us electronically (email, online forms, website) or in person

  • When you access our website and social media platforms

  • When you purchase or register for our programs and services

  • When you complete intake forms, waivers, or participant information sheets

  • When you provide feedback, complete surveys, or provide testimonials

  • When you provide information about your health or personal circumstances

  • When you change your contact or email preferences

  • When you respond to promotions or marketing communications

  • When you participate in group sessions or community forums

  • When you communicate with us in any other way

  • Through cookies and analytics tools when you use our website (see Section 9A)

3.5 Collection from Third Parties

We may receive your Data from third parties, including:

  • Your medical practitioners, specialists, or healthcare providers (with your consent or as permitted by law)

  • Hospitals, clinics, or other health service providers

  • Family members or representatives (with appropriate consent or legal authority)

  • Payment processors and other service providers

  • Publicly available sources

If we receive your information from third parties, we will protect and use it as set out in this Policy and in accordance with the

APPs.

3.6 Anonymity and Pseudonymity

Where practicable, we will give you the option to interact with us anonymously or using a pseudonym (APP 2). For example:

  • You may browse our website without identifying yourself

  • You may make general inquiries without providing your full details

However, in most cases we will need to collect your personal information to provide our services. For example, we cannot:

  • Process a purchase or enroll you in a program without contact and payment details

  • Provide health-related educational services without understanding your circumstances

  • Communicate with you or provide customer support without contact information

If you choose to remain anonymous or use a pseudonym, we may not be able to provide certain services to you.


4. Use of Your Data

4.1 Primary Uses

Personal Information collected by us will only be used and disclosed for the purposes for which it was collected, or for a related secondary purpose that you would reasonably expect, or as otherwise permitted by the Privacy Act.

We use your Data to:

  • Provide, maintain, and improve our programs, products, and services

  • Process and manage your enrollment, account, and participation

  • Communicate with you about your participation, including sending confirmations, updates, and important information

  • Process payments, billing, and transactions

  • Provide customer support and respond to your inquiries

  • Send you information, updates, and educational content related to our services

  • Understand your needs and improve our services

  • Conduct research, analytics, and quality improvement activities

  • Ensure the safety and wellbeing of participants and staff

  • Comply with legal and regulatory obligations

  • Prevent fraud, unauthorized access, or illegal activity

  • Protect our rights, property, and safety, and that of our clients and others

  • Enforce our terms and conditions and other agreements

4.2 Marketing and Communications

We may use your Personal Information to send you direct marketing communications about our products, services, programs, and opportunities that we consider may be of interest to you, in accordance with APP 7 and the Spam Act 2003 (Cth).

You have the right to opt-out of receiving marketing communications at any time (see Section 10).

4.3 Secondary Purposes

We may use your Personal Information for secondary purposes where:

  • The secondary purpose is related to the primary purpose of collection and you would reasonably expect us to use the information for that purpose

  • You have consented to the use or disclosure

  • It is required or authorized by law

  • It is necessary to prevent or lessen a serious threat to life, health or safety

  • It is reasonably necessary for enforcement-related activities

  • It is otherwise permitted by the Privacy Act

Examples of secondary purposes include:

  • Seeking advice from legal, accounting, or professional advisers

  • Managing complaints or disputes

  • Conducting internal training and quality assurance

  • Complying with audits or regulatory requirements


5. Disclosure of Your Data

5.1 When We May Disclose Your Personal Information

The Company may disclose your Personal Information in the following circumstances:

To service providers and third parties:

  • Our employees, officers, contractors, and facilitators

  • Professional advisers (lawyers, accountants, auditors, consultants)

  • Insurers and insurance brokers

  • Third-party service providers (see Section 5A for details)

For legal and safety reasons:

  • To comply with legal obligations, court orders, subpoenas, warrants, or law enforcement requests

  • To protect our rights, property, intellectual property, or safety

  • To protect the rights, property, or safety of our clients or the public

  • To prevent fraud, unauthorized access, or illegal activity

  • In connection with legal proceedings or investigations

For business purposes:

  • In connection with a business transfer, merger, acquisition, or sale of assets (see Section 5.3)

  • To enforce our terms and conditions or other agreements

For health service provision:

  • To other healthcare providers (see Section 5.2)

With your consent:

  • To any other third parties where you have provided your consent

5.2 Disclosure of Health Information

We may provide health information (Sensitive Information) to:

  • Your general practitioner, medical specialists, or other healthcare providers

  • Other health service providers for the purposes of treatment, referral, or coordination of care

  • Medicare or health insurers for billing purposes

We will only disclose your health information:

  • With your express consent, OR

  • Where it is necessary for the provision of a health service to you, OR

  • Where it is necessary to prevent or lessen a serious threat to your life, health or safety, or that of another person, OR

  • Where required or authorized by law

5.3 Business Transfers

If there is a change of control in our business, or a sale, transfer, or merger of business assets, we reserve the right to transfer, to the extent permissible at law, our user databases together with any Personal Information, Sensitive Information, and non-personal information contained in those databases.

