Privacy Policy

PRIVACY POLICY

Last updated: 17 September 2026

1. About this Privacy Policy

The Unscripted Life™ is operated by Heidi Ann Underwood, a sole trader registered in Australia under ABN 57 731 891 830.

In this Privacy Policy, “The Unscripted Life”, “we”, “us” and “our” refer to Heidi Ann Underwood trading as The Unscripted Life™.

This Privacy Policy explains how we collect, hold, use, disclose and protect personal information when you:

visit or interact with our website;

subscribe to our emails or download a resource;

complete a form, questionnaire, quiz or assessment;

purchase or use one of our products or services;

participate in a course, program, membership or community;

attend a private, group or workplace session;

communicate with us; or

otherwise engage with The Unscripted Life.

We aim to manage personal information consistently with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply. We also use those principles as a general standard for responsible privacy practices.

2. The information we may collect

The kinds of personal information we may collect depend on how you interact with us. They may include:

your name, email address, telephone number and location;

billing, transaction and purchase information;

account login details and membership information;

appointment, attendance and participation records;

information submitted through forms, questionnaires, quizzes, assessments or surveys;

your goals, interests, preferences and reasons for accessing our services;

correspondence, feedback, enquiries, complaints and support requests;

comments, posts or other content submitted to a group or online community;

photographs, recordings or testimonials where you have provided appropriate consent;

employment details, job role, workplace or organisation;

information supplied by an employer or organisation arranging services;

website usage, device, browser, cookie and technical information; and

other information you voluntarily provide.

You may choose not to provide certain information. However, this may prevent us from providing a product, service, personalised response or particular website functionality.

3. Sensitive and wellbeing information

Because our services concern behaviour, relationships, wellbeing and performance, you may choose to provide information that is personal or sensitive in nature.

This could include information about:

mental or emotional wellbeing;

physical health or physiological experiences;

family circumstances and relationships;

stress, conflict or workplace experiences;

behavioural patterns, habits or personal challenges;

disability or accessibility requirements;

cultural background, beliefs or identity; or

other private life experiences.

We only seek to collect sensitive information when it is reasonably necessary for the service being provided and with your consent, or where collection is otherwise authorised or required by law.

Please only provide information that you are comfortable sharing and that is reasonably relevant to the service.

The Unscripted Life provides psychology-informed education, training and coaching. Unless expressly stated otherwise, our services are not psychological treatment, counselling, psychotherapy, medical care or another regulated clinical health service. Information we hold is not intended to constitute a clinical health record.

4. How we collect information

We generally collect information directly from you when you:

enter information on our website;

create an account;

purchase a product or service;

book or attend a session;

register for an event, course or program;

subscribe to our mailing list;

complete a form, quiz, questionnaire or survey;

participate in a community or discussion;

contact us by email, telephone, social media or another channel; or

provide information during a private, group or workplace engagement.

We may also receive information from:

an employer or organisation arranging services for its people;

a parent or legal guardian;

an authorised representative;

a referral partner, with appropriate authority;

payment, booking, email, website or technology providers;

cookies and analytics technologies; or

publicly available sources where lawful and appropriate.

Where practical, we will collect information directly from you. If another person provides information about you, we may take reasonable steps to confirm their authority and notify you of the collection where appropriate.

5. Why we collect and use information

We may collect, hold and use personal information to:

provide our products, services, programs and resources;

process purchases and manage subscriptions or memberships;

administer accounts, bookings and appointments;

communicate with you about services you have requested;

personalise educational content or recommendations;

understand participant needs and improve our services;

facilitate private, group, family, community and workplace programs;

provide customer service and technical support;

respond to questions, feedback and complaints;

send newsletters, updates and promotional communications where permitted;

operate, secure and improve our website and technology;

monitor participation and evaluate program effectiveness;

produce aggregated or de-identified insights;

manage our business, records and legal obligations;

prevent fraud, misuse and security incidents;

protect the rights, safety and wellbeing of participants and others; and

comply with applicable laws and lawful requests.

We will not use sensitive information for an unrelated purpose without consent unless the use is otherwise authorised or required by law.

6. Automated systems and educational recommendations

We may use digital tools and automated workflows to assist with:

registrations and onboarding;

reminders and service communications;

email segmentation;

questionnaire scoring;

delivery of resources;

educational content recommendations; and

business administration.

These tools support the delivery of our services. They are not used to make clinical diagnoses or provide medical or psychological treatment.

We do not presently use automated systems to make decisions that could reasonably be expected to have a legal or similarly significant effect on an individual without appropriate human involvement.

7. Payments

Payments may be processed by third-party payment service providers.

We generally do not receive or store your complete payment card details. Payment providers may collect and process your financial information in accordance with their own privacy policies and security practices.

We may retain transaction records including your name, contact details, amount paid, product purchased, payment status and applicable tax information.

8. Cookies, analytics and website information

Our website and service providers may use cookies, pixels and similar technologies to:

remember preferences;

maintain website functionality;

understand how visitors use the website;

measure traffic and campaign performance;

improve content and user experience;

support website security; and

deliver or measure relevant advertising, where used.

Technical information may include your IP address, device type, browser, operating system, pages visited, referring website, approximate location and the date and time of your visit.

You can usually control or disable cookies through your browser settings. Disabling cookies may affect some website features.

9. Direct marketing

If you subscribe, request a resource, make a purchase or otherwise consent to receiving communications, we may send you information about resources, programs, products, events and services we believe may be relevant.

You can unsubscribe from promotional emails at any time by:

selecting the unsubscribe link included in the email; or

contacting [email protected].

We may still send essential administrative or service-related communications, such as purchase confirmations, appointment information, security notices and membership updates.

We do not sell personal information to third parties.

10. When we may disclose information

We may disclose personal information to trusted third parties where reasonably necessary to operate our business or provide our services. These may include:

website, hosting and cloud-storage providers;

email marketing and customer-management platforms;

booking and video-conferencing platforms;

course, membership and community platforms;

payment processors and financial institutions;

analytics, advertising and technology providers;

contractors, facilitators and service providers assisting us;

accountants, insurers, lawyers and professional advisers;

employers or organisations arranging workplace services, subject to the protections below;

government authorities, regulators or law-enforcement bodies where required or authorised by law;

another party involved in a proposed sale, restructure or transfer of our business, subject to appropriate confidentiality protections; and

other parties where you have requested or consented to the disclosure.

We seek to limit disclosures to information reasonably necessary for the relevant purpose.

11. Workplace and employer-sponsored services

Where an employer or organisation purchases or arranges a service, we may receive participant details from that organisation. We will use this information to administer and deliver the agreed service.

Depending on the arrangement, we may provide the organisation with:

attendance or completion information;

agreed administrative information;

general program feedback;

aggregated or de-identified themes; and

organisational insights that do not reasonably identify an individual.

We will not ordinarily disclose the content of an individual’s private session, personal questionnaire responses or sensitive disclosures to their employer without the individual’s consent.

Exceptions may apply where:

disclosure has been clearly explained and agreed as part of the program;

disclosure is required or authorised by law;

the information relates to a serious breach of workplace or program safety requirements; or

disclosure is reasonably necessary to lessen or prevent a serious threat to someone’s life, health or safety.

Before participating in an employer-sponsored program, participants should review any program-specific privacy or confidentiality information supplied to them.

12. Private and group sessions

We may keep limited administrative or educational notes relating to private or group sessions to support continuity, follow-up and service delivery.

These records are not intended to be clinical treatment notes unless explicitly stated otherwise.

Private or live sessions will not ordinarily be recorded without prior notice and appropriate consent.

Other participants in group programs may hear information you choose to share. Although participants may be required to respect confidentiality, we cannot guarantee that another participant will comply. You should avoid sharing information in a group environment that you do not want others to know.

13. Online communities and participant content

Information you post in a member community, group, forum, chat or comment area may be visible to other participants.

Other participants may be able to copy, save, photograph or redistribute content despite community rules. We cannot fully control the conduct of other participants after information has been shared.

Please avoid posting highly sensitive information in shared spaces. If you believe your privacy has been breached within a community operated by us, contact us promptly.

We may moderate or remove content where reasonably necessary to protect participants, enforce community standards or comply with legal obligations.

14. Testimonials, images and recordings

We will seek consent before publishing an identifiable testimonial, photograph, video, audio recording or case study for promotional purposes.

Where practical, you may withdraw permission for future use by contacting us. Withdrawal will not necessarily require us to recall materials already lawfully printed, published or distributed, but we will take reasonable steps regarding future use and material under our control.

We may use anonymous or de-identified feedback without identifying you.

15. Children and young people

Our services do not have a single general minimum age. However, some products, programs or topics may not be appropriate for every age group.

Where a participant is under 18:

a parent or legal guardian should review this Privacy Policy;

parent or guardian consent may be required;

purchases and paid commitments should be made or approved by an adult;

we may seek to verify the authority of the consenting adult; and

additional supervision or participation requirements may apply.

We do not intend to knowingly collect sensitive information directly from a child without appropriate consent where consent is required.

If we cannot confirm that appropriate permission has been provided, we may decline or suspend the service and remove the relevant information where appropriate.

A parent or guardian who believes a child has submitted personal information without appropriate permission should contact us.

16. Safety and legal disclosures

The privacy of information shared with us is important, but confidentiality is not absolute.

We may use or disclose information where reasonably necessary and legally permitted to:

lessen or prevent a serious threat to a person’s life, health or safety;

respond to suspected abuse, exploitation or serious harm;

comply with a court order, legal process or lawful government request;

investigate suspected unlawful activity, fraud or serious misconduct; or

establish, exercise or defend a legal claim.

Where appropriate and lawful, we will seek to limit the information disclosed and inform the affected person.

17. Overseas processing and service providers

Some technology and service providers we use may store or process information outside Australia.

Depending on the providers used, information may be processed in countries including the United States, countries within the European Union or European Economic Area, and other locations in which a provider or its subcontractors operate.

Provider locations and infrastructure may change. Where required, we take reasonable steps appropriate to the circumstances before disclosing personal information to an overseas recipient.

Information processed overseas may be subject to privacy and disclosure laws that differ from Australian law.

You may contact us if you would like further information about the service providers relevant to your information.

18. How we protect information

We take reasonable administrative, technical and physical measures to protect personal information from:

misuse;

interference;

loss;

unauthorised access;

modification; and

unauthorised disclosure.

These measures may include access restrictions, passwords, authentication controls, secure service providers, software maintenance, backups and limits on who can access information.

No internet transmission or storage system is completely secure. We cannot guarantee absolute security, but we will take reasonable steps appropriate to the nature and sensitivity of the information we hold.

You are responsible for keeping your account credentials secure and notifying us promptly if you suspect unauthorised access.

19. Retention and deletion

We retain personal information for as long as reasonably necessary to:

provide the relevant service;

maintain appropriate business and transaction records;

meet legal, accounting, insurance and taxation requirements;

manage complaints or disputes;

protect participants and our legitimate interests; and

fulfil the purposes described in this Privacy Policy.

Retention periods may vary depending on the type of information and service involved.

When personal information is no longer required and we are not legally required to retain it, we will take reasonable steps to destroy it securely or de-identify it.

Backup copies may remain for a limited period until overwritten through ordinary system processes.

20. Data breaches

If we become aware of a suspected privacy or security breach, we will assess and respond to it as reasonably appropriate.

Where the Notifiable Data Breaches scheme or another law applies, we will notify affected individuals and the Office of the Australian Information Commissioner when legally required.

Notifications may include information about the incident, the information affected and recommended steps individuals can take.

21. Accessing or correcting your information

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete, out of date or misleading.

Requests can be sent to:

Email: [email protected]
Subject line: Privacy Request

We may ask you to verify your identity before processing a request.

In some circumstances, the law may permit or require us to refuse access or correction. If this occurs, we will generally explain the reason where legally permitted and outline any available complaint options.

We will respond within a reasonable period. We will not ordinarily charge for making a request, although reasonable administrative costs may apply where permitted by law.

22. Anonymity and pseudonyms

Where practical, you may interact with us anonymously or by using a pseudonym—for example, when making a general enquiry.

We may require your correct identity where it is necessary to:

process a payment;

create or secure an account;

book or deliver a personalised service;

verify consent or authority;

meet safety requirements; or

comply with legal and record-keeping obligations.

23. Third-party websites

Our website, emails and resources may contain links to third-party websites or services.

We are not responsible for the privacy, security or content practices of third parties. You should review the privacy policy of any third-party service before providing personal information.

24. Privacy complaints

If you have a question or complaint about how we have handled your personal information, please contact:

The Unscripted Life™
Attn: Privacy Contact
Email: [email protected]
ABN: 57 731 891 830

Please include enough information for us to understand and investigate the issue.

We will acknowledge and investigate privacy complaints and aim to provide a response within a reasonable period, generally within 30 days.

If you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au
Telephone: 1300 363 992

25. Changes to this Privacy Policy

We may update this Privacy Policy when our services, technology, providers, legal obligations or information-handling practices change.

The current version will be published on our website with the date it was last updated. Material changes may also be communicated through our website, email or member platform where appropriate.

Your continued use of our website or services after an update does not remove any consent rights or other rights you have under applicable privacy law.

26. Contact us

For privacy questions, access or correction requests, complaints, or requests concerning consent, please contact:

The Unscripted Life™
Operated by: Heidi Ann Underwood
ABN: 57 731 891 830
Email: [email protected]