img.coach
LEGAL

Privacy Policy

LAST UPDATED: SEPTEMBER 2026

1. About this policy

Albirway Pty Ltd ABN 13 160 919 737 (Albirway, img.coach, we, us or our) operates img.coach.

We respect the privacy of participants, prospective participants, website visitors and other people who interact with us.

This Privacy Policy explains how we collect, hold, use and disclose personal information in connection with the img.coach website, courses, coaching, workshops and related services.

We seek to handle personal information consistently with applicable Australian privacy law and, where applicable, the Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs).

2. Personal information we may collect

Depending upon how you interact with us, we may collect information including:

  • (a) your name;
  • (b) email address and contact details;
  • (c) country or location;
  • (d) billing and transaction information;
  • (e) course enrolment and booking information;
  • (f) account and login information;
  • (g) professional background;
  • (h) medical education and qualification information;
  • (i) information about examinations, assessments, registration pathways or professional experience that you choose to provide;
  • (j) coaching goals and educational needs;
  • (k) correspondence with us;
  • (l) survey and feedback responses;
  • (m) information submitted during coaching or educational activities;
  • (n) group-session audio, video, chat or transcript information where a session is recorded;
  • (o) technical information such as IP address, device information, browser information and website usage data;
  • (p) cookie and analytics information;
  • (q) support and complaint information;
  • (r) subscription and payment status; and
  • (s) other information reasonably necessary to provide or administer the Services.

3. Sensitive information

Because img.coach provides services relating to medical education and professional pathways, information supplied by participants may in some circumstances constitute or reveal sensitive information.

We seek to collect sensitive information only where reasonably necessary for our functions and where collection is permitted by applicable law, including by obtaining consent where required.

You should provide only information reasonably necessary for your participation in the Services.

4. Patient information

4.1 Do not provide identifiable patient information

Participants must not disclose identifiable patient information through img.coach.

Clinical cases and experiences discussed during coaching must be appropriately anonymised or de-identified before disclosure.

4.2 Accidental disclosure

If we become aware that identifiable patient information has been inadvertently provided, we may take reasonable steps to remove, restrict, de-identify or securely delete it.

You remain responsible for complying with professional, ethical, workplace and legal confidentiality obligations applying to information obtained through clinical practice.

5. How we collect information

We may collect personal information:

  • (a) directly from you;
  • (b) when you visit or use the Website;
  • (c) when you make an enquiry;
  • (d) when you purchase or book a Service;
  • (e) when you create an account;
  • (f) when you participate in coaching, courses or workshops;
  • (g) through communications with us;
  • (h) through payment, booking, videoconferencing or learning platforms;
  • (i) through cookies and analytics technology;
  • (j) through recorded group sessions where applicable;
  • (k) through AI-assisted features where applicable; and
  • (l) from another person where authorised or otherwise permitted by law.

6. Why we collect and use personal information

We may collect, hold, use and disclose personal information where reasonably necessary to:

  • (a) provide and administer the Services;
  • (b) process enrolments, bookings and payments;
  • (c) identify and communicate with participants;
  • (d) deliver coaching, courses and educational materials;
  • (e) manage accounts and subscriptions;
  • (f) provide participant support;
  • (g) reschedule sessions and administer compassionate requests;
  • (h) personalise educational support;
  • (i) improve our courses and Services;
  • (j) maintain security and prevent misuse;
  • (k) investigate complaints and Code of Conduct breaches;
  • (l) maintain appropriate business and transaction records;
  • (m) comply with legal, regulatory, taxation and accounting requirements;
  • (n) exercise or defend legal rights;
  • (o) operate and improve our Website;
  • (p) conduct analytics;
  • (q) use AI-assisted tools where appropriate and disclosed;
  • (r) send marketing communications where permitted; and
  • (s) perform other purposes notified to you or permitted by law.

7. Payment information

Payments may be processed through third-party payment providers, including PayPal, Revolut and/or another provider identified at checkout.

Those providers may independently collect and process payment and personal information under their own privacy policies and terms.

Where payments are processed directly by a payment provider, we generally do not need to receive your complete card number or card security code.

We may nevertheless receive transaction information including your name, payment status, transaction identifier, amount, currency, payment method or limited billing information.

8. Third-party service providers

We may disclose or make personal information available to service providers that assist us with:

  • (a) payment processing;
  • (b) booking and scheduling;
  • (c) videoconferencing;
  • (d) website hosting;
  • (e) cloud storage;
  • (f) email and communications;
  • (g) learning-management systems;
  • (h) customer support;
  • (i) analytics;
  • (j) cybersecurity;
  • (k) accounting and professional services;
  • (l) artificial intelligence and automated processing; and
  • (m) other technology required to operate the Services.

We seek to disclose only information reasonably necessary for the relevant purpose.

9. Group session recordings

9.1 Recording

Certain group sessions may be recorded by img.coach.

Where a session is to be recorded, we will provide notice and obtain consent where required before recording.

Recordings may capture a participant's image, voice, display name, comments, chat messages or other participation.

9.2 Purposes

Recordings may be used for legitimate purposes associated with the Services, including making educational content available to authorised participants, quality assurance, internal training and improving the Services, subject to the notice provided for the particular recording.

9.3 One-to-one sessions

We do not ordinarily record one-to-one coaching sessions.

9.4 Marketing

We will not rely merely upon participation in a recorded educational session as consent to use a participant's identifiable image, voice or testimonial for public advertising.

Where identifiable participant material is proposed to be used for marketing, we will seek separate permission or consent as appropriate.

9.5 Participant recording

Participants are prohibited under the Terms and Code of Conduct from recording sessions without prior written permission.

10. Artificial intelligence and automated tools

We may from time to time use artificial intelligence or automated technologies in connection with the Services.

Uses may include assisting with educational feedback, content preparation, administration, transcription, summarisation or analysis.

Where personal information is provided to an external AI or technology provider, that provider may process the information on our behalf or under its applicable terms.

We will seek to use such technology consistently with applicable privacy obligations and reasonable information-security practices.

We do not authorise participants to provide identifiable patient information to an AI-enabled feature.

Participants should also avoid submitting unnecessary sensitive, confidential or third-party information.

AI outputs may be inaccurate and should not be treated as authoritative medical, legal or regulatory advice.

11. Overseas disclosure and processing

img.coach may serve participants located outside Australia and may use technology providers that store or process information outside Australia.

Accordingly, personal information may in some circumstances be disclosed to or processed in countries outside Australia.

The particular countries may vary depending upon the service providers used by us from time to time.

Where required by applicable Australian privacy law, we will take appropriate steps in relation to overseas disclosure of personal information.

12. Cookies and analytics

Our Website may use cookies and similar technologies to:

  • (a) operate website functionality;
  • (b) remember preferences;
  • (c) maintain security;
  • (d) understand website use;
  • (e) measure performance; and
  • (f) improve the Website and Services.

Where required, additional information about particular analytics, advertising or tracking technologies may be provided through a cookie notice or consent mechanism.

13. Direct marketing

Where permitted by law, we may use contact information to communicate with you about img.coach courses, Services, events or relevant updates.

Where consent is required, we will seek it.

Commercial electronic communications will provide an appropriate method to unsubscribe where required by law.

You may request that we stop sending marketing communications at any time.

Administrative communications relating to an existing booking, payment, account or Service are not necessarily marketing communications.

14. Information security

We take reasonable steps appropriate to the circumstances to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

Measures may include access controls, appropriate technology, secure service providers, staff procedures and other reasonable safeguards.

No internet or electronic storage system can be guaranteed to be completely secure.

15. Retention and deletion

We retain personal information for as long as reasonably required for the purposes for which it was collected and for legitimate business, taxation, accounting, dispute-resolution, insurance and legal requirements.

Where personal information is no longer required and applicable law does not require its retention, we will take reasonable steps to destroy it or de-identify it where required by applicable privacy law.

Retention periods may differ depending upon the nature of the information.

16. Access and correction

You may contact us to request access to personal information we hold about you or to request correction of inaccurate, out-of-date, incomplete, irrelevant or misleading information.

Requests should be sent to:

office@img.coach

We may need to verify your identity before processing a request.

Access may be refused or limited where permitted or required by law. Where applicable, we will explain the basis for doing so.

17. Privacy complaints

If you believe we have mishandled your personal information, please contact:

Privacy Officer
Albirway Pty Ltd
Email: office@img.coach

Please provide sufficient details to enable us to investigate your concern.

We will seek to acknowledge and investigate privacy complaints within a reasonable period.

Where applicable, you may also have a right to complain to the Office of the Australian Information Commissioner (OAIC).

18. Data breaches

Where an incident involving personal information occurs, we will assess and respond to the incident having regard to applicable law.

Where the Notifiable Data Breaches scheme or another mandatory notification requirement applies, we will take the steps required by law.

19. International participants

The Services may be accessed by participants outside Australia.

This Privacy Policy is principally prepared by reference to Australian privacy requirements.

Depending upon where you are located, additional privacy rights may apply under the laws of your jurisdiction. Nothing in this Policy is intended to remove a right that cannot lawfully be excluded.

20. Children

The Services are intended only for people aged 18 years and over.

We do not knowingly offer the Services to children.

21. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our Services, technology providers or legal obligations.

The current version will be published on the Website with its last-updated date.

22. Google Calendar & Google API Services

Coaches may connect their own Google Calendar to img.coach to automate scheduling. Where a coach does so, we access Google's APIs under two limited scopes only:

  • (a) calendar.events — to create, update and delete the specific booking event on that coach's calendar, so a session is added when booked, moved if rescheduled, and removed if cancelled; and
  • (b) calendar.freebusy — to read free/busy time only, so a coach is never double-booked.

We do not request access to Gmail, Google Drive, Google Contacts or any other Google Workspace data, and we do not read the title, description or attendees of a coach's other, unrelated calendar events.

Where a coach connects their calendar, we store:

  • (a) the OAuth access and refresh tokens issued by Google, which are encrypted at the application level before they are stored, using industry-standard authenticated encryption, and which are never exposed to any party other than our own servers;
  • (b) the Google Calendar event ID and calendar ID for each booking, so the correct event can later be updated or removed; and
  • (c) the Google Meet join link Google generates when a session event is created.

The OAuth access and refresh tokens described above are retained only for as long as a coach's calendar remains connected. A coach may disconnect their calendar at any time from their account settings; doing so revokes our access at Google immediately and deletes the stored connection and tokens from our systems.

The Google Calendar event ID, calendar ID and Google Meet link recorded against a specific booking are retained with that booking record independently of whether the calendar connection remains active, for legitimate booking, operational, record-keeping and support purposes, consistent with the retention practices described in section 15.

When a booking is confirmed, the Google Meet join link generated for that session may be sent, via our Telegram notification system, to the coach who owns that calendar — solely so they have the link needed to run the session. It is not sent to any other party.

Information obtained through the Google Calendar integration is not sent to the Vercel AI Gateway or to any other AI or machine-learning model; is not used to train or improve any AI or machine-learning model, generalised or otherwise; and is not used for advertising, ad targeting or profiling.

img.coach's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements, and to the Google Workspace API User Data and Developer Policy where applicable.

23. Contact us

Privacy enquiries, requests and complaints should be directed to:

Privacy Officer
Albirway Pty Ltd
ABN 13 160 919 737
Email: office@img.coach

Formal postal correspondence may be sent to:

PO Box 1107
Springwood QLD 4127
Australia