This information may be disclosed to a potential purchaser or new owner under an agreement to maintain confidentiality. We would seek to only disclose information in good faith and where required by the circumstances. The new owner would be required to continue to protect your information in accordance with this Privacy Policy or provide you with notice of any changes.

5.4 Aggregate or De-identified Information

We may use and share aggregate, statistical, or de-identified information (information that does not identify you personally) for:

  • Market analysis and research

  • Understanding user behavior and trends

  • Improving our services

  • Marketing or promotional purposes

  • Any other purposes

This de-identified information is not considered Personal Information under the Privacy Act.

5.5 Third-Party Marketing

We will NOT disclose, sell, share, or trade your Personal Information to third parties for their own marketing purposes unless we first receive your express consent.

5.6 Your Consent

By providing us with your Data, you consent to the collection, use, and disclosure of your information in accordance with the terms of this Privacy Policy. Where we disclose your Personal Information to third parties, we will take reasonable steps to ensure they handle your information in accordance with the APPs and this Policy.


5A. Third-Party Service Providers and Overseas Disclosure

5A.1 Third Parties We Work With

The Company uses third-party service providers to deliver and support our services. These providers may have access to your Personal Information only to perform specific tasks on our behalf and are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.

Third-party service providers may include:

  • Payment processors (e.g., Stripe, PayPal) to process transactions and payments

  • Email service providers (e.g., Mailchimp, ConvertKit, ActiveCampaign) to send communications and manage email lists

  • Course hosting and membership platforms to deliver digital content and manage access

  • Customer relationship management (CRM) systems to manage client interactions and communications

  • Analytics services (e.g., Google Analytics) to analyze website usage and improve our services

  • Cloud storage providers (e.g., Google Drive, Dropbox) to securely store data and files

  • Video conferencing platforms (e.g., Zoom) for live sessions in certain programs

  • Scheduling and booking systems for appointments and calendar management

  • Web hosting providers to host our website and online platforms

  • Marketing and advertising platforms (e.g., Facebook, Google Ads) for promotional activities

  • Survey and feedback tools to collect feedback and conduct surveys

5A.2 Overseas Disclosure and APP 8 Compliance

Some of our third-party service providers are located overseas or store data on servers located outside Australia. This means your Personal Information may be disclosed to, and stored in, countries including but not limited to:

  • United States

  • European Union countries

  • United Kingdom

  • Canada

  • Singapore

Important information about overseas disclosure:

  • By using our services, you consent to your personal information being disclosed to these overseas recipients for the purposes outlined in this Privacy Policy.

  • The countries where your information is sent may have different privacy laws than Australia, and may not provide the same level of protection for personal information as Australian privacy law.

  • Under APP 8, we remain accountable for any breaches of the APPs by overseas recipients, unless we obtained your consent to the overseas disclosure after informing you that we will not be accountable, OR the overseas recipient is subject to a law or binding scheme that provides substantially similar protections to the APPs.

Steps we take to protect your information:

  • We select reputable service providers with strong privacy and security practices

  • We enter into contracts with service providers that require them to protect your information

  • We take reasonable steps to ensure overseas recipients comply with the APPs or equivalent standards

  • We regularly review the practices of our service providers

You can contact us at [email protected] if you would like more information about:

  • Which countries your information may be sent to

  • The steps we take to protect your information when sent overseas

  • The privacy policies of our third-party service providers


6. Security of Your Data

6.1 Our Commitment to Security

The Company is committed to ensuring that your Data is secure.

We take reasonable steps to protect your Data from misuse, interference, loss, unauthorised access, modification, or disclosure, in accordance with APP 11.

6.2 Security Measures We Use

We use commercially reasonable physical, technical, and administrative measures to protect your Data, including:

Technical measures:

  • Encryption of data in transit using Secure Socket Layer (SSL) technology

  • Encryption of sensitive data at rest

  • Secure password protection (passwords are hashed and not stored in plain text)

  • Firewalls and intrusion detection systems

  • Regular security updates and patches

  • Secure backup systems

Administrative measures:

  • Access to personal information is restricted on a need-to-know basis

  • Staff training on privacy and data security

  • Confidentiality agreements with staff and contractors

  • Regular review and update of security practices

  • Incident response procedures

Physical measures:

  • Secure storage of physical records (if any)

  • Controlled access to offices and facilities

  • Secure disposal of physical records when no longer needed

6.3 Limitations and Your Responsibility

However, please be aware that:

