Privacy Policy

1. Overview

Nord Cazzit Pty Ltd (ABN: 12 345 678 901) ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website nordcazzit.com, use our services, or interact with us.

This policy complies with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and the General Data Protection Regulation (GDPR) for European users.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, mailing address
• Demographic Information: Age, gender, location
• Course Information: Vocal experience level, goals, preferred learning style
• Payment Information: Billing address, payment method details (processed securely through third-party providers)
• Communication Records: Emails, chat logs, phone call records, feedback forms

2.2 Technical Information

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, time spent, click patterns, referral sources
• Location Data: General geographic location based on IP address

2.3 Information Collection Methods

• Directly from you when you register, book courses, or contact us
• Automatically through cookies and similar technologies
• From third parties such as payment processors or social media platforms

3. How We Use Your Information

3.1 Primary Purposes

• Service Delivery: Providing vocal coaching services, scheduling lessons, communicating about your progress
• Customer Support: Responding to inquiries, resolving issues, providing technical assistance
• Business Operations: Processing payments, maintaining records, improving our services

3.2 Marketing and Communication

• Sending newsletters and promotional materials (with your consent)
• Notifying you about new courses, workshops, or events
• Conducting surveys and requesting feedback

3.3 Legal and Compliance

• Complying with legal obligations and regulatory requirements
• Protecting our rights and preventing fraud
• Responding to legal requests and enforcing our terms

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

• Payment Processors: Stripe, PayPal for secure payment processing
• Email Services: Mailchimp for newsletter and communication delivery
• Analytics: Google Analytics for website performance analysis
• Cloud Storage: AWS or similar services for data storage and backup

4.2 Legal Requirements

We may disclose your information when required by law, court order, or to protect our rights, property, or safety, or that of our users or others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, with notification provided in advance.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data is encrypted in transit and at rest using industry-standard protocols
• Access Controls: Limited access to personal information on a need-to-know basis
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Staff education on privacy and security best practices
• Incident Response: Procedures for detecting and responding to security breaches

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using reasonable measures.

6. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. For detailed information about our cookie practices, please see our Cookie Policy.

6.1 Types of Cookies

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how you use our website
• Marketing Cookies: Used to deliver relevant advertisements

6.2 Cookie Management

You can control cookie settings through our cookie banner or your browser settings. Disabling certain cookies may affect website functionality.

7. Your Rights

Under Australian privacy law and GDPR (where applicable), you have the following rights:

7.1 Access and Portability

• Request access to your personal information
• Receive a copy of your data in a portable format

7.2 Correction and Updates

• Request correction of inaccurate or incomplete information
• Update your preferences and contact details

7.3 Deletion and Restriction

• Request deletion of your personal information (subject to legal requirements)
• Restrict processing of your data in certain circumstances

7.4 Objection and Withdrawal

• Object to processing for marketing purposes
• Withdraw consent where processing is based on consent

7.5 Exercising Your Rights

To exercise any of these rights, please contact us using the information in Section 12. We will respond within 30 days and may require identity verification.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

8.1 Retention Periods

• Active Students: Duration of enrollment plus 7 years for financial records
• Former Students: 7 years from last interaction for tax and legal purposes
• Marketing Data: Until consent is withdrawn or 3 years of inactivity
• Website Analytics: 26 months from collection

8.2 Secure Disposal

When personal information is no longer needed, it is securely deleted or anonymized in accordance with our data disposal procedures.

9. International Data Transfers

Your information may be transferred to and processed in countries other than Australia, including the United States and European Union, where our service providers operate.

We ensure appropriate safeguards are in place for international transfers:

• Adequacy decisions by relevant authorities
• Standard contractual clauses
• Certification schemes and codes of conduct

10. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13 without parental consent.

For students aged 13-18, we require parental consent before collecting personal information. Parents have the right to:

• Review their child's personal information
• Request deletion of their child's information
• Refuse further collection of their child's information

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of material changes by:

• Posting a notice on our website
• Sending an email to registered users
• Displaying a prominent notice in our services

Your continued use of our services after such changes constitutes acceptance of the updated policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: