Privacy Policy
1. Commitment to Privacy
Dizzy Resolve Integrative Coaching (Dizzy Resolve Pty Ltd ABN 21 669 541 486) ("The Company", "we", "us" or "our") is committed to safeguarding the privacy of our clients, staff, facilitators, and participants in the Company's programs and services, as well as those who visit our website or engage with the Company on our social media platforms.
The Company is bound by the Privacy Act 1988 (Cth) (Privacy Act), the Australian Privacy Principles (APPs), and applicable state and territory health records legislation including the Information Privacy Act 2009 (Qld). This Policy explains how we comply with these laws when handling your personal information.
This Privacy Policy (Policy) sets out how we collect, use, disclose, store, and protect your Personal Information and Sensitive Information. The Policy applies to:
Our website: www.dizzyresolve.com
Social media platforms operated by us (including Facebook, YouTube, TikTok, and Instagram)
All products and services provided by us in-person and online, including but not limited to:
Fear-to-Calm Method for Dizziness (mini-course)
THE SHIFT: Dizziness Transformation Program
Inner Balance membership
Private one-on-one coaching
Any other current or future programs and services
2. Definitions
In this Policy:
"Personal Information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not. This may include your name, address, email address, phone number, date of birth, payment information, and other identifying information. It does not include "Sensitive Information".
"Sensitive Information" is a sub-set of personal information and means information or an opinion about an individual's racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices, criminal record, health information, genetic information, or biometric information.
"Health Information" means information or an opinion about the health or a disability of an individual, including information about an individual's physical, mental or psychological health, disability status, health services provided or to be provided, and other health-related matters.
"Your Data" means your Personal Information and Sensitive Information together.
"APPs" means the Australian Privacy Principles contained in Schedule 1 of the Privacy Act 1988 (Cth).
3. Collection of Your Data
3.1 What Information We Collect
To provide our services to you, The Company may receive and store Personal Information and Sensitive Information (together, 'your Data') that you enter onto our website, provide to us directly, or give to us in any other form or by any other means, including through our intake forms, waiver and release forms, participant information sheets, and communications with us.
Your Data may include:
Contact details: Name, phone number, address, email address, location (city/state)
Account information: Username, password (encrypted), account preferences
Payment and billing information: Credit card details (processed securely by third-party payment processors), billing address, transaction history
Health information: Information about dizziness conditions, vestibular disorders, symptoms, duration of symptoms, medical history, current medications, injuries past or present, mental health information, pregnancy status, healthcare providers you see
Demographic information: Age, gender, occupation (if voluntarily provided)
Usage information: How you interact with our website, programs, and services
Technical information: IP address, device type, browser type and version, operating system, referring website
Communications: Emails, messages, feedback, survey responses, testimonials
Program participation information: Course progress, attendance at group sessions, participation in forums or community areas
Other information voluntarily provided by you
3.2 Purpose of Collection
Your Data is collected for the following purposes:
To ensure your safety and wellbeing, and that of other participants and facilitators
To provide you with our programs, products, and services
To assess your suitability for participation in our programs
To communicate with you about your participation
To send information, updates, and educational content
To process purchases, payments, and billing
To provide customer support and respond to inquiries
To improve our services and understand your needs
To comply with legal obligations
To protect our rights and property
For research, analytics, and quality improvement purposes
3.3 Legal Basis for Collection
We collect your Personal Information:
With your consent (APP 3)
Where collection is necessary to provide services you have requested
Where required or authorized by law
Where collection is reasonably necessary for our functions or activities
Sensitive Information (including health information) will only be collected with your consent, except in limited circumstances permitted by law such as where necessary to prevent or lessen a serious threat to life, health or safety (APP 3.4).
3.4 How We Collect Your Data
The Company collects your Data from you in a variety of ways, including:
When you interact with us electronically (email, online forms, website) or in person
When you access our website and social media platforms
When you purchase or register for our programs and services
When you complete intake forms, waivers, or participant information sheets
When you provide feedback, complete surveys, or provide testimonials
When you provide information about your health or personal circumstances
When you change your contact or email preferences
When you respond to promotions or marketing communications
When you participate in group sessions or community forums
When you communicate with us in any other way
Through cookies and analytics tools when you use our website (see Section 9A)
3.5 Collection from Third Parties
We may receive your Data from third parties, including:
Your medical practitioners, specialists, or healthcare providers (with your consent or as permitted by law)
Hospitals, clinics, or other health service providers
Family members or representatives (with appropriate consent or legal authority)
Payment processors and other service providers
Publicly available sources
If we receive your information from third parties, we will protect and use it as set out in this Policy and in accordance with the
APPs.
3.6 Anonymity and Pseudonymity
Where practicable, we will give you the option to interact with us anonymously or using a pseudonym (APP 2). For example:
You may browse our website without identifying yourself
You may make general inquiries without providing your full details
However, in most cases we will need to collect your personal information to provide our services. For example, we cannot:
Process a purchase or enroll you in a program without contact and payment details
Provide health-related educational services without understanding your circumstances
Communicate with you or provide customer support without contact information
If you choose to remain anonymous or use a pseudonym, we may not be able to provide certain services to you.
4. Use of Your Data
4.1 Primary Uses
Personal Information collected by us will only be used and disclosed for the purposes for which it was collected, or for a related secondary purpose that you would reasonably expect, or as otherwise permitted by the Privacy Act.
We use your Data to:
Provide, maintain, and improve our programs, products, and services
Process and manage your enrollment, account, and participation
Communicate with you about your participation, including sending confirmations, updates, and important information
Process payments, billing, and transactions
Provide customer support and respond to your inquiries
Send you information, updates, and educational content related to our services
Understand your needs and improve our services
Conduct research, analytics, and quality improvement activities
Ensure the safety and wellbeing of participants and staff
Comply with legal and regulatory obligations
Prevent fraud, unauthorized access, or illegal activity
Protect our rights, property, and safety, and that of our clients and others
Enforce our terms and conditions and other agreements
4.2 Marketing and Communications
We may use your Personal Information to send you direct marketing communications about our products, services, programs, and opportunities that we consider may be of interest to you, in accordance with APP 7 and the Spam Act 2003 (Cth).
You have the right to opt-out of receiving marketing communications at any time (see Section 10).
4.3 Secondary Purposes
We may use your Personal Information for secondary purposes where:
The secondary purpose is related to the primary purpose of collection and you would reasonably expect us to use the information for that purpose
You have consented to the use or disclosure
It is required or authorized by law
It is necessary to prevent or lessen a serious threat to life, health or safety
It is reasonably necessary for enforcement-related activities
It is otherwise permitted by the Privacy Act
Examples of secondary purposes include:
Seeking advice from legal, accounting, or professional advisers
Managing complaints or disputes
Conducting internal training and quality assurance
Complying with audits or regulatory requirements
5. Disclosure of Your Data
5.1 When We May Disclose Your Personal Information
The Company may disclose your Personal Information in the following circumstances:
To service providers and third parties:
Our employees, officers, contractors, and facilitators
Professional advisers (lawyers, accountants, auditors, consultants)
Insurers and insurance brokers
Third-party service providers (see Section 5A for details)
For legal and safety reasons:
To comply with legal obligations, court orders, subpoenas, warrants, or law enforcement requests
To protect our rights, property, intellectual property, or safety
To protect the rights, property, or safety of our clients or the public
To prevent fraud, unauthorized access, or illegal activity
In connection with legal proceedings or investigations
For business purposes:
In connection with a business transfer, merger, acquisition, or sale of assets (see Section 5.3)
To enforce our terms and conditions or other agreements
For health service provision:
To other healthcare providers (see Section 5.2)
With your consent:
To any other third parties where you have provided your consent
5.2 Disclosure of Health Information
We may provide health information (Sensitive Information) to:
Your general practitioner, medical specialists, or other healthcare providers
Other health service providers for the purposes of treatment, referral, or coordination of care
Medicare or health insurers for billing purposes
We will only disclose your health information:
With your express consent, OR
Where it is necessary for the provision of a health service to you, OR
Where it is necessary to prevent or lessen a serious threat to your life, health or safety, or that of another person, OR
Where required or authorized by law
5.3 Business Transfers
If there is a change of control in our business, or a sale, transfer, or merger of business assets, we reserve the right to transfer, to the extent permissible at law, our user databases together with any Personal Information, Sensitive Information, and non-personal information contained in those databases.
This information may be disclosed to a potential purchaser or new owner under an agreement to maintain confidentiality. We would seek to only disclose information in good faith and where required by the circumstances. The new owner would be required to continue to protect your information in accordance with this Privacy Policy or provide you with notice of any changes.
5.4 Aggregate or De-identified Information
We may use and share aggregate, statistical, or de-identified information (information that does not identify you personally) for:
Market analysis and research
Understanding user behavior and trends
Improving our services
Marketing or promotional purposes
Any other purposes
This de-identified information is not considered Personal Information under the Privacy Act.
5.5 Third-Party Marketing
We will NOT disclose, sell, share, or trade your Personal Information to third parties for their own marketing purposes unless we first receive your express consent.
5.6 Your Consent
By providing us with your Data, you consent to the collection, use, and disclosure of your information in accordance with the terms of this Privacy Policy. Where we disclose your Personal Information to third parties, we will take reasonable steps to ensure they handle your information in accordance with the APPs and this Policy.
5A. Third-Party Service Providers and Overseas Disclosure
5A.1 Third Parties We Work With
The Company uses third-party service providers to deliver and support our services. These providers may have access to your Personal Information only to perform specific tasks on our behalf and are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.
Third-party service providers may include:
Payment processors (e.g., Stripe, PayPal) to process transactions and payments
Email service providers (e.g., Mailchimp, ConvertKit, ActiveCampaign) to send communications and manage email lists
Course hosting and membership platforms to deliver digital content and manage access
Customer relationship management (CRM) systems to manage client interactions and communications
Analytics services (e.g., Google Analytics) to analyze website usage and improve our services
Cloud storage providers (e.g., Google Drive, Dropbox) to securely store data and files
Video conferencing platforms (e.g., Zoom) for live sessions in certain programs
Scheduling and booking systems for appointments and calendar management
Web hosting providers to host our website and online platforms
Marketing and advertising platforms (e.g., Facebook, Google Ads) for promotional activities
Survey and feedback tools to collect feedback and conduct surveys
5A.2 Overseas Disclosure and APP 8 Compliance
Some of our third-party service providers are located overseas or store data on servers located outside Australia. This means your Personal Information may be disclosed to, and stored in, countries including but not limited to:
United States
European Union countries
United Kingdom
Canada
Singapore
Important information about overseas disclosure:
By using our services, you consent to your personal information being disclosed to these overseas recipients for the purposes outlined in this Privacy Policy.
The countries where your information is sent may have different privacy laws than Australia, and may not provide the same level of protection for personal information as Australian privacy law.
Under APP 8, we remain accountable for any breaches of the APPs by overseas recipients, unless we obtained your consent to the overseas disclosure after informing you that we will not be accountable, OR the overseas recipient is subject to a law or binding scheme that provides substantially similar protections to the APPs.
Steps we take to protect your information:
We select reputable service providers with strong privacy and security practices
We enter into contracts with service providers that require them to protect your information
We take reasonable steps to ensure overseas recipients comply with the APPs or equivalent standards
We regularly review the practices of our service providers
You can contact us at [email protected] if you would like more information about:
Which countries your information may be sent to
The steps we take to protect your information when sent overseas
The privacy policies of our third-party service providers
6. Security of Your Data
6.1 Our Commitment to Security
The Company is committed to ensuring that your Data is secure.
We take reasonable steps to protect your Data from misuse, interference, loss, unauthorised access, modification, or disclosure, in accordance with APP 11.
6.2 Security Measures We Use
We use commercially reasonable physical, technical, and administrative measures to protect your Data, including:
Technical measures:
Encryption of data in transit using Secure Socket Layer (SSL) technology
Encryption of sensitive data at rest
Secure password protection (passwords are hashed and not stored in plain text)
Firewalls and intrusion detection systems
Regular security updates and patches
Secure backup systems
Administrative measures:
Access to personal information is restricted on a need-to-know basis
Staff training on privacy and data security
Confidentiality agreements with staff and contractors
Regular review and update of security practices
Incident response procedures
Physical measures:
Secure storage of physical records (if any)
Controlled access to offices and facilities
Secure disposal of physical records when no longer needed
6.3 Limitations and Your Responsibility
However, please be aware that:
No method of transmission over the internet or electronic storage is 100% secure
We cannot guarantee absolute security of data transmitted online
The transmission and exchange of information over the internet is carried out at your own risk
Although we take reasonable measures to safeguard against unauthorised disclosures, we cannot assure you that your Data will never be disclosed in a manner inconsistent with this Privacy Policy
You are solely responsible for:
Maintaining the confidentiality of your passwords and account information
Ensuring your device and internet connection are secure
Logging out of your account after use, especially on shared devices
Notifying us immediately if you become aware of any unauthorized access to your account
If you become aware of any unauthorized access to your account or any security breach, you must notify us immediately at [email protected].
6.4 Data Breach Notification
The Company complies with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth).
What is an eligible data breach?
An eligible data breach occurs when:
There is unauthorized access to or unauthorized disclosure of personal information we hold, OR the information is lost in circumstances where unauthorized access or disclosure is likely to occur; AND
This is likely to result in serious harm to affected individuals; AND
We have not been able to prevent the likely risk of serious harm with remedial action
What we will do if an eligible data breach occurs:
If we become aware of an eligible data breach, we will:
Assess the breach: Conduct a reasonable and prompt assessment to determine if it is likely to result in serious harm
Contain the breach: Take immediate steps to contain the breach and prevent further unauthorized access or disclosure
Notify affected individuals: If the breach is likely to result in serious harm, we will notify affected individuals as soon as practicable, providing:
A description of the breach
The kind of information involved
Recommendations about the steps you should take in response
Our contact details for further information
Notify the OAIC: We will also prepare a statement and provide it to the Office of the Australian Information Commissioner (OAIC)
How you will be notified:
We will notify you by email to your last known email address, or by other means if email is not appropriate (such as phone call, SMS, or public notice if we cannot contact you directly).
What you should do if you suspect a data breach:
If you become aware of or suspect a data breach involving your personal information, please contact us immediately at [email protected] so we can investigate and take appropriate action.
7. Access to Your Information
7.1 Your Right to Access
Under APP 12, you have the right to request access to the Personal Information and Sensitive Information we hold about you.
To request access:
Send a written request to [email protected]
Include sufficient details to allow us to identify you and locate your information
Specify what information you would like to access
7.2 Timeframe and Process
We will respond to your access request within 30 days. If we need more time, we will contact you to let you know and provide a timeframe for our response.
We will provide access in the manner you request if it is reasonable and practicable to do so. For example, we may provide:
Copies of documents by email (PDF)
Access to view information on our secure system
Physical copies by post
Information in an alternative format if you have specific accessibility needs
7.3 Fees for Access
Under APP 12.8, we may charge a fee for providing access to your information, but only to cover our reasonable costs of providing access in the manner requested.
We will not charge fees for:
Making the request
Locating or retrieving the information
Deciding whether to provide access
We may charge reasonable costs for:
Photocopying or printing
Postage (if you request physical copies by post)
Converting information to the format you requested
Preparing summaries or explanations if requested
We will notify you of any fees before providing access and give you the option to withdraw or modify your request.
7.4 When We May Refuse Access
Under APP 12.3, we may refuse to provide access to your information in certain circumstances, including where:
Providing access would pose a serious threat to the life, health, or safety of any individual, or to public health or public safety
Providing access would have an unreasonable impact on the privacy of others
The request is frivolous or vexatious
The information relates to existing or anticipated legal proceedings and would not be discoverable in those proceedings
Providing access would be unlawful (e.g., would reveal commercially sensitive information)
Denying access is required or authorized by law
Providing access would be likely to prejudice enforcement activities, negotiations, or certain operations by an enforcement body
The request is made by an individual's legal representative and providing access would not be in the individual's best interests
If we refuse to provide access, we will provide you with a written notice setting out:
The reasons for the refusal (except to the extent it would be unreasonable to do so)
The mechanisms available to you to make a complaint about the refusal
You may also seek access through the Office of the Australian Information Commissioner if you believe we have wrongly refused access.
7A. Correction of Your Information
7A.1 Your Right to Correction
Under APP 13, you have the right to request correction of Personal Information or Sensitive Information we hold about you if you believe it is inaccurate, out-of-date, incomplete, irrelevant, or misleading.
To request correction:
Contact us at [email protected]
Specify what information you believe is incorrect
Provide the correct information
If possible, provide supporting documentation
7A.2 Our Obligations
If you request correction, we will:
Respond within 30 days (or notify you if we need more time)
Take reasonable steps to correct the information if we are satisfied it is inaccurate, out-of-date, incomplete, irrelevant, or misleading
Not charge you a fee for making the request or for correcting the information
If we correct information that we have previously disclosed to another entity, we will take reasonable steps to notify that entity of the correction (unless it is impracticable or unlawful to do so).
7A.3 If We Refuse to Correct Information
If we refuse your request to correct information, we will:
Provide you with a written notice setting out the reasons for our refusal (except to the extent it would be unreasonable to do so)
Inform you of the mechanisms available to make a complaint about the refusal
If we refuse to correct information and you request it, we will take reasonable steps to associate with the information a statement that you view it as inaccurate, out-of-date, incomplete, irrelevant, or misleading.
7A.4 Proactive Correction
We will also take reasonable steps to ensure that the Personal Information we collect, use, and disclose is accurate, up-to-date, complete, and relevant, having regard to the purpose for which it is held (APP 10).
7B. Dealing with Us Anonymously or Using a Pseudonym
Under APP 2, where it is lawful and practicable, you have the option to deal with us anonymously or by using a pseudonym.
When you can interact anonymously or pseudonymously:
Browsing our website without creating an account
Making general inquiries by email or phone without providing full identifying details
Attending public information sessions or webinars (depending on platform settings)
Providing feedback or suggestions without identifying yourself
When we will need to collect your personal information:
In most cases involving the provision of our services, it will not be practicable for us to deal with you without knowing your identity. For example, we need to collect personal information to:
Process purchases and enrollments
Provide our programs and services
Communicate with you about your participation
Process payments and billing
Comply with legal obligations (e.g., tax, health records legislation)
Ensure safety and suitability for participation in health-related programs
If you choose not to provide requested personal information, we may not be able to provide you with our services or respond to your inquiry.
7C. Your Other Privacy Rights
7C.1 Right to Complain
You have the right to make a complaint about how we have handled your personal information (see Section 11).
7C.2 Right to Withdraw Consent
Where we have collected or use your information based on your consent, you may withdraw your consent at any time by contacting us at [email protected].
This includes:
Withdrawing consent for marketing communications (see Section 10)
Withdrawing consent for use of testimonials (though previously published materials may continue to appear)
Withdrawing consent for certain uses or disclosures of your information
However, please note:
Withdrawing consent may affect our ability to provide certain services to you
We may still need to retain some information to comply with legal obligations
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal
7C.3 Limits on "Right to Erasure"
Important: Unlike the European Union's General Data Protection Regulation (GDPR), Australian privacy law does not provide a general "right to erasure" or "right to be forgotten."
Under Australian law, you can request that we delete your information, but we are not always obliged to do so.
We may retain your information where:
We have a legal obligation to retain it (e.g., tax records for 7 years, health records as required by state legislation)
Retention is necessary for enforcement of our legal rights or agreements
Retention is necessary to protect against legal liability
The information is part of a backup system and will be deleted in accordance with our regular deletion cycles
Retention is otherwise permitted or required by law
If you request deletion of your information:
We will assess whether we are able to comply with your request
We will delete information we are not legally required to retain
We will inform you if we must retain certain information and the reasons why
We will take reasonable steps to de-identify information where appropriate
To request deletion, contact us at [email protected].
See Section 13A for information about our data retention practices.
8. Recording of Group Sessions
8.1 Programs with Group Sessions
For programs that include group sessions (such as THE SHIFT and Inner Balance), audio and/or video of group sessions may be recorded.
8.2 Purpose of Recordings
Recordings are made for the following purposes:
To allow participants who could not attend live to access the content
To allow participants to review the material for better learning and integration
To provide ongoing access to program content for participants
Potentially to be made available to future program participants as part of the course materials
8.3 Your Consent to Recording
By participating in a group session, you acknowledge and agree that:
The session may be recorded (audio and/or video)
The recording may contain your image, voice, name, and any Personal Information or Sensitive Information you choose to disclose during the session
The recording may be made available to:
Other participants in the same program
Future participants in the program
Program facilitators and staff for quality assurance and training purposes
Recordings may be stored on secure cloud-based platforms which may be located outside Australia
8.4 Your Rights and Options
You are not obligated to turn on your video camera during group sessions
You are not required to provide Personal Information or Sensitive Information during group sessions
You may use the chat function to ask questions instead of speaking on audio if you prefer
You can choose to change your display name to a pseudonym or first name only on most video platforms
You may request not to be recorded by contacting us before the session at [email protected] – we will work with you to find a suitable arrangement (e.g., attending without being on camera or audio)
8.5 Withdrawal of Consent
You may withdraw your consent for use of recordings containing your image or voice by contacting us at [email protected]. However:
Recordings that have already been provided to other participants may continue to be accessible to those participants
We may not be able to remove your image or voice from portions of recordings where you participated in group discussions
We will take reasonable steps to minimize your identifiable presence in future distribution of recordings where practicable
8.6 If You Have Concerns
If you have privacy concerns about recording of group sessions, please contact us at [email protected] before participating. We will work with you to address your concerns and find a suitable solution.
8.7 Retention of Recordings
Recordings are retained for the duration of the program plus a reasonable period to allow participants to access materials (typically up to 12 months after program completion). After this period, recordings may be archived or deleted in accordance with our data retention policies.
9. Information Collected Through Our Website
9.1 Information We Collect When You Visit
When you visit our website (www.dizzyresolve.com), we may automatically collect certain technical information, including:
Browser information: Browser type and version, browser settings
Device information: Type of device, operating system, screen resolution
Connection information: IP address, internet service provider
Usage information: Pages you visit, links you click, time spent on pages, referring website or source, date and time of visit
Location information: Approximate geographic location based on IP address
9.2 How We Use Website Information
This information is used in an aggregated and anonymized manner to:
Analyze how people use our website
Understand user behavior and traffic patterns
Improve our website functionality, content, and user experience
Diagnose technical problems
Monitor and prevent security threats
Generate statistical reports
This aggregated information does not identify you personally.
9.3 IP Addresses
Your IP address is a number that is automatically assigned to your device when you access the internet. We may log IP addresses for:
System administration
Diagnosing server problems
Security and fraud prevention
Understanding geographic distribution of users
We do not use IP addresses to personally identify you unless necessary for security or legal purposes.
9A. Cookies and Analytics
9A.1 What Are Cookies
Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners.
9A.2 How We Use Cookies
Our website uses cookies and similar technologies to:
Remember your preferences and settings
Understand how you use our website
Improve website functionality and user experience
Analyze website traffic and usage patterns
Provide relevant content
Enable certain features of our website
9A.3 Types of Cookies We Use
Essential Cookies (Strictly Necessary):
Required for the website to function properly
Enable core functionality such as security, network management, and accessibility
Cannot be disabled without severely affecting website functionality
Examples: Session cookies, security cookies
Analytics Cookies (Performance Cookies):
Collect information about how you use our website
Used to improve website performance and user experience
All information collected is aggregated and anonymized
Examples: Google Analytics cookies
Functional Cookies:
Remember your choices and preferences
Provide enhanced features and personalization
Examples: Language preferences, display settings
We do not use:
Third-party advertising cookies
Cookies to track you across different websites
Cookies to create detailed profiles of your browsing behavior for marketing purposes
9A.4 Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, to analyze how users interact with our website.