  • No method of transmission over the internet or electronic storage is 100% secure

  • We cannot guarantee absolute security of data transmitted online

  • The transmission and exchange of information over the internet is carried out at your own risk

  • Although we take reasonable measures to safeguard against unauthorised disclosures, we cannot assure you that your Data will never be disclosed in a manner inconsistent with this Privacy Policy

You are solely responsible for:

  • Maintaining the confidentiality of your passwords and account information

  • Ensuring your device and internet connection are secure

  • Logging out of your account after use, especially on shared devices

  • Notifying us immediately if you become aware of any unauthorized access to your account

If you become aware of any unauthorized access to your account or any security breach, you must notify us immediately at [email protected].

6.4 Data Breach Notification

The Company complies with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth).

What is an eligible data breach?

An eligible data breach occurs when:

  • There is unauthorized access to or unauthorized disclosure of personal information we hold, OR the information is lost in circumstances where unauthorized access or disclosure is likely to occur; AND

  • This is likely to result in serious harm to affected individuals; AND

  • We have not been able to prevent the likely risk of serious harm with remedial action

What we will do if an eligible data breach occurs:

If we become aware of an eligible data breach, we will:

  1. Assess the breach: Conduct a reasonable and prompt assessment to determine if it is likely to result in serious harm

  2. Contain the breach: Take immediate steps to contain the breach and prevent further unauthorized access or disclosure

  3. Notify affected individuals: If the breach is likely to result in serious harm, we will notify affected individuals as soon as practicable, providing:

    • A description of the breach

    • The kind of information involved

    • Recommendations about the steps you should take in response

    • Our contact details for further information

  4. Notify the OAIC: We will also prepare a statement and provide it to the Office of the Australian Information Commissioner (OAIC)

How you will be notified:

We will notify you by email to your last known email address, or by other means if email is not appropriate (such as phone call, SMS, or public notice if we cannot contact you directly).

What you should do if you suspect a data breach:

If you become aware of or suspect a data breach involving your personal information, please contact us immediately at [email protected] so we can investigate and take appropriate action.


7. Access to Your Information

7.1 Your Right to Access

Under APP 12, you have the right to request access to the Personal Information and Sensitive Information we hold about you.

To request access:

  • Send a written request to [email protected]

  • Include sufficient details to allow us to identify you and locate your information

  • Specify what information you would like to access

7.2 Timeframe and Process

We will respond to your access request within 30 days. If we need more time, we will contact you to let you know and provide a timeframe for our response.

We will provide access in the manner you request if it is reasonable and practicable to do so. For example, we may provide:

  • Copies of documents by email (PDF)

  • Access to view information on our secure system

  • Physical copies by post

  • Information in an alternative format if you have specific accessibility needs

7.3 Fees for Access

Under APP 12.8, we may charge a fee for providing access to your information, but only to cover our reasonable costs of providing access in the manner requested.

We will not charge fees for:

  • Making the request

  • Locating or retrieving the information

  • Deciding whether to provide access

We may charge reasonable costs for:

  • Photocopying or printing

  • Postage (if you request physical copies by post)

  • Converting information to the format you requested

  • Preparing summaries or explanations if requested

We will notify you of any fees before providing access and give you the option to withdraw or modify your request.

7.4 When We May Refuse Access

Under APP 12.3, we may refuse to provide access to your information in certain circumstances, including where:

  • Providing access would pose a serious threat to the life, health, or safety of any individual, or to public health or public safety

  • Providing access would have an unreasonable impact on the privacy of others

  • The request is frivolous or vexatious

  • The information relates to existing or anticipated legal proceedings and would not be discoverable in those proceedings

  • Providing access would be unlawful (e.g., would reveal commercially sensitive information)

  • Denying access is required or authorized by law

  • Providing access would be likely to prejudice enforcement activities, negotiations, or certain operations by an enforcement body

  • The request is made by an individual's legal representative and providing access would not be in the individual's best interests

If we refuse to provide access, we will provide you with a written notice setting out:

  • The reasons for the refusal (except to the extent it would be unreasonable to do so)

  • The mechanisms available to you to make a complaint about the refusal

You may also seek access through the Office of the Australian Information Commissioner if you believe we have wrongly refused access.


7A. Correction of Your Information

7A.1 Your Right to Correction

Under APP 13, you have the right to request correction of Personal Information or Sensitive Information we hold about you if you believe it is inaccurate, out-of-date, incomplete, irrelevant, or misleading.

To request correction:

  • Contact us at [email protected]

  • Specify what information you believe is incorrect

  • Provide the correct information

  • If possible, provide supporting documentation

7A.2 Our Obligations

If you request correction, we will:

  • Respond within 30 days (or notify you if we need more time)

  • Take reasonable steps to correct the information if we are satisfied it is inaccurate, out-of-date, incomplete, irrelevant, or misleading

  • Not charge you a fee for making the request or for correcting the information

If we correct information that we have previously disclosed to another entity, we will take reasonable steps to notify that entity of the correction (unless it is impracticable or unlawful to do so).

7A.3 If We Refuse to Correct Information

If we refuse your request to correct information, we will:

  • Provide you with a written notice setting out the reasons for our refusal (except to the extent it would be unreasonable to do so)

  • Inform you of the mechanisms available to make a complaint about the refusal

If we refuse to correct information and you request it, we will take reasonable steps to associate with the information a statement that you view it as inaccurate, out-of-date, incomplete, irrelevant, or misleading.

7A.4 Proactive Correction

We will also take reasonable steps to ensure that the Personal Information we collect, use, and disclose is accurate, up-to-date, complete, and relevant, having regard to the purpose for which it is held (APP 10).


7B. Dealing with Us Anonymously or Using a Pseudonym

Under APP 2, where it is lawful and practicable, you have the option to deal with us anonymously or by using a pseudonym.

When you can interact anonymously or pseudonymously:

  • Browsing our website without creating an account

  • Making general inquiries by email or phone without providing full identifying details

  • Attending public information sessions or webinars (depending on platform settings)

  • Providing feedback or suggestions without identifying yourself

When we will need to collect your personal information:

In most cases involving the provision of our services, it will not be practicable for us to deal with you without knowing your identity. For example, we need to collect personal information to:

  • Process purchases and enrollments

  • Provide our programs and services

  • Communicate with you about your participation

  • Process payments and billing

  • Comply with legal obligations (e.g., tax, health records legislation)

  • Ensure safety and suitability for participation in health-related programs

If you choose not to provide requested personal information, we may not be able to provide you with our services or respond to your inquiry.


7C. Your Other Privacy Rights

7C.1 Right to Complain

You have the right to make a complaint about how we have handled your personal information (see Section 11).

7C.2 Right to Withdraw Consent

Where we have collected or use your information based on your consent, you may withdraw your consent at any time by contacting us at [email protected].

This includes:

  • Withdrawing consent for marketing communications (see Section 10)

  • Withdrawing consent for use of testimonials (though previously published materials may continue to appear)

  • Withdrawing consent for certain uses or disclosures of your information

However, please note:

  • Withdrawing consent may affect our ability to provide certain services to you

  • We may still need to retain some information to comply with legal obligations

  • Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal

7C.3 Limits on "Right to Erasure"

Important: Unlike the European Union's General Data Protection Regulation (GDPR), Australian privacy law does not provide a general "right to erasure" or "right to be forgotten."

Under Australian law, you can request that we delete your information, but we are not always obliged to do so.

We may retain your information where:

  • We have a legal obligation to retain it (e.g., tax records for 7 years, health records as required by state legislation)

  • Retention is necessary for enforcement of our legal rights or agreements

  • Retention is necessary to protect against legal liability

  • The information is part of a backup system and will be deleted in accordance with our regular deletion cycles

  • Retention is otherwise permitted or required by law

If you request deletion of your information:

  • We will assess whether we are able to comply with your request

  • We will delete information we are not legally required to retain

  • We will inform you if we must retain certain information and the reasons why

  • We will take reasonable steps to de-identify information where appropriate

To request deletion, contact us at [email protected].

See Section 13A for information about our data retention practices.


8. Recording of Group Sessions

8.1 Programs with Group Sessions

For programs that include group sessions (such as THE SHIFT and Inner Balance), audio and/or video of group sessions may be recorded.

8.2 Purpose of Recordings

Recordings are made for the following purposes:

  • To allow participants who could not attend live to access the content

  • To allow participants to review the material for better learning and integration

  • To provide ongoing access to program content for participants

  • Potentially to be made available to future program participants as part of the course materials

8.3 Your Consent to Recording

By participating in a group session, you acknowledge and agree that:

  • The session may be recorded (audio and/or video)

  • The recording may contain your image, voice, name, and any Personal Information or Sensitive Information you choose to disclose during the session

  • The recording may be made available to:

    • Other participants in the same program

    • Future participants in the program

    • Program facilitators and staff for quality assurance and training purposes

  • Recordings may be stored on secure cloud-based platforms which may be located outside Australia

8.4 Your Rights and Options

  • You are not obligated to turn on your video camera during group sessions

  • You are not required to provide Personal Information or Sensitive Information during group sessions

  • You may use the chat function to ask questions instead of speaking on audio if you prefer

