Privacy Policy

1 INTRODUCTION

(a) This Privacy Policy explains how Zoe Herriman trading as The Psych Skills Lab (ABN 49 550 751 003), collects, holds, uses and discloses personal information.

(b) In this Privacy Policy, “we”, “us” and “our” refer to Zoe Herriman trading as The Psych Skills Lab, and “you” and “your” refer to any person whose personal information we handle.

(i) visit or interact with our Website;

(ii) access the free introductory module;

(iii) purchase, access or use the Program;

(iv) create or use an Account;

(v) subscribe to our communications;

(vi) contact us or submit an enquiry; or

(vii) otherwise interact with us.

(d) We take reasonable steps to handle personal information responsibly and to protect it from misuse, interference, loss and unauthorised access, modification or disclosure.

(e) We handle personal information in accordance with applicable privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us.

(f) Providing some personal information is optional. However, if you do not provide information that is reasonably necessary, we may be unable to create or administer your Account, process your purchase, provide access to the Program, respond to your enquiry or provide another requested service.

(g) By providing personal information to us or using the Website or Program, you acknowledge that we will handle that information as described in this Privacy Policy. Where applicable law requires your consent for a particular activity, we will seek that consent separately.

(h) The Program is not intended for people under 18 years of age, and we do not knowingly collect personal information from children.

(i) We may update this Privacy Policy from time to time by publishing an updated version on the Website. Changes will apply from the date stated in the updated Privacy Policy and will not retrospectively reduce your rights under applicable law.

(j) You may contact us using the details in the Contact Us section if you have any questions or concerns about this Privacy Policy or how we handle personal information.

2 TYPES OF PERSONAL INFORMATION WE COLLECT

(a) The types of personal information we may collect depend on how you interact with us and may include:

(i) your name, email address, billing address, country and other contact details;

(ii) your Account details, including your username, account identifier and information relating to the creation and administration of your Account;

(iii) information about your purchase of, access to and use of the Program, including transaction records, modules accessed and progress information;

(iv) payment and billing information provided in connection with a purchase, noting that complete payment card details are collected and processed by Stripe or another payment provider and are not stored by us;

(v) information you provide when you contact us, make an enquiry, request support, provide feedback, complete a survey or participate in a promotion;

(vi) your communication preferences, including whether you have subscribed to or unsubscribed from marketing communications;

(vii) technical and usage information, including your IP address, device type, browser type, operating system, approximate location, access times, pages viewed, links selected and interactions with the Website or Program;

(viii) cookie identifiers, analytics information and similar information collected through cookies and related technologies;

(ix) information received from Teachable, Stripe and other service providers where necessary to administer your Account, process your purchase, deliver the Program or operate our business; and

(x) any other personal information you voluntarily provide to us or that we are otherwise authorised or required by law to collect.

(b) The Program is intended to provide general educational content and is not designed to collect clinical records, medical information, psychological assessments or other sensitive information about your mental health.

(c) You should not provide confidential therapeutic information, clinical disclosures, medical records or other sensitive personal information through the Website, Program, Account, worksheets, contact forms, email or support channels unless we expressly request that information and explain how it will be handled.

(d) If you voluntarily provide sensitive information that we have not requested, we will handle it in accordance with applicable law and may delete it where it is not reasonably necessary for our functions or activities.

(e) We do not knowingly solicit personal information from people under 18 years of age or permit them to create an Account or access the Program.

3 PERSONAL INFORMATION OF MINORS

(a) The Program is not intended for people under 18 years of age, and we do not knowingly solicit personal information from, or permit the creation of an Account by, anyone under 18. The Website may automatically collect limited technical information from visitors where necessary for its operation and security before we know the visitor’s age.

(b) A person under 18 must not create an Account, access the free introductory module, purchase or access the paid modules, or otherwise provide personal information to us through the Program.

(d) If we become aware that we have collected personal information from a person under 18, we will take reasonable steps to delete or de-identify that information, unless we are required or authorised by law to retain it.

(e) A parent, guardian or other person who believes that someone under 18 has provided personal information to us may contact us using the details in the Contact Us section. We may request information reasonably necessary to verify the request and identify the relevant information.

