This Privacy Policy explains how the business trading as Katherine Anderson (we, us or our) collects, holds, uses and discloses personal information through the website and in connection with private sessions, courses, workshops, webinars, events, communications and related services.

Our services are positioned as spiritual guidance, education and general wellbeing services. We do not represent ourselves as providing medical, psychological or clinical treatment. Some information provided to us may nevertheless be sensitive or highly personal, and we handle it with care.

1. Scope of this policy

This Policy applies to personal information collected from or about:

• website visitors and people who submit an enquiry or contact form;
• newsletter and marketing subscribers;
• clients who book private readings, guidance sessions, energy healing or Crystal Dreaming;
• participants in courses, workshops, webinars, private groups and events;
• parents, guardians and minors where a service is provided to a person under 18;
• people who provide testimonials, feedback, photographs, audio or video; and
• other people whose information is provided to us in connection with our activities.

Separate Terms and Conditions, consent forms and Participant and Community Guidelines may also apply to a particular service. Those documents should be read together with this Policy.

2. Personal information we may collect

Depending on how you interact with us, we may collect:

• your name, email address, telephone number, postal address and other contact details;
• booking, enrolment, attendance, purchase and transaction information;
• information you submit through contact forms, questionnaires, intake forms or correspondence;
• questions, intentions and personal circumstances you wish to explore during a service;
• information about your wellbeing, current or past conditions, medication, pregnancy, emotional state, substance use, accessibility or suitability where reasonably relevant to participation;
• information concerning relationships, family, trauma, beliefs, spiritual experiences or other personal matters you voluntarily share;
• parent or guardian details, consent and information concerning a minor;
• session notes, facilitator observations, Zoom summaries, recordings and transcripts where created;
• course participation, submissions, certificates, feedback, testimonials, photographs and video footage;
• marketing preferences and communication history; and
• website and device information described below.

Please avoid providing information that is not reasonably necessary for your enquiry or participation.

3. Information collected through the website

When you visit the website, our systems and service providers may automatically collect technical and usage information such as your internet protocol address, browser type, device type, operating system, referring pages, pages viewed, approximate location derived from your IP address, access times and interactions with the website.

We may also collect information you voluntarily provide through contact, subscription, booking or registration forms. Some parts of the website can be used without identifying yourself.

4. Cookies, analytics and advertising technologies

The website may use cookies, pixels, web beacons and similar technologies. These may be used to:

• operate and secure the website;
• remember settings and preferences;
• measure traffic and understand how visitors use the website;
• improve content, services and user experience;
• measure email engagement;
• support social-media features; and
• where enabled and permitted, measure advertising or provide relevant advertising and remarketing.

The website may use third-party analytics or advertising services, including services supplied by Google or Meta. The precise technologies in use may change. You can manage cookies through your browser and, where available, the website cookie settings. Disabling cookies may affect website functionality.

We do not rely on a browser “Do Not Track” signal as a substitute for your browser or cookie preferences because there is no consistently adopted technical standard for these signals.

5. How we collect information

We may collect information:

• directly from you through the website, OneQuest, Zoom, email, telephone, online forms or in person;
• from a parent, guardian or authorised representative;
• from booking and payment providers, including OneQuest, PayPal and Stripe;
• from website, analytics, advertising and communication platforms; and
• from another person where you have authorised this, it is reasonably expected, or collection is permitted by law.

6. Why we collect, use and disclose information

We may collect, use or disclose personal information where reasonably necessary to:

• respond to enquiries and provide requested information;
• create and manage bookings, payments, enrolments and event attendance;
• assess suitability, informed consent, safety and accessibility;
• prepare for, deliver and follow up services;
• provide course access, materials, certificates and participant support;
• maintain appropriate business, practitioner and consent records;
• provide recordings or resources where available;
• investigate complaints, incidents, disputes, refunds or payment chargebacks;
• manage legal, insurance, safeguarding and professional obligations;
• operate, secure, analyse and improve our website, systems and services;
• send transactional communications concerning your enquiry, booking or purchase;
• send marketing where you have consented or where otherwise permitted by law;
• use authorised testimonials or media for promotion; and
• comply with a law, court order, regulator, insurer or lawful authority.