  • You can choose to change your display name to a pseudonym or first name only on most video platforms

  • You may request not to be recorded by contacting us before the session at [email protected] – we will work with you to find a suitable arrangement (e.g., attending without being on camera or audio)

8.5 Withdrawal of Consent

You may withdraw your consent for use of recordings containing your image or voice by contacting us at [email protected]. However:

  • Recordings that have already been provided to other participants may continue to be accessible to those participants

  • We may not be able to remove your image or voice from portions of recordings where you participated in group discussions

  • We will take reasonable steps to minimize your identifiable presence in future distribution of recordings where practicable

8.6 If You Have Concerns

If you have privacy concerns about recording of group sessions, please contact us at [email protected] before participating. We will work with you to address your concerns and find a suitable solution.

8.7 Retention of Recordings

Recordings are retained for the duration of the program plus a reasonable period to allow participants to access materials (typically up to 12 months after program completion). After this period, recordings may be archived or deleted in accordance with our data retention policies.


9. Information Collected Through Our Website

9.1 Information We Collect When You Visit

When you visit our website (www.dizzyresolve.com), we may automatically collect certain technical information, including:

  • Browser information: Browser type and version, browser settings

  • Device information: Type of device, operating system, screen resolution

  • Connection information: IP address, internet service provider

  • Usage information: Pages you visit, links you click, time spent on pages, referring website or source, date and time of visit

  • Location information: Approximate geographic location based on IP address

9.2 How We Use Website Information

This information is used in an aggregated and anonymized manner to:

  • Analyze how people use our website

  • Understand user behavior and traffic patterns

  • Improve our website functionality, content, and user experience

  • Diagnose technical problems

  • Monitor and prevent security threats

  • Generate statistical reports

This aggregated information does not identify you personally.

9.3 IP Addresses

Your IP address is a number that is automatically assigned to your device when you access the internet. We may log IP addresses for:

  • System administration

  • Diagnosing server problems

  • Security and fraud prevention

  • Understanding geographic distribution of users

We do not use IP addresses to personally identify you unless necessary for security or legal purposes.


9A. Cookies and Analytics

9A.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners.

9A.2 How We Use Cookies

Our website uses cookies and similar technologies to:

  • Remember your preferences and settings

  • Understand how you use our website

  • Improve website functionality and user experience

  • Analyze website traffic and usage patterns

  • Provide relevant content

  • Enable certain features of our website

9A.3 Types of Cookies We Use

Essential Cookies (Strictly Necessary):

  • Required for the website to function properly

  • Enable core functionality such as security, network management, and accessibility

  • Cannot be disabled without severely affecting website functionality

  • Examples: Session cookies, security cookies

Analytics Cookies (Performance Cookies):

  • Collect information about how you use our website

  • Used to improve website performance and user experience

  • All information collected is aggregated and anonymized

  • Examples: Google Analytics cookies

Functional Cookies:

  • Remember your choices and preferences

  • Provide enhanced features and personalization

  • Examples: Language preferences, display settings

We do not use:

  • Third-party advertising cookies

  • Cookies to track you across different websites

  • Cookies to create detailed profiles of your browsing behavior for marketing purposes

9A.4 Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC, to analyze how users interact with our website.

What Google Analytics collects:

Google Analytics uses cookies to collect information such as:

  • How often users visit our website

  • What pages they visit and in what sequence

  • How long they stay on each page

  • What website referred them to our site

  • General location (city/country level, not precise location)

  • Device type, browser type, and operating system

How the information is used:

  • The information is transmitted to and stored by Google on servers that may be located outside Australia (including in the United States)

  • Google uses this information to analyze website usage and compile reports for us

  • The information is aggregated and anonymized – it does not personally identify you

  • Google may use the data to improve its own services

Google's use of your information:

We do not:

  • Allow Google to use Analytics data for Google's own advertising purposes

  • Combine Google Analytics data with personally identifiable information

  • Share identifiable personal information with Google through Google Analytics

9A.5 Your Cookie Choices and Controls

You can control and manage cookies in several ways:

Browser settings:

  • Most web browsers allow you to:

    • View and delete cookies

    • Block all cookies

    • Block third-party cookies

    • Clear cookies when you close your browser

  • Consult your browser's "Help" menu for instructions specific to your browser

Common browsers:

  • Chrome: Settings > Privacy and Security > Cookies

  • Firefox: Settings > Privacy & Security > Cookies

  • Safari: Preferences > Privacy > Cookies

  • Edge: Settings > Privacy > Cookies

Google Analytics opt-out:

More information about cookies:

9A.6 Effect of Blocking Cookies

Please note that blocking or deleting cookies may affect the functionality of our website. Some features may not work properly if cookies are disabled.

