Privacy Policy
Last updated: 28 June 2026Lizzy Yates Alchemy respects your privacy and protects your personal information.
This policy explains how we collect, hold, use and disclose personal information.
Lizzy Yates Alchemy is operated by Lizzy Yates as a sole trader.
Throughout this policy, “Lizzy Yates Alchemy”, “we”, “us” and “our” refer to Lizzy Yates and the business operated under that name.
This policy applies when you:
visit our website
contact us
join our mailing list
receive SMS communications
purchase a product or service
book or attend a session
complete an intake form or questionnaire
participate in a program, course or event
otherwise interact with Lizzy Yates Alchemy
We handle information under applicable Australian and Victorian privacy laws.
These laws may include:
the Privacy Act 1988 (Cth)
the Australian Privacy Principles
the Health Records Act 2001 (Vic)
the Victorian Health Privacy Principles
the Spam Act 2003 (Cth)
1. Personal information we may collect
We only collect information reasonably needed for our business and services.
This information may include:
your name
your email address
your telephone number
your billing or postal address
your communication preferences
your booking or appointment details
your purchase and transaction history
your customer account details
information submitted through website forms
information included in enquiries or correspondence
feedback, reviews or testimonials
information required to provide a service
We may also collect technical information.
This information may include:
your IP address
your browser type
your device type
pages you visit
your referring website
website activity
cookie information
analytics information
2. Health and sensitive information
Some services may require health or sensitive information.
This information may include details about your:
physical health
mental or emotional wellbeing
medical history
medications
symptoms
disability
lifestyle
treatment history
current healthcare support
We only collect this information when reasonably necessary.
We obtain consent where required by law.
You are not required to provide unnecessary health information.
Limited information may affect our ability to provide certain services safely.
Health information receives additional legal protection.
We do not use health information for unrelated marketing.
3. How we collect information
We usually collect personal information directly from you.
This may occur when you:
complete a website form
purchase a product
book a service
join our mailing list
provide SMS consent
contact us by email
attend a session
complete an intake form
provide feedback
communicate through social media
We may also receive information through service providers.
These providers may support payments, bookings, email, SMS or digital delivery.
Website information may be collected automatically through cookies and analytics tools.
4. Remaining anonymous
You may browse our website without identifying yourself.
You may also contact us using a preferred name.
Some products or services require accurate identifying information.
This may be necessary for payment, delivery, safety or legal records.
5. Why we collect information
We may collect, hold and use information to:
provide products and services
process payments
deliver digital products
manage bookings
conduct sessions
communicate with you
respond to enquiries
provide customer support
maintain appropriate client records
personalise your experience
improve our website
improve products and services
manage our business
prevent fraud or misuse
meet legal obligations
maintain financial records
send marketing communications with consent
We will not use information for unrelated purposes without legal authority.
6. Payments
Payments are processed through trusted third-party payment providers.
These providers may include Stripe or another provider displayed during checkout.
Some products may also be purchased through Stan.
Squarespace commerce services may support future website purchases.
We do not generally receive or store complete payment card details.
Payment providers handle card details under their own privacy policies.
They may retain transaction information for security and legal purposes.
7. Digital products and customer access
We collect information needed to deliver digital products.
This may include your name, email address and purchase details.
Products may be delivered by email or through a customer platform.
Customer accounts may support courses, memberships or protected content.
We may also record product access and delivery information.
8. Email marketing
You may choose to receive emails from Lizzy Yates Alchemy.
These emails may include:
educational content
guided practices
business updates
new product announcements
event information
offers
promotions
Marketing emails require appropriate consent.
Purchasing or enquiring does not automatically create marketing consent.
Each marketing email will identify Lizzy Yates Alchemy.
Each marketing email will include an unsubscribe option.
You may withdraw your consent at any time.
Unsubscribe requests will be processed within legally required timeframes.
We may still send essential transaction or service messages.
These may include:
receipts
purchase confirmations
digital product delivery
booking confirmations
appointment information
important service updates
9. SMS and text messages
We may offer SMS communications.
SMS messages may include:
appointment reminders
booking information
purchase updates
service notifications
security messages
marketing messages
Marketing SMS messages will only be sent with appropriate consent.
Providing your phone number does not automatically create marketing consent.
This includes numbers provided during purchases, bookings or enquiries.
Marketing messages will identify Lizzy Yates Alchemy as the sender.
They will also include appropriate contact information.
Marketing messages will include a simple unsubscribe method.
This may include replying STOP or using another stated method.
We will honour unsubscribe requests within five working days.
Unsubscribing will not prevent essential service messages.
SMS communications may use trusted third-party providers.
Those providers may process your number and message information.
Their privacy policies also apply to their information handling.
10. Branded SMS sender identification
We may use a branded sender name for SMS communications.
A branded sender name displays our business name above the message.
From 1 July 2026, branded sender names require registration.
We will register any branded sender name where legally required.
An unregistered branded sender may appear as “Unverified”.
We will work with our SMS provider to maintain accurate registration details.
11. Cookies and analytics
Our website may use cookies and similar technologies.
Essential cookies support website security and normal operation.
Optional cookies may help us understand website performance.
Cookies may collect information about:
website visits
pages viewed
device type
browser type
general visitor behaviour
referral sources
We may use Squarespace Analytics.
We may later use Google Analytics or advertising tools.
We will update this policy when our tracking practices materially change.
A cookie consent banner may be used where appropriate.
You may control cookies through your browser settings.
Blocking cookies may affect some website functions.
12. When we disclose information
We do not sell or rent personal information.
We may disclose information to trusted service providers.
These providers may include:
Squarespace
Stan
Stripe
payment providers
booking platforms
email marketing platforms
SMS providers
cloud storage providers
analytics providers
accountants
professional advisers
technology support providers
Providers only receive information needed for their role.
We may also disclose information:
with your consent
when required by law
to address a serious threat
to investigate suspected fraud
to protect legal rights
during a business transfer or restructure
when otherwise permitted by law
Health information will only be disclosed where legally authorised.
13. Overseas processing
Some service providers operate outside Australia.
Personal information may be processed or stored overseas.
Likely locations may include the United States.
Other locations may depend on each provider’s infrastructure.
We select reputable service providers.
We also review available privacy and security information.
Where required, we take reasonable steps regarding overseas information handling.
Overseas privacy protections may differ from Australian protections.
14. Information security
We take reasonable steps to protect personal information.
These steps may include:
password-protected accounts
restricted access
secure service providers
software updates
authentication controls
secure payment processing
appropriate record management
No online system can guarantee complete security.
Please avoid sending highly sensitive information through unsecured email.
Contact us before emailing sensitive documents.
15. Data breaches
We take suspected privacy breaches seriously.
We will assess suspected breaches promptly.
We will take reasonable steps to reduce possible harm.
We will notify affected people when legally required.
We will notify relevant regulators when legally required.
16. How long we retain information
We retain information while reasonably necessary.
Information may also be retained for:
service delivery
legal obligations
taxation requirements
dispute management
insurance requirements
professional record-keeping
client safety
Health records may require longer retention under Victorian law.
Adult health records may require seven years of retention.
Records involving minors may require retention until age 25.
When information is no longer required, we take reasonable steps to destroy it.
Information may instead be permanently de-identified where appropriate.
17. Accessing your information
You may request access to personal information we hold.
Please email:
We may need to confirm your identity.
We will respond within a reasonable period.
Access may be limited where permitted by law.
We will explain any lawful refusal.
A permitted administrative fee may apply in limited circumstances.
We will explain any fee before processing your request.
18. Correcting your information
Please contact us if your information is inaccurate or incomplete.
You may request that we update or correct it.
We take reasonable steps to maintain accurate information.
19. Reviews and testimonials
We may invite customers to provide feedback or testimonials.
We will request permission before publishing identifying information.
Testimonials may use a first name, initials or another agreed identifier.
You may request removal of a published testimonial.
We will consider your request within a reasonable period.
20. Social media and external websites
Our website may link to social media or external websites.
Those services operate under their own privacy policies.
We are not responsible for external privacy practices.
Public comments may be visible to other users.
Please avoid sharing sensitive information publicly.
21. Children and young people
Our website, products and services generally support adults.
A parent or guardian should contact us regarding anyone under 18.
We do not knowingly collect children’s information without appropriate authority.
22. Automated decision-making
We do not currently make significant automated decisions about individuals.
This includes decisions affecting legal rights or significant personal interests.
We will update this policy if that practice changes.
23. Privacy complaints
Please contact us first regarding any privacy concern.
Email:
Please include enough information to explain your concern.
We will acknowledge and investigate your complaint.
We will respond within a reasonable period.
You may contact the Office of the Australian Information Commissioner.
Victorian health privacy complaints may involve the Health Complaints Commissioner.
24. Changes to this policy
We may update this Privacy Policy.
Updates may reflect business, legal or technology changes.
The current version will appear on this website.
The latest update date will appear at the top.
25. Contact
For privacy enquiries, access requests or complaints, contact:
Lizzy Yates Alchemy
Email: hello@lizzyatesalchemy.com
Location: Victoria, Australia