The short version. I collect only what I need to work with you and keep in touch. I don't sell or rent your information. Your sensitive information is only handled in commercial, enterprise-grade AI tools that don't use it for training. This website uses no tracking or advertising cookies. You can ask to see, fix or delete what I hold about you at any time.
1. Who I am
This policy covers Your Dream Lab, run by Michael (Mike) Hunt in Noosa, Queensland (ABN 26 318 399 882). "I" and "me" mean Mike and Your Dream Lab.
As a small business I may not be legally required to follow the Australian Privacy Principles (APPs) in the Privacy Act 1988. I follow them anyway, because it's the right thing to do and it's what I advise my clients to do.
2. What I collect
| When | What |
|---|---|
| You contact me or book a session | Name, email, phone, business name, what you'd like help with |
| You join the Explorer call, a course or my mailing list | Name, email, and your attendance or course progress |
| We work together | Business details, notes from our sessions, project documents, invoices and payment records |
| You pay online | Payment details are handled by the payment provider. I don't see or store full card numbers |
| You visit this website | Standard technical information such as IP address, browser and pages requested, recorded by the hosting service for security and performance |
| You give feedback or a testimonial | Your words and, if you agree, your name, photo or video |
I don't need sensitive information such as health details to work with you, and I won't ask for it. If you share some anyway (for example in a coaching session), I'll only use it for that purpose and treat it with extra care.
You can deal with me without giving your name for general questions, but I'll need contact details to book or deliver a service.
3. How I use it
- to reply to you and deliver the services you've asked for;
- to run bookings, invoicing, payments and records I have to keep by law (for example tax records);
- to send session reminders, course access and updates about work we're doing;
- to send occasional news and invitations, if you've signed up or are a client (see section 10); and
- to improve my services, using feedback you've given me.
I won't use your information for anything else unless you'd reasonably expect it, you agree, or the law requires it. I never sell, rent or trade personal information.
4. Client business information
When I train you or manage an AI project, I may see your business's documents, systems and data. That can include information about your customers and staff.
- I use it only to do the work you've asked for, and I treat it as confidential (see my terms).
- Where possible we work in your accounts, on your devices, so the information stays with you.
- I ask only for the access I need, and you can remove it at any time. When a project ends I return or delete copies I hold, unless I need to keep a record by law.
- You remain responsible for your own customers' and staff's information, including having the right to share it with me and with any supplier you choose.
5. AI tools and your information
I use AI tools in my own business, and I'm careful about it:
- Sensitive or confidential information (personal details, client data, financial or commercial information) is only processed in enterprise-grade AI tools whose terms say my inputs aren't used to train their models.
- For general work that involves no sensitive information, such as drafting outlines or researching public topics, I may use other AI tools.
- Before I put any client information into an AI tool, I remove names and identifying details where I can.
- I may use AI to help draft documents such as reports or scopes of works. I review everything myself before you see it.
- AI note-takers or recording tools are only used in our sessions if you agree first.
6. Automated decisions
I don't use computer programs, AI included, to make decisions about you that could significantly affect your rights or interests. Every decision about my services, such as who I work with or what I charge, is made by me personally. If that ever changes, I'll update this policy first and explain what information is used and how.
7. Who I share it with
I share personal information only as needed to run my business, with services that are bound by their own privacy and security terms:
- Email, calendar and file storage (Google Workspace)
- Customer management, bookings, email and course delivery (GoHighLevel)
- Payment processing (the payment provider used at checkout, such as Stripe)
- Video calls (Google Meet, if we meet online)
- Website hosting (Cloudflare)
- My accountant or bookkeeper, for tax and financial records
I'll share your information with a supplier, lawyer or other adviser for your project only with your agreement. I may also disclose information if the law requires it, for example to a government agency or court.
8. Overseas storage
Some of the services above store or process information outside Australia, mainly in the United States. Where I can choose, I pick Australian or similarly protective locations and services with strong security and privacy commitments. By using my services you agree that your information may be held overseas in this way. If you'd prefer something specific is kept off a particular service, tell me and I'll do my best to accommodate it.
9. This website, cookies and videos
- No tracking or advertising cookies. This website doesn't use Google Analytics, Facebook pixels or advertising trackers. If I add privacy-friendly analytics later (such as Cloudflare Web Analytics, which doesn't use cookies), I'll update this policy.
- Hosting. The site is hosted by Cloudflare, which records basic technical information to keep the site fast and secure.
- Fonts and video thumbnails. The site loads fonts from Google Fonts and some video thumbnail images from YouTube. Your browser contacts Google to fetch them, which shares your IP address with Google.
- Videos. Videos only load when you press play. They use YouTube's privacy-enhanced mode, but once a video plays, YouTube's own privacy policy applies.
- Links. Links to other websites are covered by those sites' privacy policies, not this one.
10. Emails and marketing
I'll only send you news, tips and invitations if you've signed up, or if you're a client and it's related to what we've done together. Every email has an unsubscribe link, and you can also just tell me to stop. Unsubscribing from news doesn't stop messages about work we're currently doing together.
11. Security and how long I keep it
- I use strong passwords, two-factor authentication and up-to-date devices, and limit who can access information.
- I keep personal information only as long as I need it. Financial and tax records are kept for at least five years, as Australian tax law requires. Other records are reviewed and deleted or de-identified when no longer needed.
- If a data breach is likely to cause you serious harm, I'll tell you as soon as I can and explain what I'm doing about it. Where the law requires, I'll also notify the Office of the Australian Information Commissioner (OAIC).
12. Access, correction and deletion
You can ask me at any time to:
- tell you what personal information I hold about you and give you a copy;
- correct anything that's wrong or out of date; or
- delete it, unless I have to keep it by law.
Email mike@yourdreamlab.org and I'll respond within 30 days, usually much sooner. There's no charge. I may need to confirm who you are first.
13. Complaints
If you think I've mishandled your information, please tell me first at mike@yourdreamlab.org or SMS 0481 199 606. I'll respond within 30 days. If you're not satisfied with my response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
14. Changes to this policy
I'll update this policy when my services, tools or the law change. The date at the top shows when it was last updated. If I make a significant change that affects how I use information you've already given me, I'll let you know.