Essential cookies are required for basic website operation, so completely disabling cookies may prevent you from using our website effectively.

9A.7 Cookie Retention

  • Session cookies: Deleted when you close your browser

  • Persistent cookies: Remain on your device for a set period or until you delete them

  • Google Analytics cookies: Typically expire after 2 years of inactivity

We regularly review and delete cookies that are no longer necessary.


9B. Third-Party Links and Websites

9B.1 Links to Third-Party Websites

Our website, emails, and social media may contain links to third-party websites, services, or resources that are not operated or controlled by us.

Examples may include:

  • Links to research articles or educational resources

  • Links to healthcare provider directories

  • Links to payment processors

  • Links to social media platforms

  • Links to partner organizations or affiliates

9B.2 Our Responsibility

We are not responsible for:

  • The privacy practices of third-party websites

  • The content, accuracy, or availability of third-party websites

  • Any goods, services, or content provided by third parties

  • How third parties collect, use, or disclose your information

9B.3 Third-Party Privacy Policies

When you click on a link to a third-party website, you will be leaving our website and will be subject to the privacy policy and terms of use of that third-party website.

We strongly encourage you to:

  • Review the privacy policy of any third-party website before providing personal information

  • Understand how third parties will use your information

  • Contact the third party directly if you have questions about their privacy practices

9B.4 Social Media Platforms

We maintain a presence on social media platforms such as Facebook, Instagram, YouTube, and TikTok. When you interact with us on these platforms:

  • You are subject to the privacy policies and terms of use of those platforms

  • Information you share may be visible to other users of the platform

  • The platform may collect information about your interactions with our content

  • We may receive aggregated analytics from the platform about our audience

Please review the privacy policies of social media platforms you use:


10. Marketing Communications

10.1 Direct Marketing

We may send you direct marketing communications about our products, services, programs, and opportunities that we consider may be of interest to you.

Marketing communications may include:

  • Information about new programs or services

  • Educational content related to dizziness and vestibular health

  • Special offers, promotions, or discounts

  • Invitations to events, webinars, or workshops

  • Updates about our business

10.2 Legal Compliance

Our marketing communications comply with:

  • The Spam Act 2003 (Cth)

  • Australian Privacy Principle 7 (Direct marketing)

  • Other applicable laws and regulations

We will only send marketing communications where:

  • We have your consent (express or inferred), OR

  • You would reasonably expect to receive them based on your relationship with us, AND

  • We provide a clear and easy way to opt-out

10.3 Your Right to Opt-Out

You may opt-out of receiving marketing communications at any time by:

  • Clicking the "unsubscribe" link at the bottom of any marketing email

  • Replying to a marketing email with "unsubscribe" in the subject line

  • Contacting us directly at [email protected] with your request

  • Updating your communication preferences if such functionality is available in your account settings

10.4 Processing Opt-Out Requests

  • We will process opt-out requests as quickly as possible

  • Please allow up to 7 business days for your request to be fully processed

  • You may receive marketing communications already in progress during this period

10.5 Transactional Communications

Please note: Even if you opt-out of marketing communications, we may still send you:

  • Transactional emails related to your purchases, enrollments, or account (e.g., order confirmations, payment receipts, access information)

  • Service-related communications about programs you are enrolled in (e.g., session reminders, program updates, important announcements)

  • Administrative communications related to your account (e.g., password reset emails, changes to terms and conditions)

  • Legal communications required by law

These communications are necessary to provide services you have requested and are not considered marketing communications.

10.6 No Sale to Third Parties

We do not sell, rent, or trade your personal information to other organizations for their own marketing purposes.

10.7 Complaints

If you receive communications from us that you believe have been sent to you:

  • Other than in accordance with this Privacy Policy, OR

  • In breach of the Spam Act 2003 (Cth) or other laws

Please contact us at [email protected] so we can investigate and address the issue.

You may also lodge a complaint with:

  • The Australian Communications and Media Authority (ACMA) for Spam Act breaches: www.acma.gov.au

  • The Office of the Australian Information Commissioner (OAIC) for privacy breaches: www.oaic.gov.au


11. Privacy Complaints

11.1 How to Make a Complaint

If you have any complaints about our privacy practices or how we have handled your personal information, we want to hear from you.

