Privacy Policy

Last updated 27 September 2026

1. Introduction

1.1 murphyworx ("we", "us", "our") is committed to protecting the privacy of individuals who interact with our website and services. This Privacy Policy explains how we collect, hold, use and disclose personal information in accordance with:

1. (a)the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs); and
2. (b)the California Consumer Privacy Act 2018 (CCPA), as amended by the California Privacy Rights Act 2020 (CPRA), for individuals who are California residents.

1.2 By using our website or engaging in our services, you consent to the collection, use and disclosure of your personal information as described in this Privacy Policy.

1.3 We may update this Privacy Policy from time to time. The current version will always be published on our website. We encourage you to review it periodically.

2. About us

2.1 Murphyworx is a boutique coaching consultancy based in Melbourne specialising in professional services, learning design and strategy.

2.2 If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details in clause 15.

3. What personal information we collect

3.1 We collect personal information that is reasonably necessary for our business functions and activities. The types of personal information we may collect include:

1. (a)Identifiers: name, email address, phone number, postal address, IP address and device identifiers;
2. (b)Business information: company name, ABN, industry and job title;
3. (c)Payment information: billing address and payment card details (processed securely through our payment processor - see clause 8);
4. (d)Commercial information: records of services enquired about or purchased, and correspondence history;
5. (e)Internet or network activity: IP address, browser type, device information, pages visited, time spent on pages, and referring URLs, collected through analytics tools (see clause 8); and
6. (f)any other information you voluntarily provide to us.

3.2 We do not collect sensitive information (as defined in the Privacy Act 1988 (Cth)) unless you voluntarily provide it and we have your consent to do so.

3.3 We do not knowingly collect personal information from individuals under the age of 16. If you believe we have inadvertently collected such information, please contact us using the details in clause 15.

4. How we collect personal information

4.1 We collect personal information in the following ways:

1. (a)directly from you when you complete a contact form, send us an email or enquire about our services;
2. (b)when you engage our services and provide information as part of that engagement;
3. (c)when you make a payment through our website;
4. (d)automatically through website analytics tools when you visit our website (see clause 8); and
5. (e)from publicly available sources, where relevant to our business activities.

4.2 Where practicable, we will collect personal information directly from you. If we collect personal information about you from a third party, we will take reasonable steps to notify you of that collection.

5. Why we collect and use personal information

5.1 We collect, hold, and use personal information for the following purposes:

1. (a)to respond to your enquiries and communicate with you about our services;
2. (b)to provide coaching, professional education, learning design and services design & strategy services to you;
3. (c)to process payments for our services;
4. (d)to manage our client relationships and maintain our business records;
5. (e)to improve our website and services through analytics and performance monitoring;
6. (f)to send you information about our services, updates, or promotional material where you have consented to receive such communications; and
7. (g)to comply with our legal obligations.

5.2 We will not use your personal information for a purpose other than those listed above without your consent, unless otherwise permitted or required by law.

6. Direct marketing

6.1 We may use your contact details to send you information about our services or updates that may be of interest to you, but only where you have consented to receive such communications or where we are otherwise permitted to do so under applicable law.

6.2 You may opt out of receiving marketing communications from us at any time by:

1. (a)clicking the "unsubscribe" link in any marketing email we send you; or
2. (b)contacting us directly using the details in clause 15.

6.3 We will process your opt-out request promptly and at no charge to you.

7. Disclosure of personal information

7.1 We may disclose your personal information to:

1. (a)our third-party service providers, to the extent necessary for them to provide services to us (see clause 8);
2. (b)professional advisers, including lawyers and accountants, where necessary;
3. (c)government agencies or regulators, where required or authorised by law; and
4. (d)any other party with your consent.

7.2 We do not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes.

7.3 We do not share your personal information with third parties for cross-context behavioural advertising purposes.

8. Third-party service providers

8.1 We use third-party service providers to assist us in operating our website and delivering our services. These providers may have access to your personal information only to the extent necessary to perform their functions. Our current third-party service providers include:

1. (a)Email service providers: we use third-party email platforms to manage and send communications. These providers process your email address and related correspondence data on our behalf;
2. (b)Payment processors: payments made through our website are processed by a third-party payment processor. We do not store your full payment card details on our systems. Your payment information is handled in accordance with the payment processor's own security and privacy standards; and
3. (c)Website analytics: we use Google Analytics to collect and analyse information about how visitors use our website. Google Analytics uses cookies and similar technologies to collect data including your IP address, browser type, pages visited, and time spent on our website. This data is used to improve our website and understand user behaviour. Google may store and process this data on servers located outside Australia, including in the United States.

8.2 We take reasonable steps to ensure that our third-party service providers handle personal information in a manner consistent with the APPs and, where applicable, the CCPA.

9. Overseas disclosure

9.1 Some of our third-party service providers are located overseas or store data on servers located outside Australia. In particular:

1. (a)Google Analytics processes data on servers that may be located in the United States and other countries; and
2. (b)our email and payment service providers may store or process data on overseas servers.

9.2 Where we disclose personal information to overseas recipients, we take reasonable steps to ensure those recipients handle your information in a manner consistent with the APPs. By using our website and services, you consent to your personal information being disclosed to overseas recipients in the circumstances described in this Privacy Policy.

10. Cookies and tracking technologies

10.1 Our website uses cookies and similar tracking technologies to enhance your experience and collect analytics data. Cookies are small text files stored on your device when you visit our website.

10.2 We use the following types of cookies:

1. (a)Essential cookies: necessary for the website to function properly; and
2. (b)Analytics cookies: used by Google Analytics to collect information about how you use our website, including pages visited and time spent on the site. This information is aggregated and used to improve our website.

10.3 You can choose whether to allow analytics cookies when you first visit our website, and change your choice at any time using the "Cookie settings" link in our website footer. You can also control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

10.4 For more information about how Google uses data collected through Google Analytics, please visit www.google.com/policies/privacy/partners.

11. Security

11.1 We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure. These steps include:

1. (a)using secure, encrypted connections (HTTPS) on our website;
2. (b)limiting access to personal information to authorised personnel only; and
3. (c)using reputable third-party service providers with appropriate security standards.

11.2 While we take reasonable precautions, no data transmission over the internet or storage system can be guaranteed to be completely secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately using the details in clause 15.

11.3 If we become aware of a data breach that is likely to result in serious harm to any individual whose information is involved, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

12. Access and correction (all users)

12.1 You have the right to request access to the personal information we hold about you and to request that we correct any inaccurate, incomplete, or out-of-date information.

12.2 To make an access or correction request, please contact us using the details in clause 15. We will respond to your request within a reasonable time and in accordance with our obligations under the APPs.

12.3 We may decline an access or correction request in certain circumstances permitted by the Privacy Act 1988 (Cth). If we decline your request, we will provide you with written reasons.

12.4 We do not charge a fee for making an access or correction request, but we may charge a reasonable fee to cover the cost of providing access where permitted by law.

13. Additional rights for California residents (CCPA/CPRA)

13.1 This clause applies to individuals who are residents of the State of California, United States. If you are a California resident, you have the following rights under the CCPA and CPRA in addition to the rights described elsewhere in this Privacy Policy.

13.2 Right to know. You have the right to request that we disclose: (a) the categories of personal information we have collected about you; (b) the categories of sources from which we collected your personal information; (c) the business or commercial purposes for collecting your personal information; (d) the categories of third parties with whom we share your personal information; and (e) the specific pieces of personal information we have collected about you.

13.3 Right to delete. You have the right to request that we delete personal information we have collected from you, subject to certain exceptions permitted by law (for example, where we are required to retain the information to complete a transaction or comply with a legal obligation).

13.4 Right to correct. You have the right to request that we correct inaccurate personal information we hold about you.

13.5 Right to opt out of sale or sharing. We do not sell your personal information, and we do not share your personal information for cross-context behavioural advertising purposes. You therefore do not need to submit an opt-out request in relation to the sale or sharing of your personal information.

13.6 Right to non-discrimination. We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide you with a different level of service because you exercised your rights under the CCPA/CPRA.

13.7 How to submit a request. To exercise any of your rights under this clause 13, please contact us using the details in clause 15 and specify that you are a California resident making a CCPA/CPRA request. We will verify your identity before processing your request and will respond within 45 days of receipt. We may extend this period by a further 45 days where reasonably necessary, and will notify you of any extension.

13.8 Authorised agents. You may designate an authorised agent to submit a CCPA/CPRA request on your behalf. We may require written proof of the agent's authorisation and may verify your identity directly with you.

13.9 Categories of personal information collected in the last 12 months. For the purposes of the CCPA/CPRA, in the last 12 months we have collected the following categories of personal information:

We have not sold or shared any of the above categories of personal information for commercial purposes.

14. Complaints (Australian users)

14.1 If you have a complaint about how we have handled your personal information, please contact us in the first instance using the details in clause 15. We will investigate your complaint and respond within a reasonable time.

14.2 If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

1. (a)Website: www.oaic.gov.au
2. (b)Phone: 1300 363 992
3. (c)Post: GPO Box 5218, Sydney NSW 2001

15. Contact us

15.1 For any questions, requests, or complaints relating to this Privacy Policy or our handling of your personal information, please contact us at: