Privacy Policy
Last updated:Â October 2025
This Privacy Policy explains how Nicole Kuurman (ABN 55 874 084 772), trading as Nicki Kuurman, Universal Calm, and Myst Rituals (“we”, “us”, or “our”), collects, uses, and protects your personal information.
By visiting our website (www.nickikuurman.com) or purchasing our services or products, you agree to the terms of this Privacy Policy.
Data Controller: Nicole Kuurman (ABN 55 874 084 772), trading as Nicki Kuurman, Universal Calm, and Myst Rituals.
 Contact: [email protected]
1. Information We Collect
We collect personal information that you voluntarily provide when you:
- 
Book a session, purchase a product, or enrol in a course
 - 
Subscribe to our email list or download a free resource
 - 
Fill out a form, quiz, or intake questionnaire
 - 
Contact us by email, message, or social media
 
The information we collect may include:
- 
Name, email address, phone number, and billing/shipping details
 - 
Relevant personal notes or information you choose to share (e.g. wellbeing goals, birth date, preferences)
 - 
Payment information (processed securely via Stripe, PayPal, or Kajabi)
 - 
Website usage data (via cookies or analytics tools)
 - Device and usage data collected automatically (e.g., IP address, browser type, pages visited) for security and analytics.
 
2. How We Use Your Information
We use your personal information to:
- 
Deliver and personalise your booked sessions, courses, or products
 - 
Send confirmations, updates, and relevant communication
 - 
Improve our website, offerings, and customer experience
 - 
Comply with legal, accounting, and tax obligations
 
We only collect information reasonably necessary for our business functions and will not use your details for unrelated purposes without your consent. We do not store your full payment card details; payments are processed securely by third-party providers (e.g., Stripe or PayPal). Where processing relies on consent (e.g., email marketing), you may withdraw your consent at any time.
3. Email Marketing
If you join our mailing list, you consent to receive occasional updates, newsletters, or offers related to our services.
 You can unsubscribe at any time by clicking the “unsubscribe” link at the bottom of any email or by contacting us directly.
We respect your inbox - we’ll only send relevant and valuable content.
4. Storage & Security
Your personal data is stored securely via our trusted platforms (such as Kajabi, Stripe, Cliniko and Google Workspace) which use industry-standard encryption and security protocols.
 We take reasonable steps to protect your information from loss, misuse, or unauthorised access.
Access to client records (e.g., in Cliniko/Kajabi/Google Workspace) is restricted to authorised personnel and protected by authentication.
If a data breach occurs, we will promptly investigate and notify affected individuals as required by law.
5. Sharing of Information
We do not sell, rent, or trade your personal information.
 We may share limited data with trusted third-party service providers who assist with:
- 
Payment processing (Stripe, PayPal)
 - 
Booking and scheduling (Calendly)
 - 
Email delivery (Kit, Kajabi, or similar platforms)
 - 
Website hosting and analytics
 
These providers only have access to the data necessary to perform their specific services and are required to keep it confidential. Where data is transferred outside Australia, we rely on appropriate safeguards (such as Standard Contractual Clauses and reputable processors) to protect your information.
6. Cookies & Analytics
Our website may use cookies and analytics tools (such as Google Analytics or Kajabi analytics) to track user behaviour, traffic sources, and preferences. This helps us improve our website and understand which content is most valuable to visitors.
You can manage cookies via your browser settings; EU/UK visitors may also see a banner to set preferences.
7. Access, Correction & Deletion
You have the right to request access to your personal information, correction of inaccuracies, or deletion where legally permissible.
 To do so, please contact us using the details below.
 We’ll respond within a reasonable timeframe in accordance with the Australian Privacy Principles and GDPR.
8. International Users
If you are located outside Australia, please note that your information may be transferred to and processed in Australia.
 By using our services, you consent to this transfer and processing according to this policy.
9. Links to Other Websites
Our website or emails may include links to third-party websites.
 We are not responsible for the privacy practices or content of those external sites.
10. Updates to This Policy
We may update this Privacy Policy from time to time.
 The revised version will be posted on this page with an updated “last revised” date.
 We encourage you to review this page periodically.
11. Legal Bases for Processing (GDPR)
For visitors in the EU/UK, we process personal data on the following legal bases: (a) to perform a contract with you (e.g., deliver a session or product); (b) with your consent (e.g., email marketing); (c) for our legitimate interests (e.g., site security, improving services) where those interests are not overridden by your rights; and (d) to comply with legal obligations (e.g., tax records).
12. Data Retention
We keep personal information only as long as necessary for the purposes outlined in this policy. Transaction records may be retained for up to 7 years to meet tax and accounting requirements. If you unsubscribe from marketing, we may keep a minimal suppression record to honour your opt-out. Notes you voluntarily share for sessions are kept while you remain an active client and then deleted or anonymised within a reasonable period unless we are required by law to retain them.
13. Health/Sensitive Information
Any wellbeing or health-related details you choose to share (e.g., in an intake form) are treated as confidential and used only to deliver your services. Do not include information you are uncomfortable sharing. We do not use sensitive information for marketing.
14. Children’s Privacy
Our services and content are intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, please contact us so we can delete it.
15. Your Rights (AUÂ & GDPR)
You may request access, correction, deletion, or portability of your personal information, and you may object to or restrict certain processing (e.g., marketing). To exercise these rights, contact us using the details below. We will respond within a reasonable timeframe (usually 30 days).
16. Complaints
If you have concerns about how we handle your personal information, please contact us first. If we cannot resolve your complaint, Australian residents may contact the Office of the Australian Information Commissioner (OAIC). EU/UK residents may also contact their local data protection authority.
17. Contact Us
If you have any questions about this Privacy Policy or wish to access, correct, or delete your personal information, please contact:
Nicki Kuurman
541 Station Street, Carrum VIC 3197 
[email protected]
www.nickikuurman.com
+61 422 892 614