Privacy Policy

 

Zumbador Holdings | ABN 62 611 140 535

Website: www.anne-goodall.com

Privacy contact: info@anne-goodall.com

 

  1. ABOUT THIS POLICY

This policy explains how Zumbador Holdings, trading through Anne Goodall and associated programmes including The Core Four, collects, uses, stores and discloses personal information when you visit our website, enquire about services, subscribe to updates, book appointments or purchase and use online programmes. It applies to online programme participants as well as website visitors and individual clients. Individual therapy services may also be subject to separate consent, confidentiality and client-service terms.

 

  1. INFORMATION WE MAY COLLECT

Depending on how you interact with us, information may include your name, email address, phone number, billing and transaction details, appointment or enquiry details, course enrolment and access records, correspondence, newsletter preferences, website usage information and technical information such as IP address, device and browser details. If you voluntarily provide information about anxiety, health, treatment or personal circumstances through enquiries or individual services, that may be sensitive health information. We seek to limit collection to information reasonably needed for the relevant service.

 

  1. HOW WE COLLECT INFORMATION

We collect information you provide through contact and subscription forms, purchases, course registrations, appointment bookings, correspondence and individual consultations. We may also collect information automatically through website cookies and similar technologies, and receive limited information from service providers who help us process purchases, provide course access, deliver emails or administer bookings. We do not need detailed medical histories for ordinary purchases of The Core Four.

 

  1. THE CORE FOUR ONLINE PROGRAMME

When you purchase The Core Four, we use relevant information to process and confirm your order, create or manage your course account, provide access to lessons and guided audios, send essential service messages, respond to enquiries, manage refunds, prevent misuse and maintain business records. The Core Four is a self-directed educational programme. Purchasing it does not establish an individual therapist–client relationship. Programme eligibility and safety information is addressed separately in the Medical Disclaimer and Terms & Conditions.

 

  1. PAYMENTS

Online payments may be handled by third-party payment processors, including Stripe where enabled. The payment provider processes card and other payment details under its own privacy terms. We may receive transaction confirmations, billing information and limited payment-related details needed to administer your purchase, refunds and records. We do not represent that we store full payment-card numbers.

 

  1. ONLINE PLATFORMS AND SERVICE PROVIDERS

We use WordPress and WooCommerce for website and ecommerce functions, Systeme.io for online course, funnel and email functions, and Stripe for applicable payment processing. Our WordPress setup also includes Google Tag Manager, Google Analytics for WooCommerce, Meta Pixel, Cookie Compliance, Post SMTP and code-insertion plugins capable of supporting analytics or marketing integrations. These services may process information as necessary for their functions, subject to actual configuration and their applicable terms. Other providers may support website hosting, bookings, video hosting or administration. Some processing may occur outside Australia.

 

  1. EMAIL COMMUNICATIONS AND MARKETING

We send service-related communications necessary to administer enquiries, appointments, purchases and programme access. If you subscribe or otherwise provide appropriate consent, we may also send educational updates, newsletters and information about programmes or services. Marketing emails will include a way to unsubscribe, and we will respect opt-out requests in accordance with applicable law. Unsubscribing from marketing does not necessarily prevent essential account or purchase messages.

 

  1. COOKIES, ANALYTICS AND EMBEDDED CONTENT

Our website uses or may enable Google Analytics, Google Tag Manager, Meta Pixel, WooCommerce analytics and cookies or similar technologies for website performance, visitor measurement, advertising effectiveness, account sessions, security and preferences. Tracking technologies may collect technical and usage information, including page visits, browser or device information and interactions with website content. Our WordPress site includes a cookie-consent tool. The exact tags operating on a given page and whether they are subject to consent choices depend on configuration. Embedded videos, forms and third-party content may also collect information under their own privacy policies.

 

  1. WEBSITE COMMENTS AND MEDIA

If comments are enabled, we may collect the details entered in the comment form, IP address and browser information for moderation and spam prevention. WordPress or associated services may use cookies to remember comment details or login preferences. If public image uploads are enabled, avoid including embedded location data. These functions may not be available on every page.

 

  1. INDIVIDUAL SERVICES AND SENSITIVE INFORMATION

Where you engage us for individual services, we may collect information relevant to your enquiries, appointments and sessions, including sensitive health information when appropriate and with any consent required by law. We use this information to provide and administer services and meet professional or legal obligations. Confidentiality, supervision and circumstances in which disclosure may be required are addressed in the separate client agreement and applicable law. Information from individual sessions is not automatically treated as part of a The Core Four course purchase.

 

  1. DISCLOSURE OF INFORMATION

We may disclose information to contracted technology and administration providers where reasonably needed to operate our business, and to professional advisers, regulators or authorities when authorised or required by law. We do not sell personal information. We do not disclose identifiable individual therapy information for marketing. Where a third party has its own privacy policy, that policy may also apply to its processing.

 

  1. OVERSEAS PROCESSING

Some service providers may store or process information outside Australia. The countries involved and applicable safeguards depend on the services and settings in use. We will take reasonable steps required by applicable law in relation to overseas disclosures. Specific countries should be added once our provider arrangements have been verified.

 

  1. STORAGE, SECURITY AND RETENTION

We take reasonable steps to protect personal information from misuse, loss and unauthorised access, modification or disclosure. Access is limited where practical to people who need information for legitimate business purposes. We retain information for as long as reasonably necessary for service delivery, legal, accounting, professional or dispute-resolution requirements, then securely delete or de-identify it where appropriate. Exact retention periods vary by record type and applicable obligations.

 

  1. ACCESS, CORRECTION AND PRIVACY ENQUIRIES

You can contact info@anne-goodall.com to request access to or correction of personal information we hold about you, subject to applicable legal exceptions. You can also ask questions about this policy or raise a privacy concern. We will review and respond to requests within a reasonable period. If the Privacy Act 1988 and Australian Privacy Principles apply to our handling of your information, relevant statutory rights and complaint avenues will also apply, including potential escalation to the Office of the Australian Information Commissioner.

 

  1. CHILDREN

The Core Four is for adults aged 18 and over. Other Anne Goodall programmes may provide resources for parents and caregivers. We do not intentionally require children to create The Core Four accounts. Any collection of children’s personal information through other services should be addressed through appropriate parental or guardian arrangements and a service-specific notice if needed.

 

  1. THIRD-PARTY WEBSITES

Our pages may link to external websites or platforms. We are not responsible for the privacy practices of independent third parties. Please review their policies before providing information.

 

  1. UPDATES

We may update this policy when our services, systems or legal requirements change. The current version will be published on our website with an updated effective date.

 

  1. CONTACT

Zumbador Holdings | ABN 62 611 140 535

Anne Goodall

Email: info@anne-goodall.com

Website: www.anne-goodall.com

 

BEFORE PUBLISHING — VERIFICATION CHECKLIST

  • Confirm the actual legal trading/entity details and whether the Privacy Act 1988 / Australian Privacy Principles apply.
  • WordPress plugin inventory reviewed: Google Tag Manager, Google Analytics for WooCommerce, Meta Pixel, Cookie Compliance, Post SMTP, WooCommerce and Stripe Gateway are installed. Confirm functioning and consent configuration during routine implementation, not as a condition of drafting this policy.
  • Confirm overseas data processing and provider details during routine legal review. Do not claim specific integrations are currently firing until verified.
  • Confirm newsletter consent, unsubscribe configuration and marketing practices.
  • Verify retention and security practices, especially for individual clinical records.
  • Separate the existing one-to-one client therapy agreement from this website policy.
  • Review this draft with an Australian privacy lawyer or suitably qualified adviser before publication.