We may collect the following types of personal information:

• Contact details: Name, email address, phone number, mailing address

• Account & membership details: Username, password (encrypted), Coven membership status, preferences

• Booking & service details: Appointment times, service type (readings, healing, ceremonies, mentoring), notes or intentions you share

• Payment information: Processed securely via third-party providers (we do not store full credit card details)

• Communication & interaction data: Messages, emails, comments, livestream chat interactions, feedback, testimonials (with consent)

• Technical & usage data: IP address, browser type, device information, pages visited, cookies (see our separate Cookie Policy)

• Sensitive information (only when voluntarily provided): Details shared during readings, healing sessions, or spiritual work (e.g., personal stories, emotional states). We treat this with extra care.

We only collect information that is reasonably necessary for our functions and activities.

We collect personal information:

• Directly from you (when you book, sign up for The Coven, subscribe to newsletters, contact us, or participate in lives/events)

• Through our website, booking system, and community platforms (Squarespace, Discord, TikTok, Instagram)

• From third parties (e.g., payment processors or scheduling tools) with your consent or as permitted by law

We collect, hold, use, and disclose your personal information to:

• Provide and manage our spiritual services, readings, healing sessions, ceremonies, mentoring, and The Coven membership

• Process bookings, payments, and subscriptions

• Communicate with you (confirmations, reminders, updates, newsletters)

• Improve our website, offerings, and community experience

• Personalise your journey where possible

• Conduct marketing and promotions (with your consent or where permitted)

• Comply with legal obligations, resolve disputes, and enforce our policies

• Protect the safety and integrity of our community spaces

We will only use or disclose your information for the primary purpose it was collected, or for a related secondary purpose you would reasonably expect, or with your consent, or as required/ authorised by law.

We may disclose your personal information to:

• Service providers and contractors (e.g., Squarespace, payment gateways like Stripe/PayPal, scheduling tools, email platforms, Discord, hosting providers)

• Professional advisers (lawyers, accountants) where necessary

• Courts, regulators, or law enforcement as required by Australian law

All third parties are contractually required to handle your information securely and only for the purposes we specify. We do not sell your personal information.

Some of our service providers (e.g., Discord, TikTok, email tools) may be located outside Australia. When we transfer information overseas, we take reasonable steps to ensure it receives similar protection to the Australian Privacy Principles.

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. This includes encryption, access controls, secure servers, and regular reviews. However, no system is completely secure, and we cannot guarantee absolute security.

We keep your information only as long as necessary for the purposes outlined or as required by law. When no longer needed, we securely destroy or de-identify it.

You have the right to:

• Access the personal information we hold about you

• Correct any inaccurate or incomplete information

• Request deletion or restriction of your information (subject to legal obligations)

• Withdraw consent where we rely on consent (this may affect our ability to provide services)

• Opt out of direct marketing at any time

To exercise these rights, contact us using the details below. We will respond within a reasonable time (usually 30 days) at no cost in most cases.

If you have a privacy concern or complaint, please contact us first so we can try to resolve it quickly. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (OAIC).

See our separate Cookie Policy for details on how we use cookies and similar technologies.

We may update this Privacy Policy from time to time. The current version will always be available on our website with the “last updated” date. We encourage you to review it periodically. Significant changes will be notified where required by law.

If you have any questions about this Privacy Policy or our privacy practices, please reach out by way of the form below or write to us.

Postal address: P.O. Box 451, Broadbeach, QLD, 4218

— Rhys T. O’Leary Here and Now Oracle / Wicked Witch of Western Sydney perpelFLAME and Company