Privacy policy

BRIONY KENNEDY — PRIVACY POLICY

Last updated: 30 October 2026

This policy explains how personal information is handled when you visit brionykennedy.com.au, make an enquiry, subscribe, buy a service or attend a session.

1. Who is responsible

The website and Briony Kennedy services are operated by Briony Alexandria Kennedy, a sole trader based in Melbourne, Victoria, Australia (ABN 46 973 308 349). The Buy Guide is the registered business name. References to “I”, “we”, “us” and “our” mean this business.

For privacy enquiries or requests, email letstalk@brionykennedy.com.au.

2. Information collected

Your name, email address, phone number, billing details, business name and website or social links.
Enquiries, booking details, appointment times, questionnaire answers, correspondence and service preferences.
Business reports, briefs and documents you choose to provide. These can contain personal information about you or other people.
Order, payment status, refund and transaction records. Payment details are processed by Shopify and the payment provider selected at checkout; we do not store complete payment card details ourselves.
During a call, your display name, voice, image, chat messages and information you share on screen. Recordings are made only as explained below.
Technical information such as IP address, browser, device, referral source, pages visited and cookie information.

Please share only information needed for the agreed service. Remove unnecessary customer or staff details from reports. Do not send passwords, payment card numbers, identity documents or sensitive personal information in a booking form or ordinary email. Contact me first if secure transfer arrangements are needed. If you provide information about another person, ensure you have authority to share it.

3. How information is collected and used

Information is collected directly through forms, checkout, bookings, email, calls and documents you provide; through the platforms used to deliver those services; and through cookies and similar technology.

We use it to respond to enquiries, assess service fit, take payment, schedule sessions, prepare for and deliver your service, send confirmations and reminders, provide agreed follow-up, maintain records, manage refunds, improve the website, protect against misuse and meet legal obligations.

You can browse without identifying yourself where practical. If required booking or service information is withheld, we may be unable to accept or properly prepare for your booking.

4. Bookings, Outlook and Microsoft Teams

Shopify hosts the store and checkout. Appointo manages appointment selection, booking questions and booking notifications. Microsoft Outlook/calendar and Microsoft Teams are used for scheduling and virtual sessions. Relevant booking information is shared with these providers to deliver your service. Calendar availability checks are used to avoid conflicting bookings; private calendar appointment details are not intended to be shown to other customers.

Please use the email address where you want to receive your appointment information. People you invite to a call may see your display name, contributions and any information you share with the meeting.

5. Session recording and consent

The Sounding Board Session offers a recording for your reference. You can choose a recorded or unrecorded call in the booking questions. Choosing an unrecorded call does not change the price or your access to the session and written summary. Other services are not recorded unless we separately agree.

Recording starts only after the participants have been told and have agreed. You may ask to pause or stop recording at any time. If another person attends, their agreement is also required. No recording or transcript will be used for testimonials, social media, training or public promotion without separate permission.

Where you choose a recording, it is shared privately by email link within two business days, subject to successful capture and processing. The link is provided for 30 days so you can save a copy. Recordings and any associated transcripts are removed from our active storage within 90 days of the session unless a longer period is agreed with you or reasonably required for a legal obligation or dispute. Copies in provider backups may remain until their normal deletion cycle. Your downloaded copy is your responsibility.

6. Service providers and other disclosures

Relevant information may be shared with hosting, booking, payment, email, communications, storage and website analytics providers; professional advisers where reasonably needed; and authorities where required or permitted by law. Providers receive information needed for their role. We do not sell personal information.

We do not share your confidential business reports or session recordings with other clients or publish them without separate permission. Public reviews or testimonials are used only with permission or as otherwise agreed.

7. Overseas processing

Our technology providers operate internationally. Information may be stored, processed or accessed outside Australia, including in Canada and the United States through Shopify and its providers, and the United States and other locations where Microsoft operates. Appointo and other providers may also use international hosting and support services. The countries involved depend on the provider, account configuration and service used, and a complete fixed country list is not practicable for every service.

See Shopify’s privacy policy and Microsoft’s privacy statement for their practices. Contact us before sharing information if you need further details about the providers used for your session.

8. Cookies and website measurement

Shopify and enabled integrations use cookies and similar technologies to operate checkout, remember preferences, secure the website and measure how it is used. Where enabled and permitted by your choices, analytics or advertising technologies may also measure campaigns and support relevant advertising.

You can manage cookies through your browser and any privacy preferences control displayed on the website. Blocking essential cookies may affect checkout or booking. Third-party platforms apply their own privacy settings and policies.

9. Marketing choices

Marketing messages are sent where you have subscribed, consented or another lawful basis permits them. Booking a service does not require subscribing to marketing. You can unsubscribe using the link in a marketing email or contact us. Necessary booking, payment and service messages may still be sent.

10. Storage, security and retention

We take reasonable steps to protect information from misuse, loss and unauthorised access, modification or disclosure, including limiting access to people and providers who need it. No online transmission or storage system is completely secure.

Enquiries, service documents and correspondence are kept only for as long as reasonably needed to provide the service, manage ongoing matters and meet legal or record-keeping obligations, then deleted or de-identified where practical. Order, tax and financial records may need to be retained longer. Recordings follow the timeframes in section 5. A deletion request does not override a legal retention obligation or remove information already included in necessary financial records.

11. Access, correction and deletion requests

Email letstalk@brionykennedy.com.au to request access to, correction of or deletion of personal information. Tell us enough to locate the relevant records. We may reasonably verify your identity before providing information or making changes.

We aim to respond within 30 days. If a request cannot be met in full, we will explain why and any available next steps, subject to applicable law. You can also use relevant Shopify or Microsoft account privacy controls for information those providers manage independently.

12. Privacy concerns and complaints

Contact us first at letstalk@brionykennedy.com.au with your concern and preferred contact details. We will investigate and aim to respond within 30 days. If you remain dissatisfied, you can contact the Office of the Australian Information Commissioner, which can explain whether the matter falls within its jurisdiction and what options are available.

If an incident affects your information, we will assess it and notify affected people and regulators where required by applicable law.

13. Changes to this policy

Updates will be published here with a revised date. Material changes to an existing agreed service will be communicated where appropriate. This policy does not limit any rights you have under applicable Australian law.