Privacy Policy

3. Privacy Policy

3.1 Our commitment and applicable laws

Litza respects your privacy and handles personal information in accordance with applicable privacy laws, including the Privacy Act 1988 (Cth), the Australian Privacy Principles and, where applicable, the Health Records and Information Privacy Act 2002 (NSW) and its Health Privacy Principles. Because spiritual mentoring or complementary services may involve emotional, psychological or health-related information, Litza adopts these protections as a careful operating standard whether or not every provision applies to every activity.

3.2 Information we may collect

• Identity and contact details, such as name, email address, telephone number and billing details.• Booking and transaction information, including service selected, appointment history and payment status. Full card details are generally handled by the payment provider rather than Litza.• Information you choose to share for a reading or workshop, such as date of birth, relationships, personal circumstances, spiritual beliefs, goals and questions.• Sensitive or health information you voluntarily provide, including emotional, psychological or health-related information, where it is reasonably necessary and you consent.• Information about a child or another person provided by an authorised adult, limited to what is reasonably necessary for the requested service.• Communications, feedback and complaints.• Website and device information, such as IP address, browser, pages visited, referral source and cookie data, where collected by the Website or its service providers.

3.3 How information is collected

Information may be collected directly from you through the Website, booking and payment forms, email, telephone, video call, in-person services, workshops, consent forms and correspondence. Information may also be received from an authorised parent, guardian, carer or other person, from booking/payment providers, or automatically through lawful website technologies. Where reasonable and practicable, Litza collects information directly from the person concerned.

3.4 Why we collect, use and disclose information

• To respond to enquiries, manage bookings, process payments and provide requested services.• To personalise readings or workshop participation and maintain appropriate service notes.• To communicate about appointments, changes, credits, purchases and support.• To operate, secure, analyse and improve the Website and services.• To keep financial, business and legal records and resolve complaints.• To send marketing only where consent or another lawful basis exists, with a simple unsubscribe method.• For another purpose disclosed at collection, with consent, or where required or authorised by law.

Litza will not use sensitive information for direct marketing. Litza does not sell personal information.

3.5 Consent and information about children

Litza seeks consent before collecting sensitive information unless an exception applies. A parent or legal guardian must consent to participation by a 16- or 17-year-old. When an adult supplies information about a child who is not attending, the adult confirms that they have lawful authority or an appropriate basis to do so. Litza will collect only information reasonably necessary for the service and may refuse unnecessary, intrusive or unclear third-party information.

3.6 Service providers and disclosure

Litza may disclose information only as reasonably necessary to providers supporting the business, including GoDaddy for the Website and website bookings, Square for payments and bookings, ClassBento and Eventbrite for workshop advertising and ticketing, and any other booking marketplace clearly identified when you make a booking. Information may also be handled by email, cloud-storage, video-call and analytics providers, professional advisers and venues. Providers may handle information under their own privacy policies and contractual obligations. Litza may also disclose information with consent, to protect safety, to investigate unlawful activity, or where required or authorised by law.

3.7 Overseas handling

Some technology providers may store or process information outside Australia. Based on the providers currently used, information may be handled in countries including the United States, Canada, Japan, Ireland, France, Spain and the United Kingdom, as well as other locations identified in a provider’s current privacy notice. Provider locations may change. Litza will take reasonable steps required by law when disclosing personal information overseas.

3.8 Cookies and analytics

The Website may use essential cookies for security, booking and site operation and may use analytics or marketing technologies if enabled. Browser settings can block or delete cookies, although some functions may not work. If non-essential advertising or tracking tools are used, Litza should display an appropriate cookie notice and consent choices and update this policy with the actual tools used.

3.9 Marketing communications

Litza will send commercial email or SMS marketing only with consent or where otherwise permitted by law. Marketing messages will identify the sender and include a functional unsubscribe option. Unsubscribe requests will be actioned within the period required by law. Booking confirmations and other service messages may still be sent where necessary to provide a service.

3.10 Security and data breaches

Litza takes reasonable technical and organisational steps to protect information from misuse, interference, loss and unauthorised access, modification or disclosure. No internet or storage system is completely secure. Where a data breach is suspected, Litza will contain and assess it and, where the Notifiable Data Breaches scheme or another law requires, notify affected people and the Office of the Australian Information Commissioner.

3.11 Retention and destruction

Personal information is kept only as long as reasonably needed for the purposes described, to meet tax and legal obligations, manage disputes and maintain appropriate business records. Litza periodically reviews booking records, tax records, service notes, consent records and marketing lists. When information is no longer required, Litza will take reasonable steps to destroy or de-identify it, subject to legal retention requirements.

3.12 Access and correction

You may request access to personal information Litza holds about you or ask for it to be corrected by contacting hello@litza.com.au. Litza may verify identity and will respond within a reasonable period. If access or correction is refused, Litza will provide reasons where required and explain available complaint options. Access to information involving another person, including a child, may be limited to protect privacy and safety.

3.13 Privacy complaints

Send a privacy complaint to hello@litza.com.au with enough detail to investigate. Litza will acknowledge the complaint and aim to provide a substantive response within 30 days. If you remain dissatisfied, you may contact the Office of the Australian Information Commissioner at oaic.gov.au. For a matter within the NSW health-privacy regime, you may also be able to contact the Information and Privacy Commission NSW at ipc.nsw.gov.au.

3.14 Changes and contact

This policy may be updated when practices or laws change. The current version and effective date will appear on the Website. Privacy contact: Litza — a NUMB MINDZ offering, hello@litza.com.au. Litza operates online and does not publish a residential address. Additional contact details can be provided where reasonably required.