Protecting Your Privacy at Culture of One

Last updated: 6 August 2026

This policy explains what personal information Culture Of One Pty Ltd (ABN 44 687 909 155) collects, why we collect it, who we share it with, and what you can do about it. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. Who we are

Culture Of One Pty Ltd (ABN 44 687 909 155)
442 Canning Street, Carlton North VIC 3054, Australia
shane@cultureofone.com.au

We provide business advisory, education and management-information services to allied health practice owners.

2. What information we collect

Information you give us

• Contact details — name, email address, phone number, business name, and where relevant your postal address.
• Purchase details — what you bought and when. Card details go directly to our payment processor; we never see or store your full card number.
• Enquiry and application details — anything you tell us in a form, an email, a call booking or a strategy call.
• Community activity — posts, comments and profile information on our members’ platform.

Business information from advisory clients

If you engage us for advisory work, you may give us detailed information about your practice — including billings, payroll, financial statements and workforce records. That information can include personal information about your employees, such as names, pay rates, classifications and employment dates.

We use this only to produce the analysis and advice you have engaged us for. You are responsible for ensuring you are entitled to give it to us, and for telling your own staff how their information is handled where you need to.

We do not collect or hold patient or clinical health records.

Information we collect automatically

• Website usage — pages visited, time on page, referring site, approximate location, device and browser type, and IP address.
• Email engagement — whether our emails are opened and which links are clicked.

3. Cookies, pixels and advertising

We use cookies and similar technologies to run the website, understand how it is used, and measure our advertising.

Meta (Facebook and Instagram)

You can control how Meta uses your information for advertising in your Facebook or Instagram ad preferences, and you can limit tracking through your browser settings.

Other tracking

We may use website analytics tools to understand aggregate visitor behaviour. Most browsers let you refuse or delete cookies — parts of the site may not work properly if you do.

4. Recording and transcription of sessions

We may record advisory sessions, group calls and workshops for quality, internal reference, and to give recordings to participants. Recordings may be transcribed and analysed using secure software tools to assist with note-taking and session preparation.

We tell participants when a session is being recorded. If you would prefer not to appear, keep your camera and microphone off, or let us know before the session.

5. Use of AI-assisted tools

We use AI-assisted software to help analyse information, prepare summaries and produce draft materials. Where client information is processed this way, we use business-grade services and take reasonable steps to ensure that information is not used to train public AI models. A person reviews the output before anything is delivered to a client.

6. Why we use your information

• To deliver what you have purchased or engaged us for.
• To produce the analysis, reports and recommendations you have asked for.
• To process payments and keep proper financial records.
• To respond to enquiries and provide support.
• To send you information, offers and educational content, where you have subscribed or are a client. You can unsubscribe at any time.
• To measure and improve our website, our advertising and our services.
• To meet our legal, tax and insurance obligations.

7. Who we share it with

We do not sell your personal information. We share it only as set out below.

Service providers who help us operate, including:

• Payments — Stripe.
• Email and marketing — Kit (ConvertKit), Microsoft 365, Google Workspace.
• Community and course delivery — Circle.
• Video sessions and transcription — Zoom, Fireflies.
• Website, hosting and secure client dashboards — Webflow, Cloudflare.
• Advertising and measurement — Meta.
• Accounting — Xero, and our accountant.
• AI-assisted analysis tools, as described in section 5.

Professional advisers — our accountant, insurer, broker or lawyers, where reasonably necessary.

Where the law requires it — including to a court, regulator or government agency.

Overseas disclosure

Several of the providers above store or process information outside Australia, most commonly in the United States and the European Union. By providing your information you consent to that disclosure. We take reasonable steps to use reputable providers with appropriate security and privacy commitments.

8. How we protect your information

We take reasonable steps to protect information from misuse, loss and unauthorised access. Those steps include multi-factor authentication on our core accounts, encryption of stored and transmitted data, disk encryption on the devices we use, access-controlled delivery of client dashboards, and regular backups.

No system is completely secure. If a data breach occurs that is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.

9. How long we keep it

We keep personal information only as long as we need it for the purposes described in this policy, or as long as the law requires — financial records, for example, must be kept for seven years. Client business data is retained for the duration of the engagement and a reasonable period afterwards. On written request following the end of an engagement, we will delete or return client data, other than copies we must keep for legal, insurance or record-keeping reasons.

10. Your rights

You can ask us to:

• Access the personal information we hold about you.
• Correct anything that is inaccurate or out of date.
• Delete information, where we are not required to keep it.
• Stop marketing to you — use the unsubscribe link in any email, or contact us.

Email shane@cultureofone.com.au. We will respond within 30 days. We may need to verify your identity first. There is no fee to make a request, though we may charge a reasonable cost for providing access in some circumstances.

11. Complaints

If you think we have mishandled your personal information, contact us first at shane@cultureofone.com.au and we will investigate and respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner — oaic.gov.au, or 1300 363 992.

12. Changes to this policy

We may update this policy. The current version is always on this page with the date it was last updated. Material changes affecting existing clients will be notified by email.