To make a complaint:

Send details of your complaint in writing to:

Email: [email protected]

Subject line: Privacy Complaint

Please include:

  • Your name and contact details

  • A clear description of your complaint

  • The outcome you are seeking

  • Any relevant supporting information or documentation

  • Details of any steps you have already taken to resolve the issue

11.2 How We Handle Complaints

We take complaints very seriously and will:

  • Acknowledge your complaint within 2 business days of receiving it

  • Investigate your complaint fairly, thoroughly, and objectively

  • Provide a substantive response within 30 days, including:

    • Our findings

    • The reasons for our decision

    • Any action we will take to address your complaint

    • Information about further steps you can take if you are not satisfied

If we need more time:

  • We will contact you to explain why and provide an expected timeframe

  • Complex complaints may take longer than 30 days to investigate

  • We will keep you informed of progress

11.3 If You Are Not Satisfied

If you are not satisfied with our response to your privacy complaint, you have the right to contact the Office of the Australian Information Commissioner (OAIC).

Office of the Australian Information Commissioner (OAIC):

OAIC can:

  • Provide information about your privacy rights

  • Receive and investigate privacy complaints

  • Attempt to resolve complaints through conciliation

  • Make determinations about how complaints should be resolved

  • Take enforcement action for serious or repeated breaches

11.4 Other Complaint Options

Depending on the nature of your complaint, you may also be able to contact:

  • Queensland Office of the Information Commissioner (for health privacy matters in Queensland): www.oic.qld.gov.au

  • Health Complaints Commissioner (for health service complaints): Varies by state/territory

  • Australian Communications and Media Authority (ACMA) (for spam complaints): www.acma.gov.au


12. Children's Privacy

12.1 Age Requirements

Our services are intended for adults aged 18 years and over. We do not knowingly collect personal information from children under the age of 18.

12.2 Purchases for Minors

In limited circumstances, a parent or legal guardian may purchase our services for a minor (person under 18 years of age), subject to the following conditions:

  • Prior written approval from the Company must be obtained before purchase

  • The parent or guardian must complete the purchase themselves

  • The parent or guardian agrees to be bound by our Terms and Conditions and this Privacy Policy

  • The parent or guardian accepts full responsibility for the minor's use of the Services

  • The parent or guardian accepts all risks and liability on behalf of the minor

  • The parent or guardian must provide all required consents for collection of the minor's information

12.3 Information About Minors

If a parent or guardian provides information about a minor with our consent:

  • We will only collect the minimum information necessary to provide the service

  • We will take extra care to protect the minor's privacy

  • We will only use the information for the specific purposes consented to by the parent/guardian

  • The parent/guardian has the right to access and correct the minor's information

  • The parent/guardian may request deletion of the minor's information at any time (subject to legal retention requirements)

12.4 If You Become Aware of a Child's Information

If you become aware that a child under 18 has provided us with personal information without parental consent and approval, please contact us immediately at [email protected]. We will take steps to delete such information promptly.

12.5 Parental Rights

If you are a parent or guardian and you believe your child has provided us with personal information without your knowledge or consent, you have the right to:

  • Request access to your child's information

  • Request correction or deletion of your child's information

  • Withdraw consent for our use of your child's information

  • Lodge a complaint about how we have handled your child's information

Contact us at [email protected] to exercise these rights.


13. Changes to This Privacy Policy

13.1 Right to Modify

Our Privacy Policy is subject to change. The Company may modify this policy at any time, in our sole discretion, to:

  • Reflect changes in our practices or operations

  • Comply with changes in privacy laws or regulations

  • Respond to feedback from clients or regulators

  • Improve clarity or transparency

  • Add new privacy protections

13.2 How Changes Will Be Communicated

All modifications will be effective immediately upon posting of the updated Privacy Policy on our website at www.dizzyresolve.com/privacy.

For material changes that may affect your rights or how we handle your information, we will:

  • Update the "Effective Date" at the top of this Policy

  • Make reasonable efforts to notify you by:

    • Email to your last known email address (for active clients and subscribers)

    • Prominent notice on our website

    • Notification when you next log in to your account (if applicable)

13.3 Review and Acceptance

We encourage you to:

  • Review this Privacy Policy periodically

  • Check the "Effective Date" to see when the policy was last updated

  • Contact us if you have questions about any changes

Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

If you do not agree with changes to this Privacy Policy, you should discontinue use of our services and contact us to discuss your concerns.

13.4 Previous Versions

If you would like to review a previous version of this Privacy Policy, please contact us at [email protected].


13A. Data Retention

13.1 How Long We Keep Your Information

We retain your Personal Information and Sensitive Information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

13.2 Retention Periods

Generally, we retain different types of information for the following periods:

Financial and Tax Records:

  • Transaction records, invoices, and payment information: 7 years from the date of transaction

  • Reason: Required by Australian tax law (Income Tax Assessment Act 1936 and 1997, Taxation Administration Act 1953)

Health Information:

  • Health records and health-related information: Minimum 7 years from the date of last service for adults

  • Reason: Required by health records legislation in Queensland (Information Privacy Act 2009) and professional standards

  • Note: For minors, health records must be retained until the person turns 25 years of age

  • Note: In some cases (e.g., certain serious conditions, workplace injuries), longer retention may be required

Account and Profile Information:

  • Contact details, account settings, preferences: Until you request deletion, close your account, or your account becomes inactive for an extended period (typically 3 years of no activity)

  • Reason: To provide ongoing services and maintain your account access

Communications:

  • Email correspondence, support tickets, inquiries: Typically 2-7 years depending on the nature of the communication

  • Reason: To maintain records of our interactions and provide customer support

Marketing and Consent Records:

  • Marketing subscription information and consent records: Until you unsubscribe, plus a reasonable period to demonstrate compliance (typically 3 years after unsubscribe)

  • Reason: To comply with Spam Act 2003 (Cth) and demonstrate we obtained proper consent

Website and Usage Data:

  • Website analytics, cookies, logs: Varies by type (see Section 9A.7)

  • Aggregated/anonymized usage data: May be retained indefinitely as it does not identify you personally

Program Participation Records:

  • Enrollment records, program completion information: Typically 7 years

  • Reason: Business records, quality assurance, and potential legal requirements

Legal and Compliance Records:

  • Records related to complaints, disputes, or legal matters: Duration of the matter plus 7 years

  • Reason: Legal requirements and protection of legal rights

Backup Systems:

  • Information in backup systems: May be retained for up to 90 days before being permanently deleted

  • Reason: Technical requirements for data recovery and security

13.3 When We Delete or Anonymize Information

When the retention period expires and we no longer have a legal basis to retain your information:

  • We will securely delete or destroy your Personal Information and Sensitive Information

  • We may de-identify or anonymize your information so it can no longer identify you (de-identified information may be retained for analytical and research purposes)

  • Deletion methods include secure erasure of electronic files and secure destruction of physical records

13.4 Your Right to Request Deletion

You may request deletion of your information at any time by contacting us at [email protected].

Please note:

  • We will assess your request and delete information we are not legally required to retain

  • We cannot delete information we must retain to comply with legal obligations (e.g., tax records)

  • We cannot delete information we need to protect our legal rights or defend against legal claims

  • Information in backup systems may remain for a period until the backup cycle completes

  • We will inform you if we must retain certain information and provide reasons

13.5 Legal Exceptions to Deletion

Even if you request deletion, we may be required or permitted to retain your information where:

  • Required by law (e.g., taxation, health records, corporations law)

  • Necessary for compliance with legal obligations

  • Necessary for the establishment, exercise, or defense of legal claims

  • Necessary to protect the rights, property, or safety of our business, our clients, or others

  • You have provided consent for longer retention

  • Information has been anonymized or de-identified


14. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy, or if you wish to exercise your privacy rights, please contact us:

Dizzy Resolve Integrative Coaching

Email: [email protected]

Website: www.dizzyresolve.com

Mailing Address: [Insert physical address if you want to include it, or remove this line]

Privacy Officer: Dr. Vicky Stewart

We aim to respond to all inquiries within 5 business days.


15. Regulatory Information

15.1 Our Regulatory Obligations

Dizzy Resolve Integrative Coaching is regulated by:

  • Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs)

  • Information Privacy Act 2009 (Qld) (for health information in Queensland)

  • Spam Act 2003 (Cth) (for electronic marketing communications)

  • Australian Consumer Law (Schedule 2 of the Competition and Consumer Act 2010)

  • Professional obligations as a registered health practitioner

15.2 Relevant Regulators

Office of the Australian Information Commissioner (OAIC):

  • Regulates privacy under the Privacy Act 1988 (Cth)

  • Investigates privacy complaints and data breaches

  • Website: www.oaic.gov.au

  • Phone: 1300 363 992

Queensland Office of the Information Commissioner (OIC):

  • Regulates health privacy in Queensland under the Information Privacy Act 2009

  • Investigates health privacy complaints in Queensland

  • Website: www.oic.qld.gov.au

  • Phone: 07 3234 7373

Australian Communications and Media Authority (ACMA):

  • Regulates compliance with the Spam Act 2003 (Cth)

  • Investigates spam complaints

  • Website: www.acma.gov.au

  • Phone: 1300 850 115

15.3 Your Rights to Lodge Complaints

You have the right to lodge a complaint with these regulators if you believe we have breached privacy laws. You do not need to complain to us first before contacting a regulator, although we encourage you to give us the opportunity to resolve your concerns.


© 2025 Dizzy Resolve Integrative Coaching
Dizzy Resolve Pty Ltd | ABN 21 669 541 486


Last Updated: 15th November 2025


END OF PRIVACY POLICY

Copyright 2024 . Dizzy Resolve Integrative Coaching. All rights reserved.