Self-Care NOW
Privacy Policy
How we handle your information, and how carefully we treat what a purchase can reveal.
Last updated: [date of publication]
1. Who we are
Self-Care NOW is a trading name of Catalyst Counselling, ABN 55 282 966 331, an Australian business in Townsville, Queensland, Australia.
We are responsible for the personal information described in this policy. In European and UK terms, we are the data controller.
Contact us about privacy at: cch.phapp.1610@gmail.com
⚠️ ADVISER. Australia's Privacy Act generally exempts small businesses under $3 million turnover — but that exemption does not apply to an organisation that provides a health service. Catalyst Counselling is a counselling practice. The likely position is that the Privacy Act and the Australian Privacy Principles apply in full regardless of turnover. This draft assumes they do, which is the safer assumption, but it should be confirmed rather than assumed.
2. What this policy covers
This policy covers selfcarenow.org and anything you buy or request from it. It does not cover Deborah Young's separate counselling practice with individual clients, which is governed by that practice's own confidentiality and record-keeping obligations.
3. Information we collect
When you buy something
- Your name
- Your email address
- Your country, and any billing details our payment provider requires
- A record of what you bought, when, and for how much
- Your referral or discount code, if you used one
We never see or store your full card number. Card and account details are handled directly by our payment providers. They pass us a confirmation that payment succeeded, and a masked reference such as the last four digits.
When you ask to be told a product is ready
- Your email address, and which single product you asked about. Nothing else.
When you contact us
- Your name, email address, and whatever you write to us.
When you create an account
- Your email address and a password, stored in a hashed form we cannot read.
Automatically, when you visit
- Technical information such as IP address, browser type, pages viewed and approximate location from your IP. This is used to keep the site working and secure.
We do not collect your date of birth, your address beyond what a payment provider requires, or any clinical or medical information about you. We never ask you why you are buying something, and there is nowhere on this website to tell us.
4. Information that says something about your health
This section matters more than the rest, so it is not buried.
We sell material on weight, anxiety and workplace stress, grief and loss, relationships, fatigue, and erectile dysfunction. If you buy one, our record of that purchase suggests something personal about you. We treat those records as sensitive information, and in Europe and the UK as special category data.
What that means in practice:
- We do not sell your information. Ever. To anyone. There is no circumstance in which we would.
- We do not share what you bought with advertisers or data brokers, and we do not build or share advertising audiences from purchase records.
- We do not use what you bought to target you with advertising, on this site or anywhere else.
- Our notify-me lists are one list per product. Asking about the grief audiobook does not add you to anything else.
- Emails about the Erectile Dysfunction and Surviving Grief & Loss material never name the subject in the subject line. These are bought privately, sometimes on a shared screen or a shared device, and a subject line is visible without opening anything. Our emails about them use a neutral subject such as "Your Self-Care NOW request".
- Access is limited to Deborah Young and to the service providers listed at clause 7, who see only what they need to do their job.
⚠️ ADVISER. Under GDPR Article 9, processing special category data needs a specific condition, not just "legitimate interests". For an Australian seller taking EU and UK orders, the practical route is usually explicit consent captured at checkout, or the argument that a purchase record of educational material is not itself health data. That call should be made properly rather than assumed, because it changes what the checkout has to do.
5. Why we use your information, and our lawful basis
| What we use it for | Why | Lawful basis (EU/UK) |
|---|---|---|
| Giving you what you bought | You cannot receive it otherwise | Performance of a contract |
| Taking payment and preventing fraud | Required to sell anything | Contract; legal obligation |
| Answering your emails | You contacted us | Legitimate interests |
| Telling you one product is ready | You expressly asked | Consent |
| Keeping records for tax and accounting | Australian law requires it | Legal obligation |
| Keeping the website secure and working | Protecting you and us | Legitimate interests |
We do not send marketing emails to customers who have not asked for them. If that ever changes, it will be opt-in, and unsubscribing will take one click.
6. Cookies
We keep this minimal. We use cookies that are necessary for the site to work — remembering you are logged in, and keeping your basket during checkout.
We do not use advertising or tracking cookies. If that changes, we will ask your consent first and this policy will be updated before it does.
We do not use analytics. The website does not measure, record or profile your visit, and nothing on it follows you to other websites. If we ever add visitor statistics, we will choose a tool that does not identify individuals, and this policy will be updated before it goes on.
7. Who else handles your information
We use a small number of service providers. They act on our instructions and may only use your information to provide their service to us.
| Provider | What they do | Where |
|---|---|---|
| Our payment providers | Take payment securely | Varies; see their own policies |
| Our website host | Serves the website and your downloads | Servers may be outside Australia |
| Our domain and network provider | Routes traffic and protects against attacks | Global network |
| Our email provider | Sends receipts and replies | Varies |
Named in full, those providers are Stripe and PayPal for payment, Vercel for hosting the website, Cloudflare for the domain and network, and Google for email. If we add or change a provider, this policy will be updated.
We may also disclose information if the law requires it, or to establish or defend a legal claim.
We do not sell your personal information, and we have not sold or shared personal information in the preceding 12 months, as those terms are used in California law.
8. Where your information goes
We are in Australia. Our website host and other providers may store or process information outside Australia, including in the United States and Europe. By buying from us, you understand your information may be handled overseas.
Where we transfer information out of the European Economic Area or the UK, we rely on the safeguards our providers have in place, such as Standard Contractual Clauses.
⚠️ ADVISER. A non-EU business offering goods to people in the EU or UK may be required to appoint a local representative under GDPR Article 27 and the UK equivalent. Worth checking whether that applies here, and at what volume it starts to matter.
9. How long we keep it
- Purchase records: as long as required by Australian tax and business law, generally seven years from the transaction.
- Your account: until you ask us to close it, then deleted or anonymised, apart from the purchase records above.
- Notify-me email addresses: until the product is released and you have been told, or until you unsubscribe, whichever comes first.
- Emails you send us: normally no longer than two years, unless the matter is ongoing.
- Technical logs: a short period, normally no more than 12 months.
10. Keeping it safe
The website runs over an encrypted connection. Passwords are stored hashed. Card details never reach us. Access is limited to those who need it.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach happens that is likely to cause you serious harm, we will tell you and the regulator, as Australian law requires.
11. Your rights
Wherever you live, you may ask us to:
- Tell you what information we hold about you
- Give you a copy of it, in a portable format
- Correct anything wrong
- Delete it, subject to records we must keep by law
- Stop using it for a particular purpose
- Withdraw consent you previously gave, at any time
If you are in the EU or UK, you also have the right to object to processing based on legitimate interests, and to lodge a complaint with your local data protection authority.
If you are in California, you have rights to know, delete, correct, and to opt out of sale or sharing — although as stated above, we do not sell or share your personal information.
To exercise any of these, email cch.phapp.1610@gmail.com. We will respond within 30 days. We will not charge you, and we will not treat you differently for asking.
12. Complaints
If you are unhappy with how we have handled your information, please tell us first at cch.phapp.1610@gmail.com and give us a chance to put it right.
If you are still not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. If you are in the EU or UK, you may complain to your own supervisory authority instead.
13. Children
Our material is for adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, email us and we will delete it.
14. Changes
We may update this policy. The date at the top shows when it last changed. If we make a significant change to how we use your information, we will take reasonable steps to tell you.
15. Contact
Catalyst Counselling trading as Self-Care NOW ABN 55 282 966 331 Email: cch.phapp.1610@gmail.com