Inner Resonance Global

Privacy Policy

Last Updated: 9 May 2026

Our commitment to your privacy

Inner Resonance Global Pty Ltd ACN 694703127, ABN 13694703127, “Inner Resonance Global”, respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you use our website at https://www.innerresonanceglobal.com, our online courses and digital resources, our retreats and in-person events, our consulting services and our one-to-one clinical counselling services (collectively, the “Services”).

This Policy should be read together with our Terms and Conditions and, for clinical clients, our Client Services Agreement.

1. The Laws We Comply With

We handle personal information in accordance with:

• The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs);
• Applicable Queensland health-records and child-safety legislation;
• The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, where applicable to UK users;
• The EU General Data Protection Regulation (EU GDPR), where applicable to users in the European Economic Area;
• Other privacy and data-protection laws of jurisdictions where we operate, where applicable.

2. Information We Collect

We only collect information that is reasonably necessary for the Services we provide. The information we collect depends on how you interact with us.

2.1 Information you give us directly

• Identity information: name, date of birth (where required), professional role and organisation.
• Contact information: email address, phone number, postal address.
• Account information: login details, preferences and communication settings.
• Booking information: details about the courses, retreats, sessions or consulting services you book.
• Payment information: billing address and limited payment-card details (full card details are handled by our payment processor and never stored by us).
• Communications: emails, enquiry forms, feedback, survey responses and testimonials.

2.2 Sensitive and health information (clinical clients)

If you engage us for one-to-one clinical counselling services, we collect sensitive information including:

• Health and mental-health history relevant to your care;
• Details of presenting concerns, goals and clinical assessments;
• Session notes, treatment plans and progress records;
• Information about family, relationships and support networks where clinically relevant;
• Information about children in your care, where relevant to caregiver-focused work.

Sensitive information is collected only with your express consent and only where it is necessary for the clinical service you have requested. It is held in accordance with applicable health-records legislation and stricter standards than ordinary personal information.

2.3 Information we collect automatically

• Technical information: IP address, device type, browser type, operating system.
• Usage information: pages visited, time spent on pages, referral sources, course-progress data.
• Cookies and similar technologies: see section 9.

2.4 Information from third parties

• Information from referring practitioners, organisations or caregivers, where you have consented to that referral;
• Information from social-media platforms when you interact with our pages or advertisements;
• Information from analytics, advertising and email-marketing providers.

3. Why We Collect Your Information

We collect, use and hold your personal information for purposes including:

• Providing the Services you have requested, including counselling, courses, resources, retreats and consulting;
• Processing bookings, payments, refunds and confirmations;
• Managing your account and personalising your experience;
• Communicating with you about your bookings, sessions, course updates and important changes;
• Providing customer support and responding to enquiries;
• Maintaining clinical records as required by law and professional standards;
• Sending marketing communications, newsletters and information about new programs (where you have consented);
• Improving the Services, developing new offerings and conducting research and analysis (in de-identified form where possible);
• Meeting our legal, regulatory, professional and safeguarding obligations;
• Protecting the safety of clients, our team and the public.

4. Legal Bases for Processing (UK and EU users)

If you are in the UK or European Economic Area, we rely on the following legal bases under the UK GDPR and EU GDPR:

• Contract: to provide the Services you have requested.
• Consent: for marketing communications, optional cookies, and processing of sensitive (special category) data.
• Legitimate interests: to operate, improve and secure our business, where not overridden by your rights.
• Legal obligation: to comply with applicable laws, including health-records, tax and safeguarding laws.
• Vital interests: to protect someone’s life or safety in an emergency.

For sensitive (special category) personal data such as health information, we additionally rely on your explicit consent or, where applicable, the provision of health or social-care services and substantial public-interest grounds.

5. Confidentiality of Clinical Information

5.1 Our duty of confidentiality

Information you share during clinical counselling is treated with the highest level of confidentiality and is held in accordance with professional and ethical obligations applicable to clinical counsellors in Australia.

5.2 Limits to confidentiality

There are some circumstances in which we are legally or professionally required to disclose information without your consent:

• Where there is a serious and imminent risk to your life, health or safety, or that of another person;
• Where we are required to make a mandatory report under Queensland child-safety legislation, including reporting reasonable suspicion of harm to a child;
• Where information is subpoenaed or required to be produced by a court, tribunal or regulator;
• Where required for professional supervision or quality assurance, in de-identified form where possible;
• Where you have given consent to disclosure (for example, to your GP, a referring organisation, or a family member).

These limits are also explained in your Client Services Agreement and discussed with you at the start of clinical work.

6. How We Share Your Information

We do not sell your personal information. We share information only as described below.

6.1 Service providers

We use trusted third parties to help us run the Services. These may include:

• Payment processing (e.g., Stripe);
• Course and learning-platform hosting;
• Video-conferencing for online sessions and webinars;
• Email marketing and automation tools;
• Cloud storage and backup;
• Website analytics and advertising;
• Practice-management and clinical-notes software;
• Professional advisers (lawyers, accountants, insurers).

These providers only access information needed to perform their services and are bound by confidentiality and data-protection obligations.

6.2 Legal and safeguarding disclosures

We may disclose information where required or permitted by law, including in response to court orders, regulatory requests, mandatory reporting obligations, or to protect the safety of clients, our team or the public.

6.3 Business transactions

If our business is sold, restructured or merged, personal information may be transferred to the successor entity, subject to the same protections as this Policy.

7. International Data Transfers

Inner Resonance Global is based in Australia. Some of our service providers operate in other countries, including the United States, the United Kingdom and the European Union. By using the Services, you acknowledge that your information may be transferred to and stored in countries outside your country of residence.

Where personal data is transferred from the UK or EU, we use appropriate safeguards such as Standard Contractual Clauses or transfers to jurisdictions with adequacy decisions. You can request a copy of the safeguards in place by contacting us.

8. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. These steps include:

• Encrypted data transmission and storage where appropriate;
• Secure password and access controls;
• Restricted access on a need-to-know basis;
• Regular review of our security practices;
• Confidentiality and training requirements for our team and contractors.

No system is completely secure. If you become aware of a security issue, please contact us immediately. We will notify you and any relevant authority of an eligible data breach in accordance with applicable laws.

9. Cookies and Tracking

Our website uses cookies and similar technologies to help the site function, remember your preferences, understand how the Services are used, and (where you have consented) deliver relevant marketing.

Categories of cookies we may use:

• Strictly necessary cookies: required for the site to work.
• Functional cookies: remember your preferences and settings.
• Analytics cookies: help us understand site usage (for example, Google Analytics).
• Marketing cookies: support advertising and remarketing (only with your consent).

You can control cookies through your browser settings and, where required, through our cookie banner. Disabling some cookies may affect site functionality.

10. Marketing Communications

We may send you newsletters, program updates, event invitations and other marketing material if you have opted in or where permitted under applicable law.

Every marketing email includes an unsubscribe link. You can also opt out at any time by emailing [email protected]. Opting out of marketing does not affect essential service communications, such as booking confirmations or session reminders.

11. Your Rights

11.1 All users

You may at any time:

• Ask what personal information we hold about you;
• Ask us to correct information that is inaccurate, out of date or incomplete;
• Ask us to delete information we no longer need to hold (subject to legal retention requirements);
• Withdraw consent for marketing or for processing based on consent;
• Make a complaint about how we have handled your personal information.

11.2 UK and EU users (additional rights under UK GDPR / EU GDPR)

• Right of access: receive a copy of your personal data.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): in defined circumstances.
• Right to restriction of processing.
• Right to data portability: receive your data in a portable format.
• Right to object to certain processing, including direct marketing.
• Rights related to automated decision-making (we do not currently use solely automated decision-making with legal effects).

To exercise any of these rights, contact us at [insert email]. We will respond within the time limits required by law.

11.3 Health-records access

Access to clinical records is governed by Queensland health-records legislation. We may need additional time to compile clinical records and, in limited circumstances permitted by law, may need to provide a summary rather than direct access where direct access could pose a serious risk to you or another person.

12. How Long We Keep Your Information

We keep personal information only for as long as necessary for the purposes described in this Policy or as required by law. Indicative retention periods:

• Clinical records: as required by Queensland health-records legislation (typically a minimum of 7 years from the last service, or until age 25 for minors, whichever is later).
• Financial and tax records: as required by Australian taxation law (typically 5 years).
• Course and account records: while your account is active and for a reasonable period after closure.
• Marketing records: until you unsubscribe or ask us to delete them.

When personal information is no longer required, we securely destroy or de-identify it.

13. Children’s Privacy

The Services are intended for adults aged 18 and over. We do not knowingly collect personal information directly from children. Where our work supports caregivers and care organisations working with children, information about a child is provided by an authorised adult (parent, guardian, or organisation with appropriate consents and safeguarding arrangements). Such information is treated as sensitive and subject to additional safeguards.

14. Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us first at [insert email] so we can try to resolve it.

If you are not satisfied with our response, you have the right to complain to the relevant supervisory authority:

• Australia: Office of the Australian Information Commissioner (OAIC) — www.oaic.gov.au
• United Kingdom: Information Commissioner’s Office (ICO) — www.ico.org.uk
• European Union: your local data-protection authority. A list is available at edpb.europa.eu

15. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, services or legal requirements. The current version will always be available at https://www.innerresonanceglobal.com with an updated “Last Updated” date. Material changes will be communicated through the Services or by email.

16. Contact Us

If you have any questions about this Policy, your personal information, or how to exercise your rights, please contact:

Inner Resonance Global Pty Ltd

Attention: Privacy Officer

Email: [email protected]