Privacy Policy

1. Introduction and Data Controller

This Privacy Policy describes the practices of Beambeamfresh ("we", "us", or "our") regarding the collection and processing of personal data when you visit our website at beambeamfresh.world, use our contact forms, purchase educational products, or engage our lifestyle consulting services.

The data controller responsible for your personal information is:

Beambeamfresh
112–118 Grenfell Street
Adelaide SA 5000, Australia
Email: assist@beambeamfresh.world
Phone: +61 8 8223 5522

We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and where applicable, the General Data Protection Regulation (GDPR) for individuals located in the European Economic Area (EEA), United Kingdom, and Switzerland.

2. Personal Data We Collect

We may collect the following categories of personal data depending on how you interact with our services:

2.1 Information You Provide Directly

• Identity and contact details: full name, email address, telephone number, and postal address when provided through our contact form or during consulting enrolment.
• Communication content: the text of messages you submit via our contact form or email correspondence.
• Consulting intake information: details about your daily schedule, lifestyle preferences, and routine-related habits collected through our intake questionnaire. This information is used solely for preparing non-medical lifestyle plans and is not used for clinical assessment.
• Payment information: billing name and address when purchasing educational products or consulting services. Payment card details are processed by our third-party payment provider and are not stored on our servers.
• Consent records: your preferences regarding data processing, cookie consent, and marketing communications.

2.2 Information Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type, referring URL, pages visited, and time spent on pages.
• Cookie data: information stored through cookies and similar technologies as described in our Cookie Policy.
• Analytics data: aggregated usage patterns collected through analytics tools when you have provided consent for analytics cookies.

3. Purposes and Legal Bases for Processing

We process your personal data for the following purposes and on the following legal bases:

• Responding to inquiries: To acknowledge, review, and respond to messages submitted through our contact form. Legal basis: performance of pre-contractual steps at your request (GDPR Art. 6(1)(b)) and legitimate interest in managing customer communications (GDPR Art. 6(1)(f)).
• Delivering consulting services: To prepare personalised lifestyle plans, schedule sessions, and provide written summaries. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
• Processing payments: To invoice and process payments for services and products. Legal basis: performance of a contract (GDPR Art. 6(1)(b)) and compliance with legal obligations (GDPR Art. 6(1)(c)).
• Website operation: To maintain website functionality, security, and performance. Legal basis: legitimate interest (GDPR Art. 6(1)(f)) and, where applicable, consent for non-essential cookies (GDPR Art. 6(1)(a)).
• Analytics and improvement: To understand how visitors use our website and improve content and user experience, only when analytics cookies are accepted. Legal basis: consent (GDPR Art. 6(1)(a)).
• Marketing communications: To send informational updates about our services, only where you have opted in. Legal basis: consent (GDPR Art. 6(1)(a)).
• Legal compliance: To comply with applicable laws, respond to lawful requests from authorities, and protect our legal rights. Legal basis: legal obligation (GDPR Art. 6(1)(c)) and legitimate interest (GDPR Art. 6(1)(f)).

4. Data Retention Periods

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form submissions: retained for 24 months from the date of submission, unless a consulting relationship is established.
• Consulting client records: retained for 7 years from the date of the last session to comply with Australian record-keeping requirements and to support any legitimate follow-up inquiries.
• Payment and invoicing records: retained for 7 years in accordance with Australian taxation and accounting obligations.
• Cookie consent preferences: retained for 12 months, after which we will request renewed consent.
• Analytics data: retained in aggregated form for up to 26 months when analytics cookies are enabled.
• Marketing consent records: retained for the duration of your subscription plus 3 years after withdrawal of consent.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be associated with you.

5. Data Sharing and Third Parties

We do not sell your personal data. We may share information with the following categories of recipients where necessary:

• Service providers: hosting providers, email delivery services, payment processors, and analytics platforms that process data on our behalf under written data processing agreements.
• Professional advisers: accountants, auditors, and legal counsel bound by confidentiality obligations.
• Regulatory authorities: where required by law, court order, or governmental request.

All third-party processors are required to implement appropriate technical and organisational measures to protect your data and may only process it according to our documented instructions.

Where data is transferred outside Australia or the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or reliance on adequacy decisions.

6. Security Measures

We implement technical and organisational measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:

• HTTPS encryption for all data transmitted between your browser and our website.
• Access controls limiting personal data access to authorised personnel on a need-to-know basis.
• Secure storage of client records with password protection and regular backup procedures.
• Staff training on data protection obligations and confidentiality requirements.
• Regular review of security practices and incident response procedures.

While we take reasonable steps to protect your information, no method of electronic transmission or storage is completely secure. If you become aware of any security concern related to our services, please contact us immediately.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no compelling reason for continued processing.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
• Right to lodge a complaint: EEA residents may lodge a complaint with their local supervisory authority. Australian residents may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

To exercise any of these rights, contact us at assist@beambeamfresh.world. We will respond within 30 days. We may request verification of your identity before processing your request.

8. Children's Privacy

Our website and services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

9. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals. All consulting recommendations are prepared by human consultants based on information you provide.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The date at the top of this page indicates when the policy was last revised. Material changes will be communicated through a notice on our website. We encourage you to review this page periodically.

11. Contact Information

For privacy-related questions, requests, or complaints, please contact:

Privacy Contact — Beambeamfresh
112–118 Grenfell Street, Adelaide SA 5000, Australia
Email: assist@beambeamfresh.world
Phone: +61 8 8223 5522