1. About this policy

In this policy, “I”, “me” and “my” mean Philip Guarisco (ABN 79 764 678 310). I provide ADHD life coaching online to adults and professionals, primarily in Australia.

I handle personal information in accordance with applicable Australian privacy law, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and the Health Records Act 2001 (Vic) and Health Privacy Principles where they apply. I use the safeguards in this policy as my standard practice even where a particular legal requirement does not apply.

ADHD coaching is not therapy, counselling, medical treatment, diagnosis or crisis support. Even so, coaching conversations can include sensitive personal or health information, so I treat that information with particular care.

2. Personal information I collect

Depending on how you interact with me, I may collect:

• Identity and contact details: your name, preferred name, pronouns if offered, email address, phone number, location or time zone, and an emergency contact where relevant.
• Enquiry and booking details: messages, appointment choices, attendance history and information you provide when deciding whether coaching is right for you.
• Coaching information: goals, strengths, challenges, reflections, action plans, worksheets and brief session notes. This may include information about ADHD, disability, medication, mental health, work, relationships or other matters you choose to discuss.
• Business and payment information: billing details, invoices and transaction records. If card payments are offered, full payment-card details are handled by the relevant payment provider and are not ordinarily stored by me.
• Website and communications information: free-guide sign-ups, email preferences, feedback, and technical information such as IP address, browser, device, referring page and cookie data collected by website or embedded-service providers.
• Professional or organisational details: your role, employer or business information where coaching is arranged or funded through an organisation.

You do not need to provide information that is not reasonably necessary. However, if you do not provide key contact, booking or coaching information, I may be unable to respond, provide a requested resource or deliver coaching safely and effectively.

3. How I collect information

I usually collect information directly from you when you:

• visit the website, submit a form, download a resource or join the email list;
• email, call, message me on social media or WhatsApp, or book through Calendly;
• attend a discovery call or coaching session;
• complete an agreement, questionnaire, worksheet, feedback form or payment step; or
• otherwise communicate with me about services.

I may also receive information from a person or organisation referring or funding coaching, but only where you would reasonably expect this, you have authorised it, or the law permits it. Technical data may be collected automatically by the digital services used on the website.

4. Why I use your information

I use personal information only for purposes reasonably connected with my work, including to:

• respond to enquiries, assess whether we are a suitable coaching fit and manage bookings;
• prepare for and deliver coaching, track agreed goals and provide resources or follow-up;
• administer agreements, invoices, payments, business records and insurance requirements;
• send the free ADHD Strengths Guide and other communications you have requested;
• maintain and improve the website, resources, services, security and client experience;
• meet legal or professional obligations, resolve concerns and establish or defend legal claims; and
• protect the safety, rights and property of clients, other people and my business.

I do not sell or rent personal information.

5. Sensitive and health information

Information about ADHD, disability, health, mental health, racial or ethnic origin, sexuality, beliefs or other sensitive matters receives additional protection. I collect sensitive information only when it is reasonably necessary for coaching and you consent, or where collection is otherwise permitted or required by law.

Please share only what you are comfortable sharing and what is relevant to coaching. I generally do not need full medical reports. If I reasonably believe there is a serious threat to someone’s life, health or safety, I may disclose relevant information to an emergency contact, emergency service or other appropriate person where the law permits or requires it.

6. When I disclose information

I may disclose limited information to:

• Digital service providers that support the business, including Carrd (website), Sender (free resources and email), Calendly (bookings), Google and Google Meet (online meetings and related services), VentraIP (domain and email services) and WhatsApp (between-session check-ins for clients who choose them). WhatsApp messages are end-to-end encrypted, but WhatsApp (Meta) handles account and usage data under its own privacy policy, so I suggest keeping check-ins brief and not sending sensitive details you would prefer to discuss in session.
• Payment, invoicing, accounting, record-storage or professional-service providers used to operate the business.
• LinkedIn, Facebook or Instagram where you choose to contact me or interact through those platforms.
• A referring or funding organisation, but only as agreed with you or otherwise permitted by law. Coaching content is not shared with an employer, family member or referrer without your consent unless disclosure is legally required or necessary to address a serious safety risk.
• Regulators, courts, law-enforcement bodies, emergency services, insurers or advisers where disclosure is authorised or required by law or reasonably necessary to protect legal rights or safety.

