Privacy Policy

1. Who this policy covers

This Privacy Policy explains how Enable Coaching (ABN 49 269 055 191), operator of the Enable Strategy Lab portal (the "Portal"), collects, uses, discloses and stores personal information. It applies to anyone who creates an account, uses a Lab, enquires about the Portal, or otherwise gives us their information. By using the Portal you agree to the collection and use of information as described here, alongside our Terms and Conditions.

Enable Coaching has chosen to handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) as a matter of good practice, whether or not those principles technically apply to a business of our size at any given time. Nothing here should be read as a concession, one way or the other, about whether the Act applies to Enable Coaching.

2. What we collect

We collect information you give us directly, information generated by your use of the Portal, and limited information from third parties involved in running it:

Account and profile details - name, email, mobile number, password (stored encrypted via our authentication provider, never in plain text), profile photo, and social links you choose to add.

Business information - details you enter about your business (name, industry, financials, team structure, and similar) when using a Business Profile, Lab, or Plan. This is information you provide voluntarily to get a useful output from the tool.

Content you create - the inputs, answers, and documents you generate inside Labs, Plans, and Academy activities, plus AI-generated outputs produced from them.

Payment information - if you purchase a Lab or The Program, payment is processed by Stripe. We receive confirmation of payment and limited billing metadata; we do not receive or store your full card number.

Usage and technical data - pages visited, features used, lesson/course progress, login timestamps, IP address, device and browser type, collected automatically as you use the Portal.

Communications - messages you send us, feedback you submit, and correspondence through the Portal or by email.

3. How we use it

We use personal information to: create and administer your account; provide the Labs, Plans, Academy content and any coaching engagement; process payments and manage billing; respond to enquiries and support requests; maintain and improve the Portal; understand how the Portal is used, in aggregate and de-identified form, for analytics and product development; detect and prevent fraud, abuse, and security incidents; meet our legal and regulatory obligations; and, where you've opted in, send you direct marketing (see section 5).

Some inputs and outputs you create inside the Labs are processed by third-party AI providers to generate results for you (see section 7). As part of the coaching relationship, Enable Coaching's owner and any assigned coach may view the full content of work you create inside the Portal to support you and improve the service - this is disclosed in our Terms and Conditions and is not shared outside Enable Coaching except as described in this policy.

4. Cookies and similar technology

The Portal uses strictly necessary cookies and similar technology to keep you signed in, remember preferences, and protect against bots (including Google reCAPTCHA, which has its own privacy policy). We may also use basic analytics tools to understand overall usage patterns. You can control cookies through your browser settings, though blocking necessary cookies may stop parts of the Portal working correctly.

5. Direct marketing

From time to time, Enable Coaching may want to contact you directly with things it believes will be useful - new Labs, offers, events, or general business tips. We only do this if you've ticked the marketing consent checkbox at signup (or opted in some other clear way later); it is not a condition of creating an account or using the Portal, and leaving it unticked does not affect your access to anything you've paid for.

Every marketing message we send includes a clear way to unsubscribe, and you can also withdraw consent at any time by contacting us directly. Once you unsubscribe or withdraw consent, we'll stop sending direct marketing as soon as reasonably practicable. This doesn't affect transactional or account-related messages we need to send you regardless (for example, confirmation emails, receipts, or notices about your account or a Lab you've purchased) - those aren't marketing and aren't covered by the opt-in or an unsubscribe request.

6. Who we share it with

We don't sell personal information. We share it only where necessary to run the Portal, namely with: our hosting and database provider (Supabase); our application hosting provider (Vercel); our payment processor (Stripe); AI providers used to generate Lab content (currently Anthropic); Google, for bot protection (reCAPTCHA); and any professional advisor, regulator, or authority where we're required to by law, or where necessary to establish, exercise or defend a legal claim. Where Enable Coaching is sold or restructured, personal information may be transferred to the incoming operator as part of that transaction, subject to it continuing to be handled in line with this policy.

7. Overseas disclosure

Some of the providers listed in section 6 store or process data outside Australia, including in the United States, as part of their standard infrastructure. By using the Portal you acknowledge that personal information may be handled overseas as a result. We choose providers with their own privacy and security commitments, but we don't control their systems directly and can't guarantee the specific privacy standards of every jurisdiction their infrastructure runs in.

8. Security

We take reasonable technical and organisational steps to protect personal information against misuse, interference, loss, and unauthorised access, modification or disclosure - including access controls, encryption in transit, and relying on providers with their own security practices. No system is completely secure, and we can't guarantee the Portal or any provider we use will be free of security incidents. If a data breach occurs that we reasonably believe is likely to result in serious harm, we'll notify affected individuals and the OAIC in line with our legal obligations at the time.

9. Retention

We keep personal information for as long as your account is active, and afterwards for as long as reasonably necessary for the purposes it was collected for, to meet legal, accounting, or reporting obligations, or to resolve disputes and enforce our agreements. When information is no longer needed for these purposes, we take reasonable steps to delete or de-identify it.

10. Access and correction

You can access and update most of your account and business profile information directly inside the Portal at any time. You can also ask us for a copy of the personal information we hold about you, or ask us to correct it, by contacting us using the details in section 12. We'll respond within a reasonable time. We may need to verify your identity first, and there may be circumstances where we're not required to give access (for example, where it would unreasonably impact the privacy of others) - if we decline a request, we'll tell you why.

11. Complaints

If you have a concern about how we've handled your personal information, contact us first using the details in section 12 so we can try to resolve it directly. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

12. Contact and changes to this policy

For any privacy question, access request, or to withdraw marketing consent, contact Micheal directly through the contact details you were given when you joined. We may update this policy from time to time as the Portal evolves; the current version always applies from the date shown at the top of this page, and we'll make reasonable efforts to flag material changes here or by email.