4 HOW WE COLLECT PERSONAL INFORMATION

(a) We may collect personal information directly from you when you:

(i) create or use an Account;

(ii) access the free introductory module;

(iii) purchase, access or use the Program;

(iv) complete an online form or subscribe to our communications;

(v) contact us by email, through the Website, through social media or by another communication channel;

(vi) request assistance, make an enquiry, provide feedback or participate in a survey or promotion; or

(vii) otherwise provide personal information to us.

(b) We may collect personal information automatically when you interact with the Website or Program, including through cookies, server logs, analytics tools and similar technologies.

(c) The information collected automatically may include your IP address, device and browser information, approximate location, pages or modules accessed, access times, links selected and other information about how you interact with the Website or Program.

(d) We may also collect personal information from third parties where authorised by law, including:

(i) Teachable or another learning platform used to provide the Program;

(ii) Stripe or another payment provider used to process purchases;

(iii) website, cloud hosting, email and communications providers;

(iv) analytics and technology service providers;

(v) social media platforms where you interact with our pages or content; and

(vi) another person acting on your behalf.

(e) Where practicable, we will collect personal information directly from you. If we collect personal information from a third party and you may not reasonably expect that collection, we will take reasonable steps to notify you as required by applicable law.

(f) Cookies and similar technologies are small files or identifiers placed on or accessed through your device. They may be used to operate the Website, remember your preferences, maintain security, understand Website and Program usage and improve our services.

(g) Our Cookies Policy, available at thepsychskillslab.teachable.com/p/cookies_policy, provides further information about the cookies and similar technologies we use and how you can manage them.

(h) You can usually manage or disable cookies through your browser or device settings. Disabling some cookies may affect the operation of the Website or your ability to access certain features.

(i) We only seek to collect personal information that is reasonably necessary for our functions and activities or otherwise authorised or required by law.

5 USE AND DISCLOSURE OF PERSONAL INFORMATION

(a) We may collect, hold, use and disclose personal information where reasonably necessary for our functions and activities, including to:

(i) provide, operate and administer the Website, your Account and the Program;

(ii) process purchases, confirm payments and maintain transaction, tax and accounting records;

(iii) provide access to Program content and monitor the operation and use of the Website and Program;

(iv) communicate with you about your Account, purchases, access, enquiries and requests;

(v) send service-related messages, including confirmations, notices, updates, security alerts and changes affecting the Program;

(vi) provide customer support and investigate technical, security or access issues;

(vii) manage our relationship with you and enforce this Privacy Policy, any terms applicable to the Website or Program, and our other legal rights;

(viii) improve, maintain, develop and assess the Website, Program, content and customer experience;

(ix) conduct analytics, research, quality assurance and internal business administration using personal information only to the extent reasonably necessary for those purposes and, where practicable, using aggregated or de-identified information;

(x) prevent, detect and investigate fraud, misuse, security incidents and unlawful activity;

(xi) comply with legal, regulatory, taxation, reporting and record-keeping obligations;

(xii) respond to lawful requests from courts, regulators, law enforcement agencies and other government authorities;

(xiii) obtain professional advice and establish, exercise or defend legal claims; and

(xiv) carry out another purpose disclosed to you at the time of collection or otherwise permitted or required by law.

(b) We may use your personal information to send you marketing and promotional communications where permitted by law, including information about the Program, related products, educational content and offers that may be of interest to you.

(c) You may opt out of marketing emails at any time by using the unsubscribe link in the communication or contacting us using the details in the Contact Us section.

(d) Opting out of marketing communications will not prevent us from sending you service-related communications that are reasonably necessary to administer your Account, purchase or access to the Program.

(e) We may disclose personal information to third parties that assist us to operate the Website, deliver the Program and conduct our business, including:

(i) Teachable or another learning platform used to host or deliver the Program;

(ii) Stripe or another payment provider used to process purchases and refunds;

(iii) website, cloud hosting, storage, cybersecurity and information technology providers;

(iv) email, communications and customer support providers;

(v) analytics and cookie service providers, and advertising service providers where you have consented or the disclosure is otherwise permitted by law;

(vi) accounting, legal, insurance and other professional advisers;

(vii) contractors and service providers that perform functions on our behalf;

(viii) government authorities, regulators, courts and law enforcement agencies where required or authorised by law; and

(ix) a purchaser, successor or adviser in connection with a proposed or completed sale, transfer, restructuring or financing of all or part of our business.