I limit disclosures to what is reasonably necessary and, where appropriate, require service providers to handle information confidentially and securely.

7. Digital providers and overseas processing

Some digital providers and their subprocessors operate outside Australia. Personal information may therefore be processed or stored overseas, particularly in the United States, and potentially in other countries identified in a provider’s current privacy documentation. Overseas privacy protections may differ from Australian law.

I take reasonable steps to choose reputable providers, use appropriate privacy and security settings, minimise the information shared and restrict access. Each provider also handles information under its own privacy policy and terms.

8. Website, cookies and external links

Carrd and services embedded in or linked from the website - such as Sender, Calendly and social platforms - may use cookies, pixels, local storage or server logs to operate their features, remember preferences, prevent misuse and measure traffic. If optional analytics are enabled, I use the results to understand overall website use and improve content, not to make significant decisions about individuals.

You can manage cookies through your browser settings, although blocking them may affect some features. Links to other websites are provided for convenience; their privacy practices are governed by their own policies.

9. Email, marketing and testimonials

If you request the free ADHD Strengths Guide or separately opt in, Sender will use your details to deliver the resource and send related emails. I do not automatically add a person to marketing merely because they enquire or book coaching. Service messages about a booking, agreement, payment or active coaching relationship are not marketing.

You can unsubscribe from marketing at any time using the link in an email or by contacting [email protected]. I may keep a minimal suppression record so your preference continues to be honoured.

I use a testimonial, name, photograph or case study only with specific permission. You may withdraw permission for future use, although this may not allow recall of material already lawfully published or distributed.

10. Coaching notes, recordings and AI tools

I may keep brief coaching notes, agreed action plans and relevant administrative records. Sessions are not recorded unless we agree in advance, you give express consent, and the purpose, access, storage and deletion arrangements are documented.

I will not enter directly identifying client notes, recordings or confidential coaching content into a public or general-purpose generative-AI service without your express written consent. Where an AI-enabled business tool is used for limited administrative or drafting support, I minimise and, where practical, de-identify the information. I do not use solely automated decision-making to make decisions that significantly affect a client’s rights or interests.

11. Security and retention

I use reasonable administrative and technical safeguards appropriate to a small online coaching practice. These may include access controls, strong passwords, multi-factor authentication, software updates, secure provider settings, careful device handling, restricted sharing and secure deletion. No internet or storage system is completely risk-free, so absolute security cannot be guaranteed.

I keep information only for as long as reasonably required. My usual approach is:

When information is no longer required, I take reasonable steps to securely delete or de-identify it, subject to legal, insurance, backup and dispute-resolution requirements.

12. Access, correction and deletion requests

You may ask to access personal information I hold about you or request correction if it is inaccurate, incomplete, out of date, irrelevant or misleading. You may also ask me to delete information or withdraw consent. Deletion and withdrawal are not absolute: I may need to keep certain records to comply with law, insurance obligations, professional requirements or to establish or defend legal claims.

Send requests to [email protected]. I may ask for information to verify your identity. I will respond within a reasonable period and explain any lawful reason why a request cannot be completed in full. Access or correction is normally free, although a reasonable fee may apply where the law permits and substantial work is required.

Where practicable, you may enquire anonymously or use a pseudonym. I will usually need your identity and accurate contact details to book and deliver ongoing coaching, manage payments and maintain appropriate records.

13. Children and young people

My website and standard services are intended for adults. I do not knowingly invite children under 18 to submit personal information through the website. If coaching for a young person is separately agreed, consent, confidentiality, access and parent or guardian arrangements will be set out in writing before coaching begins.

14. Data breaches

If I become aware of a suspected loss, unauthorised access or disclosure, I will take reasonable steps to contain it, assess the likely impact and reduce the risk of harm. Where required by law, I will notify affected individuals and the Office of the Australian Information Commissioner or another relevant regulator.

15. Questions, requests and complaints

Please contact me first so I have an opportunity to address your concern. Include enough detail for me to understand the issue, but do not send sensitive information that is not needed.

I will acknowledge a complaint promptly and aim to provide a substantive response within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner. If the matter concerns health information or a health service in Victoria, you may also contact the Health Complaints Commissioner.

16. Changes to this policy

I may update this policy when my services, systems or legal obligations change. The current version will be published on adhdcoachphil.com with its effective date. If a change materially affects how existing client information is handled, I will take reasonable steps t