POLICY
Privacy Policy
Last Updated 7 August 2026 · Version 1
The short version
I collect your name and email when you join my list or buy something. I use it to send you what you asked for and to run the business. I don't sell it, and I don't rent it. You can ask me to delete it at any time and I will.
The rest of this page is the detail, because you have a right to it and because vague privacy policies are usually hiding something.
WHO AM I
The Cynergy Collective is operated by Cynthia Collins, based in Australia.
The Cynergy Collective · [ABN once issued] 1 Norman Street, Lake Conjola, NSW, Australia
Contact: contact@the-cynergy-collective.com
I am the data controller for the information described here. That means I decide what gets collected and why, and I'm the one responsible for it.
WHAT I COLLECT, AND WHEN
When you join the waitlist or subscribe to The AuDHD Business Brief Your first name and email address. The date you signed up.
When you use Where Do I Start? Your email address, so I can send you the link. The tool itself runs on ChatGPT. What you type into the tool goes to OpenAI under their terms, not mine. I don't see or store your conversation with it.
When you apply for a cohort Your name, email, and your answers to the application questions. Those answers are read by me and nobody else.
When you buy something Your name, email, billing address and country. Your card details go directly to Stripe. I never see or store your full card number. I see the last four digits, the card type, and whether it worked.
When you're a student Your course progress, anything you submit, and your participation in live calls and the community space.
When you email me Whatever you put in the email, and the thread it belongs to.
When you visit the website Standard technical data: IP address, browser, device type, pages viewed, and how you arrived. Squarespace collects this to run and secure the site.
What I don't collect I don't ask for your diagnosis, your medical history, or any documentation of either. You are welcome here whether you're diagnosed, self-identified, or still working it out, and I never need proof. If you volunteer health information in an email or an application, I treat it as confidential and I don't record it anywhere structured.
WHY I COLLECT IT, AND MY LAWFUL BASIS
WHAT I DO
WHY
LAWFUL BASIS
Send the emails you signed up for
Consent
Deliver a course or product you bought
You asked for them
It's the thing you paid for
Contract
Review your application
Contract / pre-contract steps
You asked to be considered
Take payment and keep tax records
Legal obligation & contract
Legal obligation
Keep the site working and secure
The site has to function
Legitimate interests
Improve the course based on what students find hard
Making the product better
Legitimate interests
I do not use automated decision-making or profiling to decide who gets a place. I read every application myself.
WHO ELSE TOUCHES YOUR DATA
I use third-party services to run the business. Each one only gets what it needs.
Squarespace (US): website, forms, checkout, email campaigns, analytics
Stripe (US/Ireland): payment processing
Google Workspace (US): email and file storage
OpenAI (US): powers the Cynergy Guide and Where Do I Start?
[VIDEO CALL PLATFORM]: live cohort calls
[COMMUNITY PLATFORM, if separate]: the student community space
These are service providers, not customers. I do not sell your personal information, and I do not rent, trade or share it with advertisers. I have never done this and I'm not going to start.
I will disclose information if the law requires it, or if I genuinely believe someone is at risk of serious harm.
WHERE YOUR DATA GOES
I'm in Australia. Most of the services above are in the United States. That means your information is stored and processed overseas.
If you're in the UK or the EU, that's an international transfer. My providers use Standard Contractual Clauses or equivalent safeguards. Those countries do not have the same privacy laws as the UK or EU, and you should know that before you hand anything over.
HOW LONG I KEEP IT
Email subscribers: until you unsubscribe, then a suppression record so I don't accidentally email you again
Applications, not selected: 12 months, then deleted
Students: for the length of the course and 7 years afterwards, because Australian tax law requires me to keep financial records that long
Emails: 2 years unless the thread is a financial record
Website analytics: as long as Squarespace retains it
YOUR RIGHTS
Wherever you live, you can ask me to:
Show you what I hold about you
Correct anything that's wrong
Delete it, unless I'm legally required to keep it
Send it to you in a portable format
Stop using it for marketing, instantly and permanently
Object to a use you think isn't fair
Email contact@the-cynergy-collective.com. I'll respond within 30 days, usually much faster. It's free. You don't need to explain why you're asking.
If you're in the UK or EU, you also have the right to withdraw consent at any time, and to lodge a complaint with your local data protection authority.
If you're in California, you have the right to know what's collected, to delete it, and to opt out of sale. I don't sell personal information, so there's nothing to opt out of, but the right to ask is yours regardless.
If you're in Australia and you're unhappy with how I've handled your information, contact me first. If that doesn't resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
EMAIL & MARKETING
You get emails from me because you asked for them. Every email has an unsubscribe link, it works immediately, and using it does not affect anything you've bought.
If you're a student or a customer, I'll still email you about the thing you bought, because that's service, not marketing. You can't unsubscribe from "your course starts Monday" while you're enrolled in the course.
I don't send daily emails. I don't send value bombs. That's a promise on the waitlist page and it's a promise here.
COOKIES
The site uses cookies to work properly, to remember your preferences, and to give me basic analytics about which pages people read.
Squarespace sets these. You can block or delete cookies in your browser settings. Some parts of the site may not work properly if you do.
I don't run advertising pixels, retargeting, or third-party ad trackers. If that changes, this policy changes first.
SECURITY
Payments go through Stripe, which is PCI-DSS compliant. I never handle your card details. Accounts I control use two-factor authentication and unique passwords.
No system is perfectly secure, and anyone who tells you otherwise is selling something. If a breach happens that puts you at risk, I'll tell you and I'll tell the regulator, within the timeframes the law requires.
CHILDREN
This is a business for adults. I don't knowingly collect information from anyone under 18. If you believe a child has given me information, email me and I'll delete it.
CHANGES
If I change this policy meaningfully, I'll update the date at the top and email anyone on my list. I won't quietly change it and hope you don't notice.
CONTACT
contact@the-cynergy-collective.com
A real person reads it. No chatbot, no ticket number.