Privacy policy.

1. Who is responsible

This policy explains how personal information is handled through martinmcphilimey.com and related website enquiries. The website is operated by Performance Through Health Pty Ltd as trustee for the AF McPhilimey Family Trust, with Martin McPhilimey as the privacy contact. In this policy, “we”, “us” and “our” refer to the website operator.

Contact: [email protected]. We are based in Mullaloo, Western Australia 6027, Australia. This policy concerns this website, its enquiry process and the voluntary Insights & Updates newsletter. Separate course, community or client services may have additional privacy notices.

2. Information we collect

When you make an enquiry, we collect the name and email address you provide, your enquiry type, your organisation or business if supplied, your message, and your agreement to be contacted about the enquiry. We may also keep subsequent correspondence and records needed to manage your request.

If you subscribe to Martin McPhilimey | Insights & Updates, we collect your email address, your first name if supplied, your affirmative email consent and a timestamped form submission. We keep the signup source, consent wording and relevant subscription records. A subscriber tag helps identify the audience; it is not proof of consent on its own.

Our website, hosting and security providers process technical information needed to deliver and protect the website, such as IP addresses, browser and device information, request times, page or origin information, and security verification results.

Please do not include medical records, detailed health histories, identification documents, payment details or another person’s sensitive information in the general enquiry form. If sensitive information is needed for a service, we will arrange an appropriate collection process and explain its purpose and any consent requirements separately.

3. How the enquiry process works

1. You enter your details into the website form and agree to be contacted about your enquiry.
2. Cloudflare Turnstile checks for automated or abusive activity. It processes browser and connection signals for this security check.
3. The form sends your submission to a Cloudflare Worker, which processes the request and passes the enquiry to GoHighLevel.
4. GoHighLevel creates or updates a contact record, stores the enquiry, sends an acknowledgement email and notifies Martin so he can review and respond.

Turnstile’s security check is separate from the Worker that handles your form entries. Cloudflare’s Turnstile documentation states that Turnstile itself does not access, store or transmit form entries. The Worker does process the details you submit.

4. Why we use your information

We use enquiry information to understand and respond to your request, discuss potential consulting, speaking, coaching or mentorship services, arrange next steps, keep relevant correspondence and manage our business records. Technical information helps operate the website, prevent spam, investigate errors and protect the service.

An enquiry does not subscribe you to a newsletter or a marketing campaign. Acknowledgements and replies relate to your request. Separate marketing requires an appropriate permission or other lawful basis, and you can ask us to stop marketing at any time.

The optional Insights & Updates signup uses a separate native GoHighLevel form. It creates or updates a contact by email and records the newsletter request. Eligible subscribers may receive one welcome email and occasional educational updates, including research, Friday reflections, podcast episodes, selected YouTube education and relevant education, course or consulting opportunities. Signup does not enrol you in unrelated communications. Existing email opt-outs are respected. You can unsubscribe using the link in an email or contact Martin. Newsletter consent can be withdrawn without affecting the handling of an enquiry.

You can ask general questions anonymously or using a pseudonym where practical, for example by email. The website form asks for a name and email address so we can respond. If you do not provide the information reasonably needed for a request, we may be unable to respond or arrange the service.

5. Service providers and sharing

We use service providers to operate the website and handle enquiries. Relevant providers include:

• HighLevel / GoHighLevel: website hosting, contact management, enquiry storage, workflow automation and email delivery, including the infrastructure and communication providers it uses.
• Cloudflare: the Worker that processes submissions and Turnstile security verification.
• Google Fonts: the website requests Poppins font files from Google. These requests disclose technical information such as your IP address and browser request information to Google.
• Email, hosting and technical support providers: where needed to deliver correspondence, maintain the website or resolve a technical issue.

Information may also be disclosed to authorised people helping us respond to your request, professional advisers where necessary, or authorities where required or permitted by law. We do not sell enquiry details or add them to third-party marketing lists.

Provider information: HighLevel data processing terms; HighLevel subprocessors; Cloudflare privacy policy; Turnstile privacy addendum; Google privacy policy.

6. Overseas processing

Our service providers operate internationally. Personal information may be stored or processed outside Australia, including in the United States. HighLevel identifies United States-based core data storage providers and an India-based services and support affiliate. Cloudflare operates a global network, so the location of processing can depend on how a request is routed and the services involved.

Our providers may use additional overseas infrastructure, support teams or subprocessors. Their published processing terms and subprocessor information give further details. You can contact us to ask about the arrangements relevant to your information. We remain responsible for meeting any obligations that apply to our use of those providers; this policy is not a waiver of your privacy rights.

7. Cookies, fonts and external websites

Website hosting and security services may use cookies, local storage or similar technologies to operate and protect the site. Browser controls allow you to manage or block cookies, although blocking necessary technologies may affect website or form functionality.

Any non-essential analytics or advertising technologies must be assessed separately and, where required, used only after appropriate notice and consent. Agreement to be contacted about an enquiry is not consent to advertising tracking.

Links to School of Breath Science, articles, research, podcast platforms and other external websites take you to services with their own privacy practices. Their policies apply when you use those services. Loading externally hosted fonts and images can also send technical request information to the relevant provider.

8. Storage, security and retention

Enquiries are held in GoHighLevel and relevant email correspondence. Service providers may also keep operational or security logs and backup copies under their own processing arrangements. We use the website and providers’ security features and take reasonable steps to limit access and protect personal information. No online system can be guaranteed completely secure.

We retain information according to why it is held: while an enquiry is active, for relevant follow-up and business records, or where required for legal, accounting, insurance or dispute purposes. There is no fixed automatic deletion period stated in this policy. Information should be deleted or de-identified when no longer needed, subject to applicable recordkeeping requirements. Backup and provider log copies may follow separate retention cycles.

Newsletter details are kept while needed to deliver the requested updates. After an unsubscribe, we may retain a minimal suppression record and consent history where needed to honour the opt-out, resolve a complaint or meet applicable obligations. An unsubscribe stops marketing; it does not necessarily erase all contact or enquiry records.

You may ask us to delete information. We will consider the request and explain if records must be retained, rather than promising immediate removal from every system or backup.

9. Access, correction and privacy concerns

You can email Martin to request access to information we hold about you, correct inaccurate or incomplete information, request deletion, or raise a privacy concern. Please describe your request and the contact details used for the enquiry. We may need to verify your identity using information proportionate to the request; do not send identity documents unless we have agreed an appropriate method.

We will review requests and complaints, investigate where needed and respond within the period required by applicable law. For Australian privacy complaints, we aim to respond within 30 days. If we cannot do so, we will explain the delay and next steps. If access, correction or deletion is restricted by law, we will explain the reason and any available complaint options.

If you are dissatisfied, you can contact the Office of the Australian Information Commissioner, where it has jurisdiction. Other complaint rights under applicable law are unaffected.

10. Visitors in the UK, EEA and other jurisdictions

Privacy rights depend on the law applicable to the particular processing; merely viewing an Australian website does not necessarily make every overseas privacy law apply.

Where UK or European data protection law applies, the website operator is responsible as controller for the enquiry information it determines how to use. The relevant legal bases may include steps you request before entering a contract, our legitimate interests in responding to general enquiries and securing the website, compliance with legal obligations, and consent where required. Sensitive information requires an additional lawful condition; the general enquiry form is not intended for that purpose.

Where applicable, you may have rights to access, correction, erasure, restriction, objection and data portability, and to withdraw consent without affecting prior lawful processing. These rights have conditions and exceptions. You may complain to the UK Information Commissioner or the competent EEA supervisory authority. You can also ask us about safeguards relevant to an international transfer; safeguards must be assessed for the processing concerned.

The acknowledgement and contact-record workflow is administrative automation. It does not itself decide whether you are eligible for a service or make a decision with legal or similarly significant effects. Martin reviews enquiries personally.

11. Changes and contact

We may update this policy to reflect changes to the website, providers or applicable requirements. The latest version and revision date will appear on this page. Material changes to how we handle information may require an additional notice.

For privacy questions, requests or complaints, email [email protected], with “Privacy” in the subject line if convenient. You do not have to use a particular subject line to exercise your rights.