What Google Analytics collects:
Google Analytics uses cookies to collect information such as:
How often users visit our website
What pages they visit and in what sequence
How long they stay on each page
What website referred them to our site
General location (city/country level, not precise location)
Device type, browser type, and operating system
How the information is used:
The information is transmitted to and stored by Google on servers that may be located outside Australia (including in the United States)
Google uses this information to analyze website usage and compile reports for us
The information is aggregated and anonymized – it does not personally identify you
Google may use the data to improve its own services
Google's use of your information:
Google has its own privacy policy governing use of information collected through Google Analytics
You can review Google's privacy policy at: https://policies.google.com/privacy
We do not:
Allow Google to use Analytics data for Google's own advertising purposes
Combine Google Analytics data with personally identifiable information
Share identifiable personal information with Google through Google Analytics
9A.5 Your Cookie Choices and Controls
You can control and manage cookies in several ways:
Browser settings:
Most web browsers allow you to:
View and delete cookies
Block all cookies
Block third-party cookies
Clear cookies when you close your browser
Consult your browser's "Help" menu for instructions specific to your browser
Common browsers:
Chrome: Settings > Privacy and Security > Cookies
Firefox: Settings > Privacy & Security > Cookies
Safari: Preferences > Privacy > Cookies
Edge: Settings > Privacy > Cookies
Google Analytics opt-out:
You can opt-out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on
Download at: https://tools.google.com/dlpage/gaoptout
More information about cookies:
For more information about cookies and how to manage them, visit: www.aboutcookies.org or www.allaboutcookies.org
9A.6 Effect of Blocking Cookies
Please note that blocking or deleting cookies may affect the functionality of our website. Some features may not work properly if cookies are disabled.
Essential cookies are required for basic website operation, so completely disabling cookies may prevent you from using our website effectively.
9A.7 Cookie Retention
Session cookies: Deleted when you close your browser
Persistent cookies: Remain on your device for a set period or until you delete them
Google Analytics cookies: Typically expire after 2 years of inactivity
We regularly review and delete cookies that are no longer necessary.
9B. Third-Party Links and Websites
9B.1 Links to Third-Party Websites
Our website, emails, and social media may contain links to third-party websites, services, or resources that are not operated or controlled by us.
Examples may include:
Links to research articles or educational resources
Links to healthcare provider directories
Links to payment processors
Links to social media platforms
Links to partner organizations or affiliates
9B.2 Our Responsibility
We are not responsible for:
The privacy practices of third-party websites
The content, accuracy, or availability of third-party websites
Any goods, services, or content provided by third parties
How third parties collect, use, or disclose your information
9B.3 Third-Party Privacy Policies
When you click on a link to a third-party website, you will be leaving our website and will be subject to the privacy policy and terms of use of that third-party website.
We strongly encourage you to:
Review the privacy policy of any third-party website before providing personal information
Understand how third parties will use your information
Contact the third party directly if you have questions about their privacy practices
9B.4 Social Media Platforms
We maintain a presence on social media platforms such as Facebook, Instagram, YouTube, and TikTok. When you interact with us on these platforms:
You are subject to the privacy policies and terms of use of those platforms
Information you share may be visible to other users of the platform
The platform may collect information about your interactions with our content
We may receive aggregated analytics from the platform about our audience
Please review the privacy policies of social media platforms you use:
Facebook: https://www.facebook.com/privacy
Instagram: https://help.instagram.com/privacy
YouTube: https://policies.google.com/privacy
10. Marketing Communications
10.1 Direct Marketing
We may send you direct marketing communications about our products, services, programs, and opportunities that we consider may be of interest to you.
Marketing communications may include:
Information about new programs or services
Educational content related to dizziness and vestibular health
Special offers, promotions, or discounts
Invitations to events, webinars, or workshops
Updates about our business
10.2 Legal Compliance
Our marketing communications comply with:
The Spam Act 2003 (Cth)
Australian Privacy Principle 7 (Direct marketing)
Other applicable laws and regulations
We will only send marketing communications where:
We have your consent (express or inferred), OR
You would reasonably expect to receive them based on your relationship with us, AND
We provide a clear and easy way to opt-out
10.3 Your Right to Opt-Out
You may opt-out of receiving marketing communications at any time by:
Clicking the "unsubscribe" link at the bottom of any marketing email
Replying to a marketing email with "unsubscribe" in the subject line
Contacting us directly at [email protected] with your request
Updating your communication preferences if such functionality is available in your account settings
10.4 Processing Opt-Out Requests
We will process opt-out requests as quickly as possible
Please allow up to 7 business days for your request to be fully processed
You may receive marketing communications already in progress during this period
10.5 Transactional Communications
Please note: Even if you opt-out of marketing communications, we may still send you:
Transactional emails related to your purchases, enrollments, or account (e.g., order confirmations, payment receipts, access information)
Service-related communications about programs you are enrolled in (e.g., session reminders, program updates, important announcements)
Administrative communications related to your account (e.g., password reset emails, changes to terms and conditions)
Legal communications required by law
These communications are necessary to provide services you have requested and are not considered marketing communications.
10.6 No Sale to Third Parties
We do not sell, rent, or trade your personal information to other organizations for their own marketing purposes.
10.7 Complaints
If you receive communications from us that you believe have been sent to you:
Other than in accordance with this Privacy Policy, OR
In breach of the Spam Act 2003 (Cth) or other laws
Please contact us at [email protected] so we can investigate and address the issue.
You may also lodge a complaint with:
The Australian Communications and Media Authority (ACMA) for Spam Act breaches: www.acma.gov.au
The Office of the Australian Information Commissioner (OAIC) for privacy breaches: www.oaic.gov.au
11. Privacy Complaints
11.1 How to Make a Complaint
If you have any complaints about our privacy practices or how we have handled your personal information, we want to hear from you.
To make a complaint:
Send details of your complaint in writing to:
Email: [email protected]
Subject line: Privacy Complaint
Please include:
Your name and contact details
A clear description of your complaint
The outcome you are seeking
Any relevant supporting information or documentation
Details of any steps you have already taken to resolve the issue
11.2 How We Handle Complaints
We take complaints very seriously and will:
Acknowledge your complaint within 2 business days of receiving it
Investigate your complaint fairly, thoroughly, and objectively
Provide a substantive response within 30 days, including:
Our findings
The reasons for our decision
Any action we will take to address your complaint
Information about further steps you can take if you are not satisfied
If we need more time:
We will contact you to explain why and provide an expected timeframe
Complex complaints may take longer than 30 days to investigate
We will keep you informed of progress
11.3 If You Are Not Satisfied
If you are not satisfied with our response to your privacy complaint, you have the right to contact the Office of the Australian Information Commissioner (OAIC).
Office of the Australian Information Commissioner (OAIC):
Website: www.oaic.gov.au
Phone: 1300 363 992
Email: [email protected]
Mail: GPO Box 5218, Sydney NSW 2001
OAIC can:
Provide information about your privacy rights
Receive and investigate privacy complaints
Attempt to resolve complaints through conciliation
Make determinations about how complaints should be resolved
Take enforcement action for serious or repeated breaches
11.4 Other Complaint Options
Depending on the nature of your complaint, you may also be able to contact:
Queensland Office of the Information Commissioner (for health privacy matters in Queensland): www.oic.qld.gov.au
Health Complaints Commissioner (for health service complaints): Varies by state/territory
Australian Communications and Media Authority (ACMA) (for spam complaints): www.acma.gov.au
12. Children's Privacy
12.1 Age Requirements
Our services are intended for adults aged 18 years and over. We do not knowingly collect personal information from children under the age of 18.
12.2 Purchases for Minors
In limited circumstances, a parent or legal guardian may purchase our services for a minor (person under 18 years of age), subject to the following conditions:
Prior written approval from the Company must be obtained before purchase
The parent or guardian must complete the purchase themselves
The parent or guardian agrees to be bound by our Terms and Conditions and this Privacy Policy
The parent or guardian accepts full responsibility for the minor's use of the Services
The parent or guardian accepts all risks and liability on behalf of the minor
The parent or guardian must provide all required consents for collection of the minor's information
12.3 Information About Minors
If a parent or guardian provides information about a minor with our consent:
We will only collect the minimum information necessary to provide the service
We will take extra care to protect the minor's privacy
We will only use the information for the specific purposes consented to by the parent/guardian
The parent/guardian has the right to access and correct the minor's information
The parent/guardian may request deletion of the minor's information at any time (subject to legal retention requirements)
12.4 If You Become Aware of a Child's Information
If you become aware that a child under 18 has provided us with personal information without parental consent and approval, please contact us immediately at [email protected]. We will take steps to delete such information promptly.
12.5 Parental Rights
If you are a parent or guardian and you believe your child has provided us with personal information without your knowledge or consent, you have the right to:
Request access to your child's information
Request correction or deletion of your child's information
Withdraw consent for our use of your child's information
Lodge a complaint about how we have handled your child's information
Contact us at [email protected] to exercise these rights.
13. Changes to This Privacy Policy
13.1 Right to Modify
Our Privacy Policy is subject to change. The Company may modify this policy at any time, in our sole discretion, to:
Reflect changes in our practices or operations
Comply with changes in privacy laws or regulations
Respond to feedback from clients or regulators
Improve clarity or transparency
Add new privacy protections
13.2 How Changes Will Be Communicated
All modifications will be effective immediately upon posting of the updated Privacy Policy on our website at www.dizzyresolve.com/privacy.
For material changes that may affect your rights or how we handle your information, we will:
Update the "Effective Date" at the top of this Policy
Make reasonable efforts to notify you by:
Email to your last known email address (for active clients and subscribers)
Prominent notice on our website
Notification when you next log in to your account (if applicable)
13.3 Review and Acceptance
We encourage you to:
Review this Privacy Policy periodically
Check the "Effective Date" to see when the policy was last updated
Contact us if you have questions about any changes
Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.
If you do not agree with changes to this Privacy Policy, you should discontinue use of our services and contact us to discuss your concerns.
13.4 Previous Versions
If you would like to review a previous version of this Privacy Policy, please contact us at [email protected].
13A. Data Retention
13.1 How Long We Keep Your Information
We retain your Personal Information and Sensitive Information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.
13.2 Retention Periods
Generally, we retain different types of information for the following periods:
Financial and Tax Records:
Transaction records, invoices, and payment information: 7 years from the date of transaction
Reason: Required by Australian tax law (Income Tax Assessment Act 1936 and 1997, Taxation Administration Act 1953)
Health Information:
Health records and health-related information: Minimum 7 years from the date of last service for adults
Reason: Required by health records legislation in Queensland (Information Privacy Act 2009) and professional standards
Note: For minors, health records must be retained until the person turns 25 years of age
Note: In some cases (e.g., certain serious conditions, workplace injuries), longer retention may be required
Account and Profile Information:
Contact details, account settings, preferences: Until you request deletion, close your account, or your account becomes inactive for an extended period (typically 3 years of no activity)
Reason: To provide ongoing services and maintain your account access
Communications:
Email correspondence, support tickets, inquiries: Typically 2-7 years depending on the nature of the communication
Reason: To maintain records of our interactions and provide customer support
Marketing and Consent Records:
Marketing subscription information and consent records: Until you unsubscribe, plus a reasonable period to demonstrate compliance (typically 3 years after unsubscribe)
Reason: To comply with Spam Act 2003 (Cth) and demonstrate we obtained proper consent
Website and Usage Data:
Website analytics, cookies, logs: Varies by type (see Section 9A.7)
Aggregated/anonymized usage data: May be retained indefinitely as it does not identify you personally
Program Participation Records:
Enrollment records, program completion information: Typically 7 years
Reason: Business records, quality assurance, and potential legal requirements
Legal and Compliance Records:
Records related to complaints, disputes, or legal matters: Duration of the matter plus 7 years
Reason: Legal requirements and protection of legal rights
Backup Systems:
Information in backup systems: May be retained for up to 90 days before being permanently deleted
Reason: Technical requirements for data recovery and security
13.3 When We Delete or Anonymize Information
When the retention period expires and we no longer have a legal basis to retain your information:
We will securely delete or destroy your Personal Information and Sensitive Information
We may de-identify or anonymize your information so it can no longer identify you (de-identified information may be retained for analytical and research purposes)
Deletion methods include secure erasure of electronic files and secure destruction of physical records
13.4 Your Right to Request Deletion
You may request deletion of your information at any time by contacting us at [email protected].
Please note:
We will assess your request and delete information we are not legally required to retain
We cannot delete information we must retain to comply with legal obligations (e.g., tax records)
We cannot delete information we need to protect our legal rights or defend against legal claims
Information in backup systems may remain for a period until the backup cycle completes
We will inform you if we must retain certain information and provide reasons
13.5 Legal Exceptions to Deletion
Even if you request deletion, we may be required or permitted to retain your information where:
Required by law (e.g., taxation, health records, corporations law)
Necessary for compliance with legal obligations
Necessary for the establishment, exercise, or defense of legal claims
Necessary to protect the rights, property, or safety of our business, our clients, or others
You have provided consent for longer retention
Information has been anonymized or de-identified
14. Contact Us
If you have any questions, concerns, or requests about this Privacy Policy, or if you wish to exercise your privacy rights, please contact us:
Dizzy Resolve Integrative Coaching
Email: [email protected]
Website: www.dizzyresolve.com
Mailing Address: [Insert physical address if you want to include it, or remove this line]
Privacy Officer: Dr. Vicky Stewart
We aim to respond to all inquiries within 5 business days.
15. Regulatory Information
15.1 Our Regulatory Obligations
Dizzy Resolve Integrative Coaching is regulated by:
Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs)
Information Privacy Act 2009 (Qld) (for health information in Queensland)
Spam Act 2003 (Cth) (for electronic marketing communications)
Australian Consumer Law (Schedule 2 of the Competition and Consumer Act 2010)
Professional obligations as a registered health practitioner
15.2 Relevant Regulators
Office of the Australian Information Commissioner (OAIC):
Regulates privacy under the Privacy Act 1988 (Cth)
Investigates privacy complaints and data breaches
Website: www.oaic.gov.au
Phone: 1300 363 992
Queensland Office of the Information Commissioner (OIC):
Regulates health privacy in Queensland under the Information Privacy Act 2009
Investigates health privacy complaints in Queensland
Website: www.oic.qld.gov.au
Phone: 07 3234 7373
Australian Communications and Media Authority (ACMA):
Regulates compliance with the Spam Act 2003 (Cth)
Investigates spam complaints
Website: www.acma.gov.au
Phone: 1300 850 115
15.3 Your Rights to Lodge Complaints
You have the right to lodge a complaint with these regulators if you believe we have breached privacy laws. You do not need to complain to us first before contacting a regulator, although we encourage you to give us the opportunity to resolve your concerns.
© 2025 Dizzy Resolve Integrative Coaching
Dizzy Resolve Pty Ltd | ABN 21 669 541 486
Last Updated: 15th November 2025
END OF PRIVACY POLICY
