Privacy Policy

01Who we are

This policy explains how [LEGAL ENTITY NAME] [ABN / ACN] of [REGISTERED ADDRESS] (we, us) handles personal information in connection with $BDNP, this website, and the programme described in our Terms of Admission.

We are the data controller for that information. Privacy enquiries and requests: [PRIVACY EMAIL].

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where the EU or UK GDPR applies to you, clause 12 sets out the additional rights you have.

02What we collect and why

We do not collect sensitive information — health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, or criminal record — and you should not include it in an application.

We never require you to identify yourself to browse this website.

03Information about other people

3.1 Please keep this to what is necessary — a name, a role, a company. Do not send us private contact details, correspondence, or anything confidential about another person.

3.2 We use that information only to assess your application. We do not contact, profile, add to any list, or build a database of the people you name, and we do not disclose them to other Operators.

3.3 We delete third-party names on the schedule in clause 8 along with the rest of the application.

04How we use it — and how we do not

We use personal information for the purposes in clause 2, and to meet our legal obligations. We may use aggregated, de-identified data to improve the programme.

We do not:

• sell, rent or trade your personal information to anyone;
• share Operators' details with other Operators without asking you first;
• publish a directory or member list unless you opt in to appear in it;
• use footage in which you are identifiable for marketing or promotion without your separate written consent;
• make decisions about you using solely automated processing.

Applications are read and decided by a person.

05Live session recordings

5.1 Live sessions are recorded and shared with Operators. If you attend, speak, appear on camera or type in the chat, you will be in the recording.

5.2 Attendance is optional. If you would prefer not to be recorded, do not join live — watch the recording instead. Nothing is withheld from you for that choice, and we will not ask you to justify it.

5.3 Recordings are made available only to Operators, on the platform. They are not published, and they are not posted publicly.

5.4 We may use anonymised excerpts internally for quality and training. Any use in which you are identifiable, for marketing or any public purpose, requires your separate written consent, which you may decline or later withdraw.

5.5 Other Operators agree, as a condition of admission, not to record, transcribe or redistribute sessions, and to keep what is said confidential — see clause 12 of the terms. We enforce that, but we cannot guarantee the conduct of every participant. Bear that in mind when deciding what to disclose in a room.

06Who we share it with

We use third-party providers to run the business. They may access personal information only to perform their service for us, and are bound to protect it.

We do not store your full card number. Payments are handled by the processor directly.

We may also disclose information where the law requires it, to establish or defend a legal claim, or to a purchaser if the business is sold — in which case this policy continues to apply.

07Where your information goes

Our providers are located in [COUNTRIES — e.g. Australia, USA, EU], so your information may be stored or processed outside the country you live in.

Where we transfer personal information out of the EEA or the UK, we rely on appropriate safeguards — an adequacy decision, or Standard Contractual Clauses with the provider. You may request a copy of the safeguards we rely on.

Under Australian Privacy Principle 8, we take reasonable steps to ensure overseas recipients handle your information consistently with the APPs.

08How long we keep it

When a period ends we delete the information or irreversibly de-identify it.

09Security

We take reasonable steps to protect personal information from misuse, loss, and unauthorised access — including access controls, encryption in transit, and vetting the providers we use.

No system is perfectly secure, and we do not claim otherwise. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires — and where the GDPR applies, the relevant supervisory authority within 72 hours.

10Cookies and analytics

This site uses cookies and similar technologies that are strictly necessary for it to function, and [analytics cookies / no analytics cookies] to understand how pages are used.

Where consent is required in your jurisdiction, non-essential cookies are set only after you give it, and you may withdraw it at any time. You can also block or delete cookies in your browser, though parts of the site may then not work.

We do not use advertising or cross-site tracking cookies, and we do not run retargeting.

11Marketing

11.1 If you join the waitlist we will email you when admission opens. That is the purpose you gave your address for, and we keep to it.

11.2 Every marketing email has an unsubscribe link that works immediately and without cost, as the Spam Act 2003 (Cth) requires.

11.3 Operational messages about your admission — receipts, access details, session times, changes to these terms — are not marketing and continue even if you unsubscribe from marketing.

12Your rights

Everyone

• Access — ask for a copy of the personal information we hold about you.
• Correction — ask us to fix anything inaccurate or out of date.
• Deletion — ask us to delete it, subject to records we must keep by law.
• Unsubscribe — opt out of marketing at any time.
• Complain — see clause 13.

Write to [PRIVACY EMAIL]. We respond within 30 days. There is no charge. We may ask you to verify your identity first. If we refuse a request we will tell you why, in writing.

If you are in the EEA or the UK

You additionally have the right to restrict or object to processing, the right to data portability, the right to withdraw consent at any time without affecting processing already carried out, and the right not to be subject to solely automated decision-making. We respond to GDPR requests within one month.

If you are in California

You may request disclosure of the categories and specific pieces of personal information we have collected, request deletion, and are entitled not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.

13Complaints

If you think we have mishandled your personal information, tell us first at [PRIVACY EMAIL]. We will acknowledge within 5 business days and respond substantively within 30 days.

If you are not satisfied you may complain to the Office of the Australian Information Commissioner at oaic.gov.au. If you are in the EEA or the UK you may complain to your local supervisory authority, or in the UK to the Information Commissioner's Office at ico.org.uk.

14Children

$BDNP is intended for adults. Admission requires you to be at least 18. We do not knowingly collect personal information from children, and will delete it if we learn we have.

15Changes to this policy

We may update this policy. The version and date at the top of the page always show the current one. If a change materially affects how we handle your information, we will notify Operators and waitlist subscribers by email before it takes effect.

16Contact