7. Sensitive and highly personal information

Some information you provide may concern your physical or mental wellbeing, medication, trauma, beliefs, spiritual experiences, relationships or other sensitive matters. We collect this information only where it is reasonably necessary for suitability, safety, service preparation, delivery, recordkeeping or another disclosed purpose, or where you have otherwise consented.

You do not have to provide requested information. However, we may be unable to answer an enquiry, accept a booking or safely provide or continue a service without information reasonably required for that purpose.

8. Private sessions, notes and recordings

Private sessions may be recorded only as described in the booking information and relevant consent form. You may request that a private session not be recorded.

Where a usable recording is provided to you, the client download link will ordinarily remain available for seven days. The expiry or deletion of that client-access link does not necessarily mean that our separate business record copy has been deleted.

We may retain a secure business copy of a recording, together with intake forms, consent records, notes, Zoom summaries, internal transcripts and correspondence, where reasonably required for continuity, responding to later questions, complaint handling, legal or insurance purposes, safeguarding, quality or dispute management.

Recording is an optional courtesy unless expressly stated otherwise. The creation, saving, quality or delivery of a recording is not guaranteed.

9. Group sessions, courses and communities

Live online courses, webinars and group calls are recorded as part of the delivery of the service. Workshops may also be photographed, filmed or recorded. A recording, photograph or video may incidentally capture your image, voice, first name, chat contribution, questions, reflections or participation.

By enrolling in or attending a course, webinar, workshop, group call or community activity, you acknowledge that recording, photography or filming may occur and that this material may be used by the business in accordance with this Policy.

Group participants are required to respect the confidentiality of others. However, we cannot guarantee that another participant will comply with those obligations. You should share only what you are comfortable contributing in a group environment.

Participants must not independently record, photograph, screenshot, copy or distribute group content or another participant’s contribution without prior written permission.

10. Testimonials, feedback and promotional media

Where you voluntarily provide a testimonial, review or positive feedback, we may reproduce it using your first name and may make reasonable edits for spelling, length or clarity without changing its meaning. Testimonials may be used on websites, social media, email, printed materials and paid advertising.

We may use photographs, video, audio, screenshots, written comments, questions, reflections, chat contributions, workshop footage, webinar footage, course footage or other material captured during group services for business, educational, archival, promotional, advertising, social media, website and marketing purposes.

Private-session footage, audio, recordings, transcripts, notes or other identifiable material from a private reading, guidance session, healing session or one-to-one service will not be used for promotional purposes without separate express consent.

We will not ordinarily publish a participant’s full name with group footage without separate permission.

Where permission is withdrawn, we will take reasonable steps to stop new uses where practicable. Withdrawal does not require us to recall or remove material already lawfully published, printed, distributed or incorporated into completed content, unless required by law.

11. Payment and booking information

Bookings and payments may be processed by OneQuest Pty Ltd and payment providers such as PayPal or Stripe. We do not ordinarily receive or store your complete card number. Those providers handle payment information under their own privacy policies and security practices.

A PayPal or card statement may identify OneQuest Pty Ltd as the payment recipient or merchant even where the service is supplied by the Katherine Anderson business entity.

12. Service providers and disclosure

We may disclose personal information to people and organisations that reasonably need it to support our activities, including:

• authorised staff and contractors of Sirocco Interactive Pty Ltd;
• OneQuest, Zoom, Dropbox, Airtable, Mailchimp, PayPal and Stripe;
• website, hosting, email, analytics, advertising, storage, transcription and technology providers;
• venues and event providers where necessary for attendance or safety;
• accountants, auditors, insurers, legal advisers and other professional advisers;
• government agencies, courts, regulators, emergency services or law enforcement where required or permitted; and
• a purchaser or successor in connection with a genuine sale, restructure or transfer of the business, subject to appropriate confidentiality and legal requirements.

We do not sell or rent personal information to unrelated third parties for their own marketing purposes.

13. Overseas processing and storage

Some service providers may store, process or access information outside Australia. This may include providers operating from or using infrastructure in the United States and other countries. The locations used by providers can change over time.

