The Authentic Advisor Podcast – essential topics, practical insights from leading business advisors.
The Authentic Advisor Podcast – essential topics, practical insights from leading business advisors.
PRIVACY POLICY
Last Updated: 10th June 2026
Applies to: Mindshop International Pty Ltd (ACN 074 286 212) | Mindshop Australia Pty Ltd (ABN 16 083 124 467) | Mindshop UK Ltd (Company Reg: 03530512)
Quick Reference – Who this applies to
This Privacy Policy applies to all users of Mindshop websites, the Mindshop platform, and related services — including Advisors, Online Members, prospective clients, and website visitors. It governs how we collect, use, store, disclose, and protect your personal information.
The Mindshop Group of Companies (collectively “Mindshop”, “we”, “us”, “our”) is committed to protecting your personal information and being transparent about how we handle it. This Privacy Policy explains how we manage Personal Information across all our products and services, including:
By using our services, you consent to the practices described in this policy. If you do not agree, please discontinue use of our services and contact us at help@mindshop.com.
“Personal Information” means any information that identifies or could identify an individual. We collect the following categories:
|
Category
|
Examples
|
|---|---|
What we do NOT collect
We do not collect or process Sensitive Personal Information (such as racial/ethnic origin, political opinions, religious beliefs, health data, sexual orientation, criminal records) unless you have given explicit consent or it is required by law. We do not knowingly collect personal data from children under 16.
3.1 Directly From You
We collect information when you:
3.2 Automatically
When you interact with our platforms, we automatically collect technical and usage data via cookies, web analytics tools, and server logs. See Section 11 (Cookies) for detail.
3.3 From Third Parties
We may receive information about you from:
Where third parties provide information about you, we take reasonable steps to ensure you are informed.
We process your personal information only where we have a lawful basis. The table below sets out our primary purposes, the data used, and the legal basis under the GDPR and Australian Privacy Act.
|
Purpose
|
Data Used
|
Legal Basis
|
|---|---|---|
You may opt out of marketing communications at any time using the unsubscribe link in any email or by contacting help@mindshop.com.
5.1 Retention Periods
We retain personal information only for as long as necessary for the purpose it was collected, or as required by law. Our standard retention periods are:
|
Data Type
|
Retention Period
|
|---|---|
5.2 Deletion Process
When an Advisor’s subscription ends or an Online Member is removed:
Right to Erasure
You may request deletion of your personal information at any time (subject to legal retention obligations). See Section 12 for how to exercise this right. We will confirm completion of deletion requests within 30 days.
We do not sell your personal information to third parties. We may share your information with:
|
Recipeint
|
Purpose / Basis
|
|---|---|
Any disclosure to third parties is made only to the extent necessary and with appropriate safeguards in place.
We use carefully selected third-party processors to help deliver our services. All processors are contractually bound to protect your data consistent with this Policy and applicable law.
|
Processor
|
Service
|
Data Processed
|
Location
|
|---|---|---|---|
“SCCs applied” means Standard Contractual Clauses approved by the European Commission are in place for transfers to non-adequate countries.
Mindshop Online’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
Our Commitment on AI
Mindshop is committed to transparent, ethical, and secure use of AI. Your data is never used to train third-party AI models without your explicit consent. We use AI only to enhance service delivery, and we identify where AI is used within the platform.
8.1 How We Use AI
Mindshop uses AI technologies to power features including:
8.2 Data Handling in AI Features
8.3 No Unauthorised AI Training
Mindshop expressly prohibits the use of its proprietary content (including tools, videos, articles, models, courses, forum posts, and papers) for training any AI or machine learning model. We implement access controls, monitoring of fair use, and contractual safeguards to enforce this.
8.4 Fair Use of the AI Assistant
Use of the Mindshop AI Assistant is limited to:
The AI Assistant must NOT be used for:
8.5 AI Transparency
Where AI-generated insights are presented within the Mindshop platform, we endeavour to clearly identify them as AI-assisted and indicate the underlying service used. Mindshop maintains human oversight of all AI-assisted service delivery.
8.6 AI Compliance & Review
Our AI usage policies are reviewed regularly against GDPR, the Australian Privacy Act, and emerging AI governance frameworks. We update our approach in response to regulatory developments as and when applicable.
Mindshop primarily operates across Australia, the United Kingdom, Asia and North America. Personal information may be transferred, stored, or processed in these regions.
9.1 Transfer Safeguards
All international transfers are protected by one or more of the following:
9.2 Primary Hosting
Our primary platform infrastructure is hosted on Microsoft Azure in the Australian East region. EU-based users should note that backup data may be stored outside the EU with appropriate safeguards in place.
Mindshop takes reasonable and appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or disclosure. Our security measures include:
|
Control
|
Detail
|
|---|---|
Despite these measures, no system is completely secure. In the event of a data breach affecting your rights or freedoms, we will notify you and the relevant supervisory authority as required by applicable law.
We use cookies and similar technologies on our websites and platform. Cookies are small text files placed on your device. We use them for:
|
Cookie Type
|
Purpose
|
|---|---|
You can manage cookie preferences via the cookie consent banner displayed on your first visit, or by adjusting your browser settings. Withdrawing consent to non-essential cookies will not affect your access to core services.
Depending on your location, you have certain rights in relation to your personal information. These are described in Section 13 (GDPR) and Section 14 (Australian Privacy Act) in detail. In summary, you may have the right to:
|
Right
|
What it means
|
|---|---|
To exercise any right, contact our Privacy Officer (see Section 16). We may verify your identity before acting on a request. We will respond within 30 days (or as required by law).
We do not charge for access requests, though an administrative fee may apply for providing copies of large volumes of data.
13.1 Our Role Under the GDPR
Mindshop acts as both:
Where Mindshop acts as a Processor on behalf of an Advisor (Controller), a Data Processing Agreement (DPA) governs that processing relationship.
13.2 Lawful Bases for Processing
We rely on the following GDPR lawful bases:
13.3 Your GDPR Rights
As an EU or UK resident, you have all the rights set out in Section 12, enforceable under Articles 15–22 of the GDPR. You also have the right to lodge a complaint with your local supervisory authority (e.g. the ICO in the UK, or the relevant EU DPA).
13.4 Children
Our services are not directed to individuals under 16. We do not knowingly collect personal data from children under 16. If you believe we hold data about a child, contact us immediately.
13.5 Automated Decision-Making
We do not make solely automated decisions about you that have legal or similarly significant effects, unless we have your explicit consent or it is permitted by law.
Mindshop complies with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). Further information about the APPs is available at www.privacy.gov.au.
If you are dissatisfied with our handling of your personal information, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au after first raising the matter with our Privacy Officer.
We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or a prominent notice within the Mindshop platform prior to the change taking effect. The “Last Updated” date at the top of this document reflects the most recent revision.
Continued use of our services following notice of changes constitutes acceptance of the updated Policy.
For all privacy enquiries, requests to exercise your rights, or to lodge a complaint, please contact our Privacy Officer:
Privacy Officer – Mindshop
Email: help@mindshop.com Phone: +61 3 8807 0163 Postal Address: Unit 8, 20 Cato Street, East Hawthorn VIC 3123, Australia We aim to acknowledge all privacy requests within 5 business days and resolve them within 30 days.
If you are not satisfied with our response, you may contact the relevant supervisory authority:
Australia: Office of the Australian Information Commissioner (OAIC) — www.oaic.gov.au
United Kingdom: Information Commissioner’s Office (ICO) — www.ico.org.uk
European Union: Your local Data Protection Authority (list at edpb.europa.eu)
