Privacy Policy

Think Bespoke Privacy Policy

Think Bespoke (“we”, “us”, or “our”) is committed to protecting your privacy and handling personal information with respect, transparency, and care. This policy outlines how we collect, use, store, share, and protect personal information in line with:

• The Privacy Act 1988 (Cth)

• The Australian Privacy Principles (APPs)

• The Notifiable Data Breaches Scheme

• Relevant requirements from the EU/UK General Data Protection Regulation (GDPR)

Our approach is simple: collect only what we need, use it responsibly, store it securely, and safeguard your rights.

Types of Personal Information We Collect

We collect the following kinds of information when necessary:

• Identity details: name, job title, business name

• Contact details: email address, phone number, LinkedIn URL

• Professional information: LinkedIn profile content, resumes, bios, coaching notes

• Payment information: business billing details (processed securely via Stripe/Xero — we do not hold credit card numbers)

• Service data: workshop participation, mentoring records, feedback

• Digital and analytics data: IP address, cookies, browsing activity, email engagement

• Consent and communication preferences

We do not intentionally collect sensitive information unless voluntarily provided and relevant to the service being delivered. If collected, it is stored with heightened confidentiality.

How We Collect Information

Information is collected through:

• Online forms and website interactions

• LinkedIn communication

• Email or phone enquiries

• Coaching intake forms

• Workshop registrations

• Payments and invoicing

• Video conferencing tools

• Website analytics and cookies

Where appropriate, we may also collect publicly available professional information, such as through LinkedIn.

Why We Collect Personal Information

We use personal information to:

• Deliver coaching, workshops, LinkedIn training, and advisory services

• Create resumes, bios, or LinkedIn content

• Communicate service updates and scheduling

• Improve offerings and understand user behaviour

• Send newsletters, marketing communications, or thought-leadership (unsubscribe anytime)

• Support AI-assisted drafting where consent is implied or given

We do not sell, rent, or trade personal information.

Legal Basis for Processing (GDPR alignment)

We process information under one or more of the following lawful bases:

• Consent e.g. subscribing to a newsletter

• Contract e.g. delivering a paid service

• Legitimate interests e.g. analytics, service improvement

• Legal obligations e.g. financial record retention

Where consent is the basis, it may be withdrawn at any time.

Use of Generative Artificial Intelligence Tools

We may use generative artificial intelligence (A) tools  to support drafting or analysis. When doing so:

• Only necessary information is used

• Content may be de-identified

• AI assists drafting – it does not make decisions about you

• You may opt out of AI use at any time

Storage, Security, and Service Providers

Data is stored using secure cloud platforms, including:

• Google Workspace

• HubSpot

• Dropbox / Google Drive

• Zoom / Teams / Vimeo

• Canva

• Stripe / Xero

• LinkedIn

Access is limited to authorised personnel and contractors who are bound by NDAs or confidentiality clauses.

Sharing Personal Information

We share information only when necessary to:

• Deliver contracted services

• Process payments

• Provide customer support

• Meet legal or regulatory requirements

Because our service providers operate globally, international data transfers may occur. Safeguards such as industry-standard encryption and data processing agreements apply.

Data Retention

We keep information only as long as needed:

• Financial records: minimum 7 years (required by law)

• Client work files: up to 3 years after project completion

• Marketing and mailing list data: until you unsubscribe or request deletion

You may request deletion at any time, except where information must be retained for legal or compliance purposes.

Your Rights

You may request:

• Access to the personal information we hold

• Correction of inaccurate details

• Deletion (where no legal requirement to retain applies)

• Restriction or objection to processing

• Withdrawal of consent

• Unsubscribe from communications

• Data portability (where applicable)

To exercise these rights, contact us using the details at the end of this policy.

Cookies and Analytics

We use cookies and tracking technologies to understand user behaviour and improve website experience. You may disable cookies in your browser settings, though some features may not function as intended.

Notifiable Data Breaches

If a data breach occurs that may cause serious harm, we will:

1. Secure affected systems
2. Notify affected individuals
3. Notify the OAIC (as required under Australian law)

Contact Details

For questions, complaints, or rights requests:

Email: [email protected]
Postal address: Suite 25, Level 7, 570 St Kilda Road, Melbourne VIC 3004
Website: www.thinkbespoke.com.au

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).