Where required, we take reasonable steps appropriate to our legal and contractual position to ensure overseas providers handle information consistently with applicable obligations. Privacy protections in another country may differ from those in Australia.

14. Marketing communications

We may send service-related messages necessary to answer an enquiry, manage a booking or provide a purchase. These are separate from promotional marketing.

We send promotional email or electronic marketing only where you have consented or where another lawful basis applies. Communications will identify the sender and include a functional unsubscribe method. You can also withdraw marketing consent by contacting us at support@katherineanderson.life.

Katherine Anderson and OneQuest may each send marketing only in accordance with the consent you have provided to that sender.

15. Information about minors

Private readings are generally available only to adults aged 18 or older. Approved online, distance or in-person no-touch services may be provided to a minor with appropriate consent and suitability assessment.

We may collect information about the minor and their parent or guardian. We may request evidence of identity, parental responsibility or authority where consent is unclear, disputed or unusual. We will consider the minor’s age, maturity, willingness and best interests.

A parent or guardian should contact us if they believe we have collected a minor’s information without appropriate authority.

16. Information about other people

If you provide personal information about another person, you must have a reasonable basis and any permission required to do so. Do not provide unnecessary private information about another person.

We may remove or restrict material that appears to infringe another person’s privacy, safety or legal rights.

17. Security

We use reasonable administrative, technical and physical safeguards appropriate to the nature of the information. These may include passwords, access controls, restricted staff and contractor permissions, secure cloud providers, confidentiality obligations, device protection and security monitoring.

No internet transmission or electronic storage method is completely secure. We cannot guarantee absolute security, although we will respond to suspected data incidents and make notifications where legally required.

18. Retention and deletion

We retain personal information only for as long as reasonably required for the purpose for which it is held and for applicable legal, tax, insurance, safeguarding, complaint and dispute-management purposes.

Recordings, intake forms, consent records, notes, summaries and correspondence may be retained for a reasonable period determined by their nature and purpose. Relevant considerations include continuity, responding to future questions, legal limitation periods, insurer requirements and the sensitivity of the material.

Information no longer reasonably required will be securely destroyed or de-identified where practicable and required. We may retain limited information where deletion would conflict with a legal obligation, active complaint, anticipated claim or legitimate recordkeeping requirement.

19. Access and correction

You may request access to, or correction of, personal information we hold about you by contacting support@katherineanderson.life. We may need to verify your identity or authority before responding.

Access may be refused or limited where permitted by law, including where access would unreasonably affect another person’s privacy, reveal legally privileged material, create a serious safety concern or otherwise be unlawful. Where appropriate, we may provide an accurate summary or another reasonable form of access.

20. Withdrawing consent

Where we rely on your consent, you may withdraw it by contacting us. Withdrawal applies prospectively and does not make earlier handling unlawful. It may also mean that we can no longer provide a service or continue a particular activity.

Withdrawal does not prevent us from retaining or using information where this is required or permitted by law, reasonably necessary for an existing contract, or needed for legitimate legal, insurance, complaint or safeguarding purposes.

21. External links

The website may link to third-party websites or platforms that we do not control. Those services have their own privacy practices. You should review their policies before providing information.

22. Privacy enquiries and complaints

Privacy enquiries and complaints should be sent to:

Katherine Anderson
PO Box 105, Toronto NSW 2283
support@katherineanderson.life

We will aim to acknowledge a privacy complaint within five Business Days and investigate and respond within a reasonable period.

Depending on which privacy laws apply to the business and the information concerned, you may also have the right to contact an applicable privacy regulator, including the Office of the Australian Information Commissioner or the NSW Information and Privacy Commission.

23. Additional rights for people outside Australia

If you are located outside Australia, local privacy laws may provide additional rights. We will consider a request under applicable law, but this Policy does not state that every overseas privacy regime automatically applies to all our activities.

24. Changes to this Policy

We may update this Policy when our services, platforms, practices or legal obligations change. The current version will be published on the website with its effective date. Where a material change affects existing information in a way that requires further notice or consent, we will take appropriate steps.

25. Contact

Questions about this Policy can be sent to support@katherineanderson.life.