Privacy Policy

1. What personal information we collect

We collect the following kinds of personal information:

• Account information — your name, email address and the password you set (stored in hashed form by our authentication provider).
• Subscription and payment information — your subscription status and billing history. Payments are processed by Stripe; we do not collect or store your full card number — Stripe handles that as the payment processor.
• Usage information — which lessons you watch and your progress, podcast feed access tokens, and your interactions with the Service.
• Technical information — collected automatically, such as your IP address, browser and device type, and log data, including through cookies and similar technologies.
• Communications — the content of emails or messages you send us (for example, support requests).

We do not intend to collect sensitive information (such as health information) through the Service. Please do not send us sensitive information unless we specifically request it.

2. How we collect it

We collect personal information directly from you when you register, subscribe, or contact us; automatically as you use the Service (including via cookies); and from our service providers, such as confirmation of payment status from Stripe.

3. Why we collect and use it

We collect and use your personal information to:

• create and manage your account and verify your identity;
• provide the course content and track your progress;
• process your subscription, payments and renewals;
• respond to your enquiries and provide support;
• send you service-related and, where permitted, marketing communications;
• maintain the security and integrity of the Service and prevent misuse; and
• comply with our legal obligations.

4. Cookies

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings, but disabling them may affect how the Service works (for example, staying logged in).

5. Who we share it with

We do not sell your personal information. We share it only with service providers who help us run the Service, and only as needed for them to perform their functions. These include:

• Supabase — authentication, database and account hosting;
• Stripe — payment processing and subscription management;
• Cloudflare — secure video streaming and content delivery;
• Netlify — website hosting;
• Resend — sending automated transactional emails, such as registration and account notifications;
• Google Workspace (Gmail) — where we correspond with you directly by email.

We may also disclose personal information where required or authorised by law, to enforce our Terms, or to protect our rights, property or safety or that of others.

6. Overseas disclosure

Some of our service providers store or process data outside Australia, including in the United States and other countries where they operate data centres. By using the Service, you acknowledge that your personal information may be disclosed to and stored by these providers overseas. We take reasonable steps to ensure these providers handle your information consistently with the Australian Privacy Principles.

7. How we protect your information

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure — including encrypted connections, access controls and reliance on reputable providers. However, no system is completely secure, and we cannot guarantee absolute security of information transmitted to or stored on the Service.

8. How long we keep it

We keep your personal information for as long as needed to provide the Service and for a reasonable period afterwards, or for as long as required to meet our legal, tax and accounting obligations. When information is no longer needed, we take reasonable steps to delete or de-identify it.

9. Accessing and correcting your information

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. Contact us at narain@kamalaraj.com. We will respond within a reasonable time and may need to verify your identity first. In limited circumstances we may decline access, in which case we will explain why.

10. Marketing and your choices

Where you have subscribed or where permitted by law, we may send you marketing communications about the Service. You can opt out at any time using the unsubscribe link in our emails or by contacting us. We will still send you essential service-related messages (for example, billing and account notices).

11. Data breaches

If a data breach occurs that is likely to result in serious harm and is covered by the Notifiable Data Breaches scheme, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.

12. Complaints

If you have a privacy complaint, please contact us at narain@kamalaraj.com and we will investigate and respond within a reasonable time. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at www.oaic.gov.au.

13. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on the website, and we will update the “last updated” date above. Material changes will be notified where reasonably practicable.

14. Contact us

Rheum2Learn Pty Ltd (trading as The Private Practice Course) · ABN 16 688 507 619 · 20/13 Digitaria Drive, Gledswood Hills, NSW 2557, Australia. For privacy questions or requests, contact narain@kamalaraj.com.