Privacy Policy 

Effective date: 14 April 2026

I respect the privacy of the people I work with.

This policy explains how I collect, use, store, and protect personal information through this website and in the course of my professional work. It is written to meet my obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), including requirements relating to cross-border disclosure of personal information.

If you have questions about how your information is handled, you are welcome to contact me using the details below.

Who I Am

This website is operated by:

Abbey Lee
ABN: 32446547018
Email: abbey@abbeylee.au
Location: Australia

I provide consulting, facilitation, strategy, and advisory services across Australia.

The Information I Collect

I collect personal information only where it is reasonably necessary for my work.

Depending on your interaction with me, this may include:

  • Name

  • Email address

  • Phone number

  • Organisation and role

  • Information provided via website forms

  • Information shared during enquiries, proposals, or engagements

  • Billing and payment information

  • Technical information such as IP address, browser type, and website usage data.

I do not collect sensitive information (such as health or political information) unless it is directly relevant to an engagement and provided voluntarily.

How Information Is Collected

Information may be collected when you:

  • Submit a contact form via this website

  • Email me directly

  • Engage my services

  • Participate in workshops or consultations

  • Subscribe to communications

  • Interact with this website.

Technical data may be collected automatically through cookies or website analytics.

You may adjust your browser settings to refuse cookies if you prefer.

Why I Collect Personal Information

Personal information is collected to:

  • Respond to enquiries

  • Provide consulting and facilitation services

  • Prepare proposals and agreements

  • Manage client relationships

  • Issue invoices and process payments

  • Improve website functionality

  • Comply with legal obligations.

I do not sell, rent, or trade personal information.

I do not use personal information for unrelated marketing activities.

Use of Third-Party Service Providers

I use reputable third-party providers to support the operation of this website and my business, including:

  • Google Workspace (email, document storage, and business systems)

  • Squarespace (website hosting, form handling, and website analytics).

These providers may store or process personal information on my behalf.

I take reasonable steps to ensure these providers maintain appropriate security and privacy safeguards consistent with Australian privacy standards.

Cross-Border Disclosure (APP 8)

Some of the third-party providers I use, including Google Workspace and Squarespace, operate global infrastructure. As a result, personal information may be stored or processed outside Australia, including in the United States and other jurisdictions.

Under Australian Privacy Principle 8, I am required to take reasonable steps to ensure that overseas recipients do not breach the Australian Privacy Principles in relation to your personal information.

I meet this obligation by:

  • Using established providers with publicly available privacy commitments and security frameworks

  • Reviewing their privacy policies and data processing terms

  • Limiting the personal information shared to what is reasonably necessary

  • Maintaining control over access to accounts and data.

By providing your personal information, you acknowledge that it may be transferred to and stored in jurisdictions outside Australia in accordance with this policy.

Data Security

I take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

These steps include:

  • Use of secure cloud-based systems

  • Strong, unique passwords

  • Multi-factor authentication for core systems

  • Device-level security (passcodes, encryption, automatic updates)

  • Restricted access to business accounts

  • Use of secure payment platforms.

While no system can guarantee absolute security, information is handled with care and reviewed periodically to ensure safeguards remain appropriate.

Data Retention

Personal information is retained only for as long as necessary to:

  • Deliver services

  • Meet contractual and professional obligations

  • Comply with legal and taxation requirements

  • Resolve disputes.

When information is no longer required, it is securely deleted or de-identified where practicable.

Access and Correction

You may request access to the personal information I hold about you.

You may also request correction if the information is inaccurate, out of date, incomplete, irrelevant, or misleading.

Requests can be made via the contact details below. I will respond within a reasonable period.

Notifiable Data Breaches

If a data breach occurs that is likely to result in serious harm, I will comply with my obligations under the Notifiable Data Breaches scheme, including notification to affected individuals and the Office of the Australian Information Commissioner (OAIC), where required.

Direct Marketing

If you subscribe to communications, you may opt out at any time using the unsubscribe function or by contacting me directly.

I do not engage in unsolicited marketing practices.

Third-Party Links

This website may contain links to external websites. I am not responsible for the privacy practices of those websites.

Changes to This Policy

This policy may be updated periodically.

The current version will always be available on this website, with the effective date noted above.

Contact

If you have questions, concerns, or complaints about how your personal information is handled, please contact:

Abbey Lee
Email: abbey@abbeylee.au

If you are not satisfied with the response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au.