Privacy Policy

1. Who we are

Simplify with Sarah (ABN: 83 231 952 046) is a sole trader business operating from Sydney, Australia. This policy explains how we collect, use, store, and protect your personal information when you visit https://simplifywithsarah.com.au or use our services.

We are bound by the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and we also comply with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) where applicable to our users.

2. Information we collect

Information you provide directly

• Name and email address (when you subscribe, use a diagnostic tool, or contact us)
• Responses to diagnostic questionnaires and intake forms
• Payment information (processed securely by Stripe; we do not store card details)
• Any other information you voluntarily provide via email or contact forms

Information collected automatically

• Device type, browser type, operating system
• IP address (anonymised where possible)
• Pages visited, time on site, referring URL
• Cookies and similar tracking technologies (see Section 8)

3. How we use your information

We use your personal information to:

• Deliver diagnostic reports, tools, and purchased resources to you
• Send you email communications you have opted into (newsletters, playbook updates)
• Process payments and fulfil orders
• Improve our website, tools, and services
• Respond to your enquiries
• Comply with legal obligations

We will never sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Legal basis for processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your data under the following legal bases:

• Consent: When you opt in to receive communications or submit a diagnostic form.
• Contractual necessity: When processing is required to deliver a service you have purchased.
• Legitimate interest: To improve our services and ensure website security, where this does not override your rights.
• Legal obligation: Where we are required by law to retain or disclose information.

5. Third-party services

We use the following third-party services that may process your data:

• Stripe: Payment processing (PCI DSS compliant). Stripe Privacy Policy
• Supabase: Database and authentication infrastructure. Supabase Privacy Policy
• Google Analytics: Website analytics (anonymised IP enabled where applicable). Google Privacy Policy

We only share the minimum data required for these services to function. Each provider maintains their own privacy policy and data handling practices.

6. Data storage and security

Your data is stored on secure servers. While some data may be processed on servers located outside Australia (including the United States and the European Union), we ensure all providers meet equivalent privacy standards through contractual safeguards (such as Standard Contractual Clauses for GDPR).

We implement reasonable technical and organisational measures to protect your information from unauthorised access, loss, or misuse. No method of electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

• Email subscriber data: Until you unsubscribe
• Diagnostic and tool responses: 12 months from submission, then anonymised or deleted
• Purchase records: 7 years (as required by Australian tax law)
• Website analytics: 26 months (Google Analytics default)

8. Cookies

Our website uses cookies and similar technologies to:

• Remember your preferences and session state
• Understand how you use our site (analytics)
• Improve site performance

You can control cookies through your browser settings. Disabling cookies may affect the functionality of some tools on this site.

We do not use cookies for third-party advertising or retargeting.

9. Your rights

Under Australian Privacy Law (APPs)

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached

Under GDPR (EEA/UK residents)

You additionally have the right to:

• Request erasure of your data ("right to be forgotten")
• Restrict or object to processing
• Data portability (receive your data in a structured, machine-readable format)
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

Under CCPA (California residents)

You have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

10. Children's privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

11. Affiliate links

Some links on this site are affiliate links. If you purchase a product or service through one of these links, we may earn a small commission at no additional cost to you. All recommendations are independently researched and tested. Affiliate relationships do not influence our recommendations.

12. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact us

If you have questions about this privacy policy, wish to exercise your rights, or have a complaint, contact us at: