1. Information We Collect

We gather different types of information depending on how you interact with us. Here's what we typically collect:

Personal Information You Provide

When you contact us, sign up for our learning program, or request information, you might share:

• Your name and email address
• Phone number (if you choose to provide it)
• Mailing address for program materials
• Payment details when enrolling in paid programs
• Any financial goals or circumstances you share with us during consultations

Information We Collect Automatically

Like most websites, ours automatically logs certain information when you visit:

• Your IP address and general location (city/region level)
• Browser type and device information
• Pages you visit and how long you spend on them
• The website that referred you to us
• Date and time of your visit

Information From Third Parties

Sometimes we receive information about you from other sources. For instance, if you find us through a partner organization or educational institution, they might share basic contact details with your permission. We only accept this information when the third party has confirmed they have your consent to share it.

2. How We Use Your Information

We use the information we collect for specific purposes. Here's the breakdown:

Providing Our Services

• Processing your enrollment in learning programs
• Sending you course materials and educational resources
• Responding to your questions and support requests
• Scheduling consultations or program sessions
• Processing payments and maintaining financial records

Improving Our Offerings

• Understanding which resources are most helpful to visitors
• Identifying gaps in our educational content
• Testing new approaches to teaching savings strategies
• Measuring the effectiveness of our programs

Communication

We'll send you information about:

• Program updates and schedule changes
• New educational resources that match your interests
• Important policy or service changes
• Occasional updates about savings strategies (only if you've opted in)

Legal Compliance

Sometimes we're required to use or share information to comply with Australian laws, respond to legal processes, or protect our rights and the safety of our clients. This doesn't happen often, but we want you to know it's a possibility.

3. Data Retention

We don't keep your information forever. Here's our general approach to how long we hold onto different types of data:

After these periods, we securely delete or anonymize your information. If you close your account or withdraw from a program, we'll delete non-essential data within 30 days while keeping what's legally required.

4. Sharing Your Information

We're pretty protective of your data. We don't sell it to anyone, and we only share it in limited circumstances:

Service Providers

We work with trusted third parties who help us run our business. These might include:

• Payment processors for handling transactions
• Email service providers for sending course materials
• Cloud storage providers for securing your data
• Website hosting and analytics services

All these providers are contractually required to protect your information and can only use it for the specific services they provide to us.

Legal Requirements

We might need to disclose information if required by Australian law, court order, or government request. We'll notify you if this happens unless we're legally prevented from doing so.

Business Transfers

If Cruelrix is acquired or merged with another organization, your information might be transferred to the new owners. We'd notify you before this happens and inform you of any choices you have.

With Your Consent

Sometimes we might want to share information in ways not covered above. If that happens, we'll ask for your explicit permission first.

5. Your Rights Under Australian Law

The Australian Privacy Principles give you significant rights over your personal information. Here's what you can do:

Access Your Information

You can request a copy of the personal information we hold about you. We'll provide this within 30 days, usually at no charge. If the request is complex or voluminous, we might need extra time or charge a reasonable fee to cover administrative costs.

Correct Inaccurate Data

If information we hold about you is wrong or outdated, you can ask us to correct it. We'll make the changes promptly and notify any third parties we've shared that information with (if appropriate).

Delete Your Information

You can request deletion of your personal information in many cases. There are some exceptions where we need to keep certain records for legal compliance, but we'll delete everything else and explain what we're required to retain.

Object to Processing

If you believe we're using your information inappropriately, you can object to that use. We'll review your objection and either stop that use or explain why we believe it's necessary and lawful.

Data Portability

You can request your information in a structured, commonly used format so you can transfer it elsewhere. This applies to information you've provided to us directly.

Lodge a Complaint

If you're unhappy with how we've handled your information, you can complain to us first. If you're not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

6. Security Measures

Protecting your information is important to us. We implement multiple security measures to safeguard your data:

Technical Safeguards

• SSL encryption for all data transmitted through our website
• Encrypted storage for sensitive personal and financial information
• Regular security audits and vulnerability assessments
• Firewall protection and intrusion detection systems
• Secure backup systems with encrypted data replication

Organizational Safeguards

• Limited access to personal information on a need-to-know basis
• Confidentiality agreements with all staff and contractors
• Regular privacy and security training for team members
• Clear data handling procedures and protocols
• Incident response plan for potential data breaches

Breach Notification

If we experience a data breach that's likely to result in serious harm, we'll notify you and the OAIC as required by Australian law. We'll explain what happened, what information was affected, and what steps we're taking to address the situation.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to function properly and improve your experience. Here's what you should know:

Essential Cookies

These are necessary for the website to work. They enable basic functions like page navigation, access to secure areas, and maintaining your session. The website won't function properly without them.

Analytics Cookies

We use these to understand how visitors interact with our website. They help us identify which pages are popular, where people spend time, and where they encounter problems. The information is aggregated and anonymized.

Functional Cookies

These remember your preferences and choices to provide a more personalized experience. For example, they might remember your location preference or accessibility settings.

Managing Cookies

You can control cookies through your browser settings. Most browsers let you refuse cookies or delete existing ones. Keep in mind that blocking certain cookies might affect website functionality.

8. Children's Privacy

Our services are designed for adults. We don't knowingly collect information from anyone under 18 without parental consent. If we discover we've inadvertently collected information from a minor without appropriate consent, we'll delete it promptly.

If you're a parent or guardian and believe your child has provided us with personal information, please contact us so we can remove it.

9. International Data Transfers

Your information is primarily stored on servers located in Australia. However, some of our service providers operate internationally, which might mean your data is processed or stored overseas.

When we transfer data internationally, we ensure:

• The receiving country has adequate privacy protections, or
• We have contracts in place requiring equivalent protection standards, or
• We have your explicit consent for the transfer

Most of our international providers are in countries with strong privacy laws comparable to Australia's, such as the European Union, United Kingdom, or New Zealand.

10. Changes to This Policy

We might update this privacy policy occasionally to reflect changes in our practices, legal requirements, or services. When we make significant changes, we'll notify you through:

• Email notification to registered users
• Prominent notice on our website
• Updated "Last Modified" date at the top of this policy

For minor updates (like clarifying existing practices or fixing typos), we'll simply update the policy and date without additional notification.

Your continued use of our services after changes take effect means you accept the updated policy. If you disagree with changes, you can stop using our services or contact us to discuss your concerns.

11. Third-Party Websites

Our website might contain links to external sites that aren't operated by us. We're not responsible for the privacy practices of these third-party sites. When you leave our website, we encourage you to read the privacy policy of every site you visit.

This includes links to payment processors, social media platforms, educational resources, and partner organizations. Each of these sites has its own privacy practices that govern how they handle your information.