1. At a Glance: How Your Data is Handled & Protected
Boundless Empowerment operates its website with regards to the below:
Website & Analytics Hosting: Hosted by Panthur on enterprise-grade servers in Sydney, NSW. Traffic monitoring is managed via Plausible Analytics, delivering 100% non-identifying website usage data.
Safe Payment Processing: Payments for books, fidgets and other products are made through Stripe’s secure payment processing facilities.
Data Sovereignty: Data entered on our website is stored securely within Australia under Australian Privacy Principles. Payment details are stored on Stripe’s servers.
2. Website Traffic & Analytics Monitoring
Our WordPress website utilises Plausible Analytics to measure website traffic and improve user experience. Plausible operates without invasive tracking cookies and collects only non-identifying aggregate data:
Visitor browser types, operating systems, and device types.
Referring website pages, pages visited, bounce rates, and visit duration.
Geographic locations (city/region level).
đź’ˇ Privacy Protection: No identifying information is collected through website analytics.
3. Appointment Bookings & Purchase Information Processing
Microsoft Bookings: Scheduling a private consultation collects your name, email address, physical address, and contact details. Communications are handled through our encrypted participant services Microsoft account (hosted in Sydney/Melbourne data centres).
When you enter name and address information on the payment link, Stripe will deliver this information directly to us, so that we can send you your purchase.4. Your Legal Rights: Access, Correction & Deletion
Under APPs 12 and 13, you have clear, enforceable rights regarding the personal information we hold:
Access: You may request a complete copy of the personal records we keep about you.
Correction: You may request updates or corrections to inaccurate or out-of-date records.
Deletion: You may request the secure destruction of your records where lawful and appropriate.
⏱️ We respond to all formal privacy requests within 30 calendar days.
5–6. Additional Privacy Principles & Data Governance
5. Direct Marketing Transparency
We do not use cold direct messaging or invasive SMS text marketing campaigns. We may use Meta Pixels and Google ads in our outreach campaigns.6. Data Quality & Cross-Border Disclosure
We maintain accurate data through routine reviews. While primary servers are hosted in Australia, enterprise vendors (like Microsoft) operate under strict contractual data protection agreements matching Australian law.