This Privacy Policy explains how BUILT by Storm ("we", "us", or "our") collects, uses, stores, discloses, and protects personal information about visitors to our website, prospective and existing clients, and people who otherwise interact with our business.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and the Spam Act 2003 (Cth) where applicable to electronic marketing. By using our Website or Services, you consent to your information being handled as described in this Policy.
BUILT by Storm is an Australian business coaching company providing programs, courses, and 1:1 advisory services to allied health professionals and clinic owners. Our contact details for privacy matters are:
The personal information we collect depends on how you interact with us. We generally collect:
Sensitive information. We do not generally collect sensitive information (such as health, racial or ethnic origin, religious beliefs, or sexual orientation). If you choose to share sensitive information with us — for example, to request an accommodation or because it's relevant to your business circumstances — we will only use it for the purpose for which you provided it, and only with your consent.
Information about your patients or clients. Our Programs are designed to teach business strategy. We do not need, and do not ask for, identifying information about your patients, NDIS participants, or clinical clients. Please do not share their personal or health information with us. If you do, we will ask you to redact it.
We collect information:
We use personal information for the following purposes:
If you have opted in (for example, by downloading a free resource or subscribing to The BUILT Brief), we may send you marketing emails about content, Programs, events, and resources we think will be useful to you.
Every marketing email contains a clear unsubscribe link. You can opt out at any time by clicking unsubscribe, or by emailing [email protected]. We will action unsubscribe requests within five business days. Note that even after unsubscribing, you may continue to receive transactional and service-related messages (for example, payment confirmations, session reminders, and updates about a Program you are enrolled in) — these are not marketing.
We do not sell your personal information. We disclose it only in the following circumstances:
Categories of providers we currently use include — but may change as our stack evolves — Stripe (payments), Go High Level (CRM and client portal), email service provider, video conferencing platform, course hosting platform, and Google Workspace. We are happy to provide a current list of major sub-processors on request.
Some of the third-party services we use are based outside Australia or store data on servers located overseas — most commonly in the United States and the European Union. This means that, in providing your information to those services, we may be disclosing it to recipients overseas.
Before disclosing personal information to an overseas recipient, we take steps that are reasonable in the circumstances to ensure that the recipient handles your information consistently with the Australian Privacy Principles. By using our Services, you consent to your personal information being disclosed to and stored by these overseas recipients for the purposes set out in this Policy.
Our Website uses cookies and similar technologies — small data files placed on your device — to make the site work, analyse traffic, and (where you have consented) deliver relevant marketing.
The categories of cookies we may use include:
You can disable cookies in your browser settings, but parts of the Website may not function correctly if you do. Where required, we will request your consent before using non-essential cookies.
We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification, and disclosure. These steps include using reputable third-party providers with their own security accreditations, restricting access to information on a need-to-know basis, using encrypted connections (HTTPS) on the Website, requiring strong account passwords, and reviewing our security practices periodically.
No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.
We keep personal information only for as long as we need it for the purposes described in this Policy, or as required by law. As a general guide:
When we no longer need your information, we will take reasonable steps to securely delete or de-identify it.
You have the right to:
To exercise any of these rights, email [email protected]. We may need to verify your identity before actioning a request, and we will respond within a reasonable timeframe (usually within 30 days). There is generally no charge for accessing your information, but we may charge a reasonable fee if a request is unusually complex or repetitive.
Our Website and Services are intended for adults — specifically, people aged 18 or older who are running or working in a healthcare business. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us and we will take steps to delete it.
Our Website may include links to third-party websites, tools, or resources. This Policy does not apply to those external sites — they have their own privacy practices, and we encourage you to review them before sharing your information.
We may update this Policy from time to time to reflect changes in our practices, our service providers, or the law. The "Last Updated" date at the top of this page reflects when the Policy was most recently changed. Material changes will be communicated to active clients via email or a prominent notice on the Website. Your continued use of the Services after a change constitutes acceptance of the updated Policy.
If you have a question about this Policy, want to access or correct your information, or wish to make a privacy complaint, please contact us first:
Email: [email protected]
Or use our contact form.
We will acknowledge receipt of your complaint and aim to respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):