Privacy Policy
Last updated 15 September 2026
1. About this policy
This policy explains how The Growth & Exit Collective (ABN 68 632 325 761), Parcel Collect 90, Tingalpa QLD 4173, Australia handles personal information. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and with the Notifiable Data Breaches scheme. It applies to coaches who subscribe to a portal, their clients, and visitors to our website.
2. Coach and client roles
Each coach runs their own branded portal. The coach decides what client information goes into their portal and is responsible for it; we host and process that information on the coach's instructions. Each portal's information is logically separated from every other portal. If you are a client, direct requests about your information to your coach first; we will help them respond.
3. What we collect
Account details: name, email address, business name, and passwords stored only as salted hashes — we never see your password. Portal content: tasks, sprints, KPIs, business performance figures you choose to enter, coaching notes, session updates, uploaded workbooks and files. Billing details: subscription status, invoices and the last four digits and expiry of a card — full card numbers are handled by our payment provider and never reach our systems. Technical data: IP address, browser and device information, log and error records, and timestamps needed to run and secure the service. We do not collect sensitive information as defined in the Privacy Act, and you should not enter health, biometric or government identifier data into the portal.
4. How we collect it
Directly from you when you sign up, configure your portal or contact support; from your coach when they create a client account for you; and automatically through server logs and cookies when you use the service. Where practical you can deal with us anonymously for general enquiries, but an account cannot be created without an email address.
5. Why we use it
To create and run your account and portal; to display your content to the people entitled to see it; to send the reminders, session notifications and transactional emails you or your coach configure; to take subscription payments and issue invoices; to provide support and respond to enquiries; to secure the service, detect misuse and debug faults; to produce aggregated, de-identified usage statistics; and to meet legal obligations. We do not sell personal information and we do not use client content for advertising or to train third-party AI models.
6. Marketing
We may email coaches about service changes, new features and occasional product news. Every marketing email includes an unsubscribe link, and unsubscribing does not affect essential service and billing emails. We do not send marketing to a coach's clients.
7. Cookies and similar technology
We use cookies and browser storage that are strictly necessary to keep you signed in, remember display preferences, and keep sessions secure. We do not use advertising or cross-site tracking cookies. Blocking essential cookies will prevent sign-in.
8. Who we disclose it to
A coach can see the accounts and boards of clients in their own portal; clients see only their own board. We disclose personal information to service providers who support the platform — hosting and database infrastructure, email delivery, payment processing and error monitoring — each bound to use it only on our instructions. We may also disclose information where required by law, to enforce our terms, or to protect the rights and safety of any person. If our business is sold or restructured, information may transfer to the acquirer under the same protections.
9. Overseas storage
Our infrastructure and email providers may store or process data on servers outside Australia, including in the United States and the European Union. Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it in a way consistent with the Australian Privacy Principles, including through contractual protections.
10. Security
We protect information with encryption in transit, encryption at rest, hashed passwords, row-level access controls that separate each portal, restricted staff access on a need-to-know basis, signed time-limited links for file downloads, and regular patching. No system is perfectly secure; you also play a part by choosing a strong password and keeping it private.
11. Data breaches
If we become aware of an eligible data breach that is likely to result in serious harm, we will assess it promptly, take remedial action, and notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme. Where the breach concerns a coach's portal, we will also notify that coach so they can inform their clients.
12. How long we keep it
Account and portal content is kept while the account is open. If a subscription lapses the portal is locked, not deleted, so nothing is lost if you return. After an account is closed we retain content for 30 days to allow export, then delete or de-identify it, except where we must keep records for tax, accounting or legal reasons — generally up to seven years for financial records. Backups are cycled and overwritten on a rolling basis.
13. Access, correction and deletion
You may ask for a copy of the personal information we hold about you, ask us to correct anything inaccurate, or ask us to delete your account and its content. Email support@thegrowthandexitcollective.com. We respond within 30 days and do not charge for reasonable requests. We may need to verify your identity, and in limited cases permitted by the Privacy Act we may decline access and will explain why. Clients should contact their coach first; coaches may action most requests directly in their portal.
14. Children
The service is intended for business use by adults. We do not knowingly collect information from anyone under 18. If you believe a minor's information has been entered, contact us and we will remove it.
15. Complaints
If you think we have breached the Australian Privacy Principles, email support@thegrowthandexitcollective.com with the details. We will acknowledge within 5 business days and aim to resolve the matter within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.
16. Changes to this policy
We may update this policy from time to time. The current version is always published here with its last-updated date, and we will notify coaches by email of material changes.
17. Contact us
Privacy enquiries: support@thegrowthandexitcollective.com. Postal: The Growth & Exit Collective (ABN 68 632 325 761), Parcel Collect 90, Tingalpa QLD 4173, Australia. This policy is governed by the laws of Queensland, Australia.