Privacy Policy

5. How we collect it

Most of the information we hold comes directly from you ~ when you book a session, complete an intake form or assessment, attend a workshop, email or message us, or fill in a form on our website. Sometimes we receive information from someone else, such as an employer who engages us to work with their team, or a parent sharing details for a Cosmic Safari reading. Where that happens, we take reasonable steps to make sure you know we hold it.

6. How we use it

We use your personal information to:

• deliver the coaching, consulting, assessments, workshops and resources you or your organisation have engaged us for
• prepare your reports, session materials and personalised insights
• schedule sessions, communicate with you and provide support between sessions
• manage invoicing, payments and our business records
• reflect on and improve the quality of our services
• send you news, resources and invitations, where you have agreed to receive them
• meet our legal, tax and insurance obligations.

We do not sell your personal information, and we do not use it for any purpose you would not reasonably expect without first asking you.

7. When your organisation engages us

When an employer engages Leid by Design for leadership coaching, team workshops, profiling, recruitment or onboarding support, we are clear with everyone involved about what is shared and with whom.

The content of your individual coaching conversations stays between you and us. Your individual assessment results are shared with your organisation or team only where that is part of the agreed program and you have been told so beforehand ~ for example, when team members exchange UOS reports as part of a team alignment session or onboarding process. Otherwise, we report back to organisations through themes, aggregated insights and agreed progress updates, without disclosing what you have shared in confidence.

8. Confidentiality and its limits

Confidentiality is the foundation of our work. There are a small number of situations where we may need to disclose information without your consent, as permitted or required by law. These include where we reasonably believe disclosure is necessary to lessen or prevent a serious threat to your life, health or safety or that of another person, where there is a risk of harm to a child, or where we are required to do so by law, a court or a regulator. If this ever arises, we will share only what is necessary and, wherever it is safe and appropriate, we will talk with you first.

9. Who we share it with

We use a small number of trusted providers to run our business, and they may handle your information on our behalf. These include:

• email, calendar, document storage and video meeting tools (such as Google Workspace)
• online booking and scheduling tools (such as Calendly)
• our website platform and its forms (Webflow)
• workspace, note-taking and design tools (such as Notion and Canva)
• assessment platforms used to administer profiles such as DISC and Working Genius
• payment processors, accounting software and professional advisers such as our accountant, lawyer and insurer.

We share only what each provider needs to perform its service. Several of these providers store data on servers outside Australia, including in the United States. Where we use them, we take reasonable steps to choose reputable providers with strong security and privacy practices that are consistent with the Australian Privacy Principles.

10. Technology and AI-assisted tools

We may use AI-assisted tools to support behind-the-scenes work, such as drafting resources, structuring session notes or preparing reports. Lily reviews everything that reaches you, and every insight we give you is shaped by human judgement. We do not make decisions that significantly affect you using automated processes alone. Where we use these tools with client information, we choose providers whose commercial terms do not permit your information to be used to train their models, and we share no more than the task requires. If you would prefer we did not use AI-assisted tools with your information, just let us know.

11. Staying in touch

If you join our mailing list, download a resource or attend an event, we may send you newsletters, resources and invitations. Every marketing email includes a simple way to unsubscribe, and you can also ask us to stop at any time. We will never add your details to a mailing list simply because you are a coaching client.

12. Our website

Our website is hosted on Webflow. Like most websites, it may use cookies and similar technologies to keep the site working properly and to understand, in general terms, how visitors use it. You can manage or block cookies through your browser settings, although some parts of the site may not work as intended if you do. Our website may link to third-party sites, such as booking or payment pages, which have their own privacy policies.

13. How we store and protect your information

We keep your information in secure, password-protected digital systems with multi-factor authentication where available, limit access to those who need it to support you, and avoid keeping paper records wherever possible.

We keep personal information only for as long as we need it. Coaching notes and assessment results are generally kept for up to seven years after our work together ends, so we can support you if you return and meet our professional and legal obligations. Financial records are kept for the periods required by Australian tax law. After that, we securely delete or de-identify the information. You can ask us to delete your information sooner, and we will do so unless the law requires us to keep it.

14. If something goes wrong

If we become aware that your personal information has been lost or accessed without authorisation, we will act quickly to contain it and assess the risk. If the breach is likely to result in serious harm to you, we will let you know, explain what happened and what we are doing about it, and notify the Office of the Australian Information Commissioner where the law requires.

15. Accessing and correcting your information

You can ask to see the personal information we hold about you, and ask us to correct anything that is inaccurate, out of date or incomplete. Just email us. We will respond within 30 days. In rare cases the law allows us to decline a request, and if that happens we will explain why in writing.

16. Questions and complaints

If you have a question about this policy or a concern about how we have handled your information, please contact us first. We take every concern seriously and will aim to respond within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

17. Changes to this policy

We review this policy from time to time, particularly as Australian privacy law continues to evolve. The current version will always be available on this page, with its effective date shown at the top. If we make a significant change that affects how we handle your information, we will let current clients know.