Privacy Policy

Asheya Alchemy — January 2026

Asheya Alchemy is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information. We follow a principle of data minimisation — collecting only what we need to provide our services.

1. Who We Are

Asheya Alchemy PTY LTD, ABN; 78697630096 operated by Dean and Cat, is the data controller responsible for your personal information. We are based in South Australia and comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, password, and optional profile details when you create an account.

Payment Information: Billing details and transaction history processed through Stripe and/or PayPal or Direct Debit (on request). We do not store complete card numbers — these are held securely by our payment processors.

Membership Information: Your membership tier, enrolment credits balance, subscription dates, and renewal status.

Certification Records: Certifications earned, attunement dates, and practitioner credentials.

Community Content: Posts, comments, and messages you share in forums and community spaces (you control what you share).

Communications: Emails, support requests, and other communications with us.

2.2 Information Collected Automatically

Usage Data: Pages visited, courses accessed, and learning progress (necessary to track your course completion).

Device Information: IP address (anonymised where possible), browser type, and device type for security and troubleshooting.

Cookies: See our Cookie Policy for detailed information. We use essential cookies by default; analytics cookies only with your consent.

3. How We Use Your Information

We use your personal information only for the following purposes:

Purpose	What This Means
Service Delivery	Providing access to courses, managing your membership, delivering certifications, processing payments
Account Management	Tracking your credits, managing subscriptions, recording certification progress
Communication	Sending essential updates about your account, courses, and membership (you can opt out of marketing emails)
Platform Improvement	Analysing aggregated, anonymised usage patterns to improve our content and features
Legal Compliance	Meeting tax obligations, responding to lawful requests, preventing fraud

4. What We Don’t Do

We do not sell your personal information to anyone.

We do not share your data with advertisers or data brokers.

We do not use your information for purposes unrelated to providing our services.

We do not collect more information than necessary.

5. Sharing Your Information

We may share your information only in these limited circumstances:

Service Providers: Third parties who help us operate our platform (hosting, payment processing, email delivery). These providers are contractually bound to protect your data and use it only for the services they provide to us.

Community Features: Your profile name and content you choose to post publicly will be visible to other members. You control what you share.

Legal Requirements: When required by law, court order, or to protect our rights, safety, or property. We will notify you if legally permitted to do so.

Business Transfers: In the event of a merger or acquisition, your information may be transferred. You will be notified and given the opportunity to delete your account.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information:

SSL/TLS encryption for all data in transit
Encrypted storage for sensitive data
Secure payment processing through PCI-compliant providers
Access controls limiting who can view your data
Regular security reviews

No system is perfectly secure. We cannot guarantee absolute security but will take reasonable steps to protect your information.

7. Data Breach Notification

In the unlikely event of a data breach that is likely to result in serious harm to you, we will:

Notify you by email within 72 hours of becoming aware of the breach
Describe the nature of the breach and what data may be affected
Explain what steps we are taking to address the breach
Provide recommendations for steps you can take to protect yourself
Notify the Office of the Australian Information Commissioner as required by law

8. Data Retention

We retain your information only as long as necessary:

Data Type	Retention Period	Reason
Account profile	While account is active + 2 years	Account reactivation
Payment records	7 years after transaction	Australian tax law
Certification records	While certification valid + 7 years	Credential verification
Community posts	Until you delete or request removal	Your control

9. Your Rights

Under Australian Privacy Principles, you have the right to:

Access: Request a copy of the personal information we hold about you. We will respond within 30 days.

Correction: Request correction of inaccurate or incomplete information. We will respond within 30 days.

Deletion: Request deletion of your account and associated data, subject to legal retention requirements. We will process deletion requests within 30 days.

Data Export: Request a copy of your data in a portable format.

Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs.

To exercise these rights, contact us at contact@asheyaalchemy.com

10. International Data Transfers

Some of our service providers may be located outside Australia. By using our platform, you acknowledge that your information may be transferred to countries with different data protection laws. We ensure that any overseas recipients are bound by contractual obligations to protect your information consistent with the Australian Privacy Principles.

11. Children’s Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. For material changes, we will notify you by email at least 30 days before the changes take effect, giving you the opportunity to review the changes and, if you disagree, to close your account before they apply.

13. Contact Us

For questions about this Privacy Policy or to exercise your rights:

Asheya Alchemy

Privacy Officer: Cat O’Hara

Email: contact@asheyaalchemy.com

Website: asheyaalchemy.com

You may also contact the Office of the Australian Information Commissioner:

Website: www.oaic.gov.au

Phone: 1300 363 992

Last Updated: January 2026