Privacy Policy

Mastr Pty Ltd is a business advisory and growth ecosystem supporting business owners, founders, executives and leadership teams.

Our services may include:

• •Mastr Boards and peer advisory groups;
• •business strategy and advisory services;
• •coaching and mentoring;
• •specialist business services;
• •workshops and masterclasses;
• •conferences, retreats and events;
• •business assessments and diagnostic tools;
• •leadership and organisational development;
• •digital tools, resources and educational content;
• •networking and member communities; and
• •other products and services offered by Mastr from time to time.

For the purposes of this Privacy Policy, these are collectively referred to as the Services.

This Privacy Policy applies to personal information collected by Mastr from individuals including:

• •Members;
• •Clients;
• •prospective Members and Clients;
• •business owners and executives;
• •event attendees;
• •website visitors;
• •advisers and specialists;
• •suppliers and service providers;
• •business partners;
• •job applicants and employees; and
• •other individuals who interact with Mastr.

We manage personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) where they apply to us.

By providing personal information to Mastr or using our Services, you acknowledge that we will handle that information in accordance with this Privacy Policy and applicable law.

The types of personal information we collect depend on your relationship with Mastr and how you interact with us. We may collect:

3.1 Contact Information

This may include:

• •name;
• •email address;
• •telephone number;
• •postal or business address;
• •job title;
• •company name; and
• •professional contact details.

3.2 Membership and Account Information

Where you become a Member or create an account, we may collect:

• •username and account details;
• •membership information;
• •program participation;
• •preferences;
• •meeting and event attendance;
• •communications with Mastr;
• •Member profile information; and
• •information relevant to your participation in Mastr programs.

We do not ordinarily have access to passwords stored by third-party authentication providers where those providers manage authentication on our behalf.

3.3 Business and Professional Information

As part of our advisory and membership Services, we may collect information relating to you and your business, including:

• •business name and industry;
• •role and professional background;
• •business size and structure;
• •business objectives;
• •strategic priorities;
• •business challenges;
• •operational information;
• •financial information voluntarily provided to us;
• •growth plans;
• •organisational structures;
• •succession or exit objectives; and
• •other business information relevant to the Services being provided.

Some business information may be commercially sensitive even where it is not legally classified as personal information. Mastr recognises the importance of protecting this information.

3.4 Payment and Transaction Information

We may collect information necessary to process payments, including:

• •billing details;
• •transaction history;
• •payment status; and
• •relevant payment information.

Payment card information may be processed by third-party payment providers. Mastr may not directly store complete payment card information where payment processing is undertaken by those providers.

3.5 Website and Technology Information

When you use our website, digital platforms or Services, we may automatically collect information including:

• •IP address;
• •device information;
• •browser type;
• •operating system;
• •website activity;
• •pages visited;
• •referring websites;
• •cookies and similar technologies;
• •approximate location derived from technical information; and
• •usage and interaction data.

3.6 Communications

We may collect information contained in:

• •emails;
• •enquiries;
• •feedback;
• •surveys;
• •support requests;
• •telephone conversations;
• •meeting notes;
• •event registrations; and
• •other communications with Mastr.

Where permitted by law, meetings or calls may be recorded or transcribed for operational, training or service purposes. Where appropriate, participants will be notified.

3.7 Events, Programs and Experiences

If you register for or attend a Mastr event, workshop, retreat, conference or other experience, we may collect information such as:

• •registration details;
• •attendance information;
• •dietary requirements;
• •accessibility requirements;
• •emergency contact information where reasonably required;
• •travel or accommodation information where relevant; and
• •photographs, video or recordings where appropriate consent or another lawful basis applies.

Some of this information may constitute sensitive information under Australian privacy law. Where required, we will obtain consent before collecting it.

3.8 Publicly Available Information

We may collect professional or business information from publicly available sources such as:

• •company websites;
• •business directories;
• •professional networking platforms;
• •publicly available corporate records; and
• •other legitimate public sources.

We may collect personal information:

• •directly from you;
• •through our website;
• •when you apply for or become a Mastr Member;
• •when you participate in Mastr Boards or another program;
• •when you register for an event;
• •when you contact us;
• •when you subscribe to communications;
• •through surveys or assessments;
• •through meetings and advisory sessions;
• •from publicly available sources;
• •through referrals;
• •from business partners;
• •from authorised representatives;
• •through social media and professional networking platforms;
• •through our technology, CRM and marketing platforms; and
• •through service providers assisting us in operating our business.