(f) We do not sell or rent personal information, and we do not disclose personal information for third-party direct marketing except with your consent or as otherwise permitted by law.

(g) Some service providers may collect personal information directly from you and handle it under their own privacy policies and terms; however, this does not exclude any responsibility we have under applicable law for our selection or use of those providers. We encourage you to review those documents before using the relevant service.

(h) Some recipients may be located outside Australia or may store or process personal information in other countries. Further information about overseas disclosures is set out in the Overseas Disclosure of Personal Information section.

(i) We will not use or disclose personal information for a purpose that is materially unrelated to the purpose for which it was collected unless:

(i) you have consented;

(ii) you would reasonably expect the use or disclosure and it is permitted by law;

(iii) the use or disclosure is required or authorised by law; or

(iv) another lawful basis applies.

6 OVERSEAS DISCLOSURE OF PERSONAL INFORMATION

(a) Some of the third-party service providers we use may be located outside Australia or may store, process or provide access to personal information from locations outside Australia.

(b) The overseas recipients or processing locations are likely to include:

(i) the United States of America;

(ii) the United Kingdom;

(iii) countries within the European Economic Area;

(iv) Brazil; and

(v) other countries in which our service providers or their subcontractors are likely to handle personal information, as identified in this Privacy Policy or otherwise notified to you where required by applicable law.

(c) The countries in which personal information is handled may change if we change service providers or if a provider changes its hosting or processing arrangements.

(d) Where the Australian Privacy Principles apply to us, we will take reasonable steps before disclosing personal information to an overseas recipient to ensure that the recipient handles the information in a manner consistent with applicable Australian privacy requirements, unless an exception under applicable law applies.

(e) Overseas recipients may be subject to privacy and data-protection laws that differ from Australian law. In some circumstances, foreign laws may permit courts, regulators, law-enforcement bodies or government authorities to access personal information.

(f) You may contact us using the details in the Contact Us section for further information about the countries in which your personal information is likely to be disclosed or processed.

7 DATA SUBJECT RIGHTS (EU/UK GDPR and similar laws)

(a) If you are located in the European Union, United Kingdom or another jurisdiction that provides similar rights, you may have additional rights in relation to your personal information, including:

(i) the right to request access to your personal information;

(ii) the right to request correction of inaccurate, incomplete or outdated information;

(iii) the right to request deletion of your personal information in certain circumstances;

(iv) the right to request restriction of processing;

(v) the right to object to certain types of processing;

(vi) the right to request transfer of your personal information to another service provider (data portability); and

(vii) the right to withdraw consent where we rely on your consent to process personal information.

(b) To exercise these rights, please contact us using the details in the Contact Us section. We may request information reasonably necessary to verify your identity and respond to your request. These rights are subject to applicable limitations and exceptions under relevant law.

8 SECURITY

(a) We take reasonable steps in the circumstances to protect the personal information we hold from misuse, interference and loss, and from unauthorised access, modification or disclosure.

(b) The measures we use may include:

(i) access controls and authentication measures;

(ii) password-protected systems and accounts;

(iii) restricting access to personal information to people who reasonably require it;

(iv) using reputable website, cloud, payment, learning platform and communications providers;

(v) maintaining appropriate administrative and technical safeguards;

(vi) monitoring and responding to suspected security incidents; and

(vii) securely destroying or de-identifying personal information when it is no longer required, subject to our legal and record-keeping obligations.

(c) We use third-party service providers, including Teachable, Stripe and providers of website hosting, cloud storage, email, analytics and information technology services. Personal information handled through those services may be protected by security measures implemented by the relevant provider as well as measures within our control.

(d) No method of transmitting or storing information electronically is completely secure. Although we take reasonable precautions, we cannot guarantee the absolute security of personal information or that the Website, Program, Account or third-party systems will be free from unauthorised access, cyberattacks, malware, service interruptions or other security incidents.

(e) You are responsible for keeping your Account login details secure, using secure devices and networks, and notifying us promptly if you know or suspect that your Account or personal information has been accessed without authorisation.

(f) If we become aware of a data breach involving personal information, we will assess and respond to the incident in accordance with applicable law, including any applicable notification obligations.

9 RETENTION OF PERSONAL INFORMATION

(a) We retain personal information only for as long as it is reasonably necessary for the purposes for which it was collected, including to:

(i) provide and administer the Website, Account and Program;

(ii) maintain transaction, taxation, accounting and business records;

(iii) respond to enquiries, complaints and disputes;

(iv) enforce or defend our legal rights; and

(v) comply with applicable legal, regulatory and record-keeping obligations.

(b) The period for which we retain personal information depends on the nature of the information, the purpose for which it is held, the terms applying to the relevant service provider and any applicable legal requirements.

(c) When personal information is no longer reasonably required and we are not required or authorised by law to retain it, we will take reasonable steps to destroy it or de-identify it.

(d) Information held by a third-party service provider may also be retained and deleted in accordance with that provider’s applicable retention practices and legal obligations, subject to any contractual controls and deletion rights reasonably available to us.

10 LINKS TO THIRD-PARTY WEBSITES

(a) Our Website, Program and communications may contain links to third-party websites, applications or services.

(b) Those links are provided for convenience or informational purposes only. We do not control third-party websites or services and are not responsible for their privacy practices, security, content, availability or handling of personal information.

(c) A link to a third-party website or service does not mean that we endorse, approve or are affiliated with that third party.

(d) Third parties may collect personal information directly from you and handle it under their own privacy policies and terms. We encourage you to review those documents before providing personal information or using the relevant website or service.

(e) This Privacy Policy does not apply to personal information collected independently by a third party.

11 ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION

(a) You may request access to personal information we hold about you or ask us to correct information that you believe is inaccurate, out of date, incomplete, irrelevant or misleading.

(b) To make a request, please contact us using the details in the Contact Us section and provide:

(i) your name and contact details;

(ii) enough information to identify the personal information concerned; and

(iii) details of the access or correction you are requesting.

(c) We may ask you to verify your identity before responding to a request. We may also ask for further information where reasonably necessary to locate the relevant records or understand the requested correction.

(d) We will respond to access and correction requests within a reasonable period and in the manner required by applicable law.

(e) We may refuse access in circumstances permitted by law, including where providing access would:

(i) unreasonably affect another person’s privacy;

(ii) reveal commercially sensitive evaluative information;

(iii) prejudice an investigation or legal proceeding;

(iv) be unlawful; or

(v) give access to information that is subject to legal professional privilege.

(f) If we refuse an access request, or refuse to make a requested correction, we will provide written reasons where required by law and explain how you may make a complaint.

(g) If we correct personal information that we previously disclosed to another organisation, we will, at your request, take reasonable steps to notify that organisation of the correction where required by applicable law, unless doing so would be unlawful or impracticable.

(h) We generally do not charge a fee for making an access or correction request. We may charge a reasonable amount for providing access where permitted by law, but we will notify you before incurring that cost.

12 COMPLAINTS

(a) If you believe that we have mishandled your personal information or otherwise interfered with your privacy, you may make a complaint by contacting us using the details in the Contact Us section.

(b) Your complaint should include:

(i) your name and contact details;

(ii) a description of the matter, including what happened and when;

(iii) details of any relevant Account, transaction or previous communication;

(iv) the effect the matter has had on you; and

(v) the outcome you are seeking.

(c) We may ask you to verify your identity or provide further information where reasonably necessary to investigate the complaint.

(d) We will acknowledge and investigate your complaint and respond within a reasonable period. We will generally aim to provide a substantive response within 30 days, but we may require additional time where the matter is complex or further information is required.

(e) We will explain the outcome of our investigation and any steps we propose to take to resolve the complaint.

(f) If you are not satisfied with our response, or we do not respond within a reasonable period, you may be entitled to complain to the Office of the Australian Information Commissioner or another applicable privacy regulator or external dispute resolution body.

(g) Nothing in this section limits any right you have to contact a regulator or pursue another remedy available under applicable law.

13 CONTACT US

For further information about this Privacy Policy or our privacy practices, to request access to or correction of your personal information, or to make a privacy complaint, please contact us using the following details:

Name: Zoe Herriman, trading as The Psych Skills Lab (ABN 49 550 751 003)

Email:

contact@thepsychskillslab.com

We may request information reasonably necessary to verify your identity and respond to your request.

This Privacy Policy was last updated on 11.08.2026