Where another person provides personal information about you, we expect them to have the authority to provide that information where required.

If you provide us with personal information about another person, you should ensure you are authorised to do so and, where required, that the person has been informed about how their information may be handled.

We may use personal information to:

• •provide and administer our Services;
• •manage Mastr memberships;
• •administer Mastr Boards and peer advisory groups;
• •provide business advisory, coaching and educational programs;
• •understand Members' and Clients' needs;
• •facilitate introductions and connections where appropriate;
• •manage accounts, subscriptions and payments;
• •organise meetings, events, workshops and experiences;
• •communicate with Members and Clients;
• •respond to enquiries and provide support;
• •personalise and improve our Services;
• •conduct research and analyse how our Services are used;
• •develop new products, programs and Services;
• •administer surveys and feedback;
• •manage our business operations;
• •maintain security and prevent fraud or misuse;
• •manage relationships with suppliers, advisers and partners;
• •recruit and manage employees and contractors;
• •comply with legal, regulatory and contractual obligations; and
• •protect the legal rights and interests of Mastr, our Members, Clients and other parties.

We may use your contact information to communicate with you about:

• •Mastr Services;
• •membership opportunities;
• •events and programs;
• •educational content;
• •business insights;
• •newsletters;
• •Member benefits;
• •offers; and
• •other information we reasonably believe may be relevant to you.

We will conduct electronic marketing in accordance with applicable laws, including the Spam Act 2003 (Cth).

You may unsubscribe from marketing communications at any time by using the unsubscribe facility contained in our communications or contacting us.

Unsubscribing from marketing communications will not necessarily prevent us from sending operational communications necessary to administer an active membership, account, event, transaction or Service.

Mastr recognises that Members may share commercially sensitive and confidential information through Mastr Boards, advisory groups and other Services.

Information disclosed by Members during peer advisory sessions may include information concerning:

• •business performance;
• •strategy;
• •employees;
• •customers;
• •finances;
• •transactions;
• •succession;
• •acquisitions;
• •business sales;
• •personal business objectives; and
• •other confidential matters.

Mastr will take reasonable steps to protect information entrusted to us.

Members may also be subject to separate confidentiality obligations under the Mastr Membership Agreement, Member Charter or other applicable terms.

Members should exercise appropriate judgement when sharing personal information about employees, customers or other third parties during advisory sessions and should only disclose such information where they are authorised or legally permitted to do so.

Mastr may use technology, automation and artificial intelligence tools to assist with aspects of our operations and Services.

These tools may be used for purposes such as:

• •preparing summaries;
• •analysing business information;
• •generating reports;
• •improving workflows;
• •customer relationship management;
• •research;
• •administrative support;
• •personalising Services; and
• •developing Mastr products and resources.

Where personal or confidential information is processed using third-party technology providers, Mastr will take reasonable steps to select and use providers appropriately and to protect information in accordance with applicable privacy obligations.

Mastr will not knowingly use confidential Member information to train publicly available artificial intelligence models where doing so would disclose that confidential information to the public or an unauthorised third party.

We may disclose personal information where reasonably necessary for the operation of our business and provision of the Services.

This may include disclosure to:

• •Mastr employees and contractors;
• •Mastr Chairs, facilitators and advisers;
• •professional advisers;
• •technology providers;
• •CRM and communications providers;
• •payment processors;
• •accountants and auditors;
• •legal advisers;
• •marketing and analytics providers;
• •event and venue providers;
• •accommodation or travel providers where relevant;
• •insurers;
• •business partners; and
• •other service providers assisting Mastr.

We may also disclose information:

• •where you consent;
• •where reasonably necessary to provide a Service you have requested;
• •where required or authorised by law;
• •in response to a lawful court or government request;
• •to investigate suspected fraud, misconduct or unlawful activity;
• •to protect the rights, safety or property of Mastr or another person;
• •in connection with a proposed or completed merger, acquisition, financing, investment, restructure or sale of all or part of Mastr's business; or
• •where otherwise permitted under applicable privacy law.

Mastr does not sell personal information to third parties.

Some of Mastr's technology, cloud, communications, analytics and other service providers may operate or store information outside Australia.

As a result, personal information may be disclosed to or processed in overseas locations.

The countries involved may vary depending on the service providers Mastr uses from time to time.

Where required by applicable law, Mastr will take reasonable steps to ensure overseas recipients handle personal information consistently with applicable Australian privacy requirements.

Our website may use cookies and similar technologies to:

• •operate the website;
• •remember preferences;
• •understand website usage;
• •improve performance;
• •analyse traffic;
• •personalise content; and
• •support marketing activities.

Some cookies are necessary for website functionality, while others may be optional.

Where applicable, you may manage your cookie preferences through our website cookie settings or your browser settings.

Third-party analytics and advertising providers may also use cookies or similar technologies in accordance with their own privacy policies.

Mastr takes reasonable technical and organisational measures to protect personal information from:

• •misuse;
• •interference;
• •loss;
• •unauthorised access;
• •unauthorised disclosure; and
• •alteration.

Security measures may include access controls, authentication, secure technology platforms, staff procedures, contractual protections and other appropriate safeguards.

However, no electronic transmission or information storage system can be guaranteed to be completely secure.

If Mastr becomes aware of a data breach involving personal information, we will assess and respond to the incident in accordance with applicable legal requirements, including the Notifiable Data Breaches scheme where applicable.

You may request access to personal information Mastr holds about you.

You may also ask us to correct personal information that you believe is inaccurate, incomplete, out of date, irrelevant or misleading.

We will respond to requests within a reasonable period and in accordance with applicable law.

In some circumstances, we may be permitted or required to refuse access. Where required by law, we will provide reasons for doing so.

You may ask us to delete personal information we hold about you or withdraw consent previously provided.

Whether we can comply with a deletion request will depend on applicable legal, regulatory, contractual and legitimate business requirements.

We may need to retain certain information for purposes including:

• •financial and taxation records;
• •contractual obligations;
• •dispute resolution;
• •fraud prevention;
• •legal claims; and
• •compliance with applicable laws.

Where consent is the basis upon which we handle particular information, withdrawal of consent will apply prospectively and will not affect processing that lawfully occurred before consent was withdrawn.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as required or permitted by law.

When information is no longer reasonably required, we will take reasonable steps to securely destroy or de-identify it, subject to legal and operational requirements.

Mastr generally does not seek to collect sensitive information unless it is reasonably necessary for our activities or Services and permitted by law.

Sensitive information may include information concerning health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal records or membership of certain organisations.

Where we need to collect sensitive information, we will obtain consent where required by law.

Our website or Services may contain links to third-party websites, platforms or services.

Mastr is not responsible for the privacy practices of independent third parties.

We recommend reviewing the privacy policies of third-party services before providing personal information to them.

Mastr's Services are primarily intended for adults and businesses.

We do not knowingly seek to collect personal information from children unless it is reasonably necessary for a particular Service and appropriate consent has been obtained where required.

We may update this Privacy Policy from time to time to reflect:

• •changes to our Services;
• •changes to technology;
• •changes to our business operations;
• •changes to service providers; or
• •changes to applicable laws and regulations.

The current version will be published on our website with the date of the most recent update.

Where changes materially affect how we handle personal information, we will take reasonable steps to notify affected individuals where appropriate or required by law.

If you believe Mastr has breached your privacy rights or have concerns regarding how we have handled your personal information, please contact our Privacy Officer.

We will acknowledge and investigate privacy complaints within a reasonable period.

We aim to respond to complaints within 30 days. If additional time is required, we will advise you.

If you are not satisfied with our response, you may have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

For questions, requests or complaints relating to privacy, please contact:

Privacy Officer
Mastr Pty Ltd
Mail: 2/14 Edgewater Crt, Robina 4212
Email: support@mastr.com.au
Website: www.Mastr.com.au

You should contact our Privacy Officer if:

• •you would like access to or correction of your personal information;
• •you believe someone has gained unauthorised access to your information;
• •you believe your Mastr account has been compromised;
• •you wish to make a privacy complaint;
• •you wish to withdraw consent where applicable;
• •you wish to unsubscribe from marketing communications;
• •you would like further information about this Privacy Policy; or
• •you have concerns about how Mastr collects, holds, uses or discloses your personal information.

You may opt out of Mastr marketing communications at any time by:

• •selecting the unsubscribe option in an electronic marketing communication; or
• •contacting our Privacy Officer.

We will take reasonable steps to action your request promptly and in accordance with applicable law.