Mysticpreneur Pty Ltd (trading as Mary Henderson Coaching and The IncubAItor)
Effective date: 1st of October, 2026 · Version: 2.0 (replaces Version 1.0, effective 1 July 2025)
Who we are
Mysticpreneur Pty Ltd (ABN 38 129 793 175) trades as Mary Henderson Coaching and The IncubAItor. We are based in Melbourne, Australia. In this policy, “we”, “us” and “our” mean Mysticpreneur Pty Ltd.
Privacy contact: Mary Henderson, support@maryhendersoncoaching.com
What this policy covers
This policy explains how we handle your personal information when you use:
• our website, https://www.maryhendersoncoaching.com
• our online diagnostic tools, including the Monetisation Readiness Diagnostic at https://diagnostic.maryhendersoncoaching.com, and any similar tools we build in future (together, “our diagnostics”)
• our programs, products, services and emails
It tells you what we collect, why we collect it, who can see it, where it is stored, how long we keep it, and how you stay in control of it.
Our promise to you, in plain words
We never sell your personal information. We never use your diagnostic answers to build advertising audiences. The only people outside our business who can access your information are the service providers who help us run our website, diagnostics and emails, and they can use it only to do that work for us.
Key terms
• Personal information means information or an opinion about you that identifies you, or could reasonably identify you. Under the GDPR this is called “personal data”. In this policy we use the two terms to mean the same thing.
• De-identified or anonymised information means information that no longer identifies you and cannot reasonably be linked back to you.
• Visitor means someone who browses our website. Participant means someone who completes one of our diagnostics. Client means someone who buys our programs or services.
What we collect and how
We collect most information directly from you, when you fill in a form, complete a diagnostic, buy from us or email us. Some technical information is collected automatically when you visit our website. You decide how much you share. If you choose not to give us certain information, we may not be able to deliver your diagnostic results or provide a product or service.
When you complete one of our diagnostics
• Identity and contact: first name and email address
• Business and financial information you choose to enter: 12-month revenue goal and currency, current annual revenue, price of your main offer, number of current clients, hours worked per week, free giveaway downloads, social content views and paying clients in the last 12 months, and your impact goal (the number of people you want to reach)
• Assessment answers: your ratings (1 to 5) on the diagnostic statements
• Results we calculate: your scores, readiness band, verdict, weakest pillar, estimated revenue gap and estimated impact gap
• Consent and verification records: whether you ticked each consent box, and the date and time you opted in and verified your email with the 6-digit code
• Technical information: server and hosting logs such as IP address, browser type and time of access, held by our hosting provider
All business and financial figures are self-reported. We do not check them against any other source, and we never ask for bank, card or payment details in our diagnostics.
We do not ask for sensitive information in our diagnostics. Under Australian privacy law this includes health, racial or ethnic origin, political opinions, religious beliefs and sexual orientation. Please do not include it in any free-text answer.
When you use our website
Your web browser and our server automatically receive information such as the site you came from and the site you go to next, your IP address, internet service provider, browser type, device type, operating system and how you move around our site. Cookies and similar technologies are explained in “Cookies, analytics and advertising” below.
When you sign up, buy or contact us
• Newsletter and free resources: your name, email address and the details on the opt-in form.
• Registering as a member or client: your name, email address and the details on the registration form.
• Buying a program or service: your first and last name, email address, physical address, phone number and payment details. Payments are handled by our third-party payment processors. We do not store your full card number.
• Booking a call: the details you enter in our booking system, such as your name, email address, phone number, time zone and any notes.
• Chat or contact forms: your name, email address, location and anything you choose to tell us. Please share only what we need to answer your question.
How we use your information
Diagnostic information
We use the information you give us in a diagnostic to:
1. Deliver your personalised results. We calculate your scores and show you your results.
2. Verify your email address. We email you a 6-digit code, and you enter it to unlock your results. This confirms the address is real and belongs to you.
3. Send you follow-up emails and insights about your results, as you agree to when you start the diagnostic. These emails may include an invitation to book a strategy call. If you also tick the optional box, we will send you special discounts and exclusive invitations to events and offers. Every email includes a working unsubscribe link, and you can opt out at any time.
4. Carry out our own internal research. We study patterns across responses to understand the experts we serve and the challenges they face. Research findings are only ever shared outside our business in aggregated, de-identified form, such as “most participants rated pricing confidence below 3”. No individual can be identified from them.
5. Develop and improve our tools and programs, including new diagnostics and experiential tools.
We do not use your diagnostic answers to build advertising audiences, and we do not sell them.
Website, customer and newsletter information
We use this information to provide the products and services you request or buy, personalise our content, improve our website, contact you about updates and offers you have agreed to receive, and resolve problems and disputes.
Our legal basis (for users in the UK and European Union)
• Consent: diagnostic participation and marketing emails.
• Contract: when you buy from us, or take steps to do so.
• Legitimate interests: keeping our website and tools secure, preventing misuse, and de-identified research to improve our programs, where this does not override your rights.
• Legal obligation: keeping records required by tax and other laws.
You can withdraw consent at any time. Withdrawing consent does not affect anything we did lawfully before you withdrew it.
Automated scoring in our diagnostics
Our diagnostics use a computer program to calculate your results automatically. We want you to know exactly how this works.
• Information the program uses: your ratings on the diagnostic statements and the business and financial figures you enter, such as revenue, offer price, client numbers, hours worked and audience reach.
• What the program does on its own: it calculates your readiness score, band, verdict, weakest pillar, estimated revenue gap and estimated impact gap. No person reviews these before you see them.
• What the results may be used for: we use your results to choose which follow-up emails and resources are most relevant to you, and when inviting you to book a strategy call with Mary.
Your results are an educational self-assessment based only on what you entered. They are not a prediction, guarantee or professional financial advice. They do not decide your access to any of our products or services. Anyone can book a strategy call or buy a program regardless of their score. If you want to discuss your results, or ask a person to review any decision, contact us using the details at the top of this policy.
Users in the UK and European Union have the right not to be subject to a decision based solely on automated processing that has legal or similarly significant effects on them. Our diagnostic results do not have such effects.
Who can access your information
We never sell, rent or trade your personal information. We disclose it only in the situations below.
Service providers who help us run our business
These providers handle your information on our behalf and only to do the job we hired them for. They are not permitted to use it for their own marketing.
• GetResponse: our email list, the verification code email, and follow-up emails. Where data may be stored: European Union.
• Zapier: moves information between our diagnostics, GetResponse and Google Sheets. Where data may be stored: United States.
• Google (Google Workspace and Google Sheets): stores our research data and business records. Where data may be stored: United States and other countries.
• Vercel: hosts our diagnostics and runs the email code verification. Where data may be stored: United States and other countries.
• OnceHub: strategy call bookings, if you choose to book. Where data may be stored: United States.
• Website host, payment processors, and our accountant, lawyers and auditors: run our website, take payments, and meet our legal and tax obligations. Where data may be stored: Australia and other countries.
We may change providers over time. When we do, we will update this list.
Advertising on our main website
Our main website (not our diagnostics) uses the Meta Pixel and Google advertising tools, explained in “Cookies, analytics and advertising” below. If you have joined our newsletter or bought from us, we may upload your email address in a protected, encrypted (hashed) form to Google or Meta. We do this to show you relevant ads, or to find people with similar interests. You can ask us to stop at any time. We never upload diagnostic participants’ details or answers for this purpose.
When the law requires it
We may disclose information if we are required to by law, a court order or a government authority. We may also disclose it to investigate fraud or misuse, enforce our terms, or protect the rights, property or safety of our business, our users or others.
If our business changes hands
If our business, or part of it, is sold or merged, your information may transfer to the new owner. They must continue to protect it in line with this policy, and we will tell you before your information becomes subject to a different policy.
Storing information overseas
Some of our service providers store information outside Australia, mainly in the United States and the European Union, as shown in the list above. Before we use a provider, we take reasonable steps to make sure it protects your information to a standard consistent with the Australian Privacy Principles. We choose established providers with published security and privacy commitments. Where available, we rely on their data processing agreements and recognised transfer safeguards.
For users in the UK and European Union, when your personal data is transferred outside the UK or EU, we rely on recognised safeguards. These include the European Commission’s Standard Contractual Clauses and the EU-US Data Privacy Framework, where the provider is certified. You can ask us for more detail about these safeguards.
Cookies, analytics and advertising
Our diagnostics do not use tracking or advertising cookies. They use only what is needed to run the tool and verify your email. Our hosting provider keeps standard server logs, described in “What we collect and how”.
Our main website does use cookies. A cookie is a small text file stored on your device. You can block or delete cookies in your browser settings at any time, and opt out of analytics and advertising using the links below. Types we use:
• Strictly necessary: make the site work, such as page display, logins and security.
• Performance and analytics: show us how visitors use the site, such as pages visited and traffic sources.
• Functional: remember your choices, such as login details and preferences.
• Advertising and remarketing: let us and our advertising partners show you relevant ads on other sites.
Some cookies last only while your browser is open (session cookies). Others stay until they expire or you delete them (persistent cookies). Our emails may contain small images called web beacons, which tell us whether an email was opened.
Google Analytics collects information such as pages visited, visit frequency, the site you came from, and general demographic and interest information. We have turned on Google Analytics advertising features, including remarketing and demographics reporting. We do not combine Google Analytics data with your name or other identifying information. You can opt out at https://tools.google.com/dlpage/gaoptout. Google explains how it uses data at https://www.google.com/policies/privacy/partners/.
The Meta Pixel is a small piece of code from Meta (Facebook) on the pages of our main website. When you visit, it places a cookie in your browser and sends Meta information such as the pages you viewed, the actions you took (for example, opening a sales page or joining our list), your IP address and browser details. Meta may match this to your Facebook or Instagram account. We use it to:
• measure how well our Facebook and Instagram ads work
• show our ads to people who have visited our website (remarketing, or “Custom Audiences”)
• let Meta find new people with similar interests to our visitors and customers (“Lookalike Audiences”)
Meta also uses this information under its own privacy policy, as an independent business, not only on our behalf. You can see and control how Meta uses website activity in your Facebook settings under “Your activity off Meta technologies”, or block cookies in your browser.
Google and Meta remarketing means you may see our ads on other websites or on Facebook and Instagram after visiting our site. You can opt out through Google Ads settings (https://support.google.com/ads/answer/2662922), Meta ad preferences (https://www.facebook.com/help/568137493302217), http://www.aboutads.info/choices/, or http://www.youronlinechoices.eu for European users.
Do Not Track: our website does not currently respond to browser “Do Not Track” signals. You can block or delete cookies in your browser settings, though some parts of the site may then not work properly.
How long we keep your information
• Diagnostic contact details (name and email): until you unsubscribe or ask us to delete them.
• Diagnostic answers and results: 24 months from the date you complete the diagnostic, then permanently anonymised so they can no longer identify you.
• Consent and verification records: as long as we hold your contact details, plus up to 2 years, so we can prove consent if asked.
• Customer, purchase and tax records: as long as Australian tax and business law requires, usually 5 to 7 years.
• Server and hosting logs: as set by our hosting provider, usually no more than a few months.
When we no longer need information, we securely delete or anonymise it. Anonymised research data may be kept and used indefinitely, because it no longer identifies anyone.
How we keep your information safe
• Email verification codes, so results only unlock for the real owner of the email address
• Our research data is held in private, access-restricted data stores, never on public pages. Any reports we download from these systems are kept on password-protected devices and deleted once we no longer need them
• Password-protected accounts with two-step login on the services that hold your information
• Encrypted (HTTPS) connections on our website and diagnostics
• Payments handled by third-party processors using industry-standard encryption
No system is completely secure, so we cannot guarantee information sent over the internet. If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as the law requires.
Your rights and choices
Wherever you live, you can ask us to:
• Tell you what personal information we hold about you and how we use it
• Give you a copy of it, in a commonly used format where you provided it to us
• Correct anything inaccurate, out of date or incomplete
• Delete it, unless we must keep it by law
• Stop sending you marketing emails, using the unsubscribe link or by emailing us
• Withdraw consent, or object to or restrict how we use it
• Ask a person to review any result produced by our automated scoring
Email support@maryhendersoncoaching.com with your request. We may ask you to confirm your identity first. We will respond within 30 days, and there is no charge. If we cannot agree to your request, we will explain why.
Users in the UK and European Union also have the rights to data portability and to object to direct marketing and profiling, under the GDPR and UK GDPR.
Users in California and other US states may have rights under state privacy laws, including the right to know, delete and correct personal information, and to opt out of its “sale” or “sharing” for targeted advertising. We do not sell personal information. To opt out of advertising-related sharing on our main website, email us or use the opt-out links in “Cookies, analytics and advertising”. We will not treat you differently for using any of these rights.
Complaints
If you are concerned about how we have handled your information, please email us first at support@maryhendersoncoaching.com. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days.
If you are not satisfied with our response, you can complain to:
• Australia: the Office of the Australian Information Commissioner, www.oaic.gov.au, 1300 363 992
• UK: the Information Commissioner’s Office, www.ico.org.uk
• European Union: the data protection authority in your country
Children
Our website and diagnostics are designed for adults in business. They are not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
Emails from us
We send marketing emails only to people who have agreed to receive them. Every email identifies us as the sender and includes a working unsubscribe link. We will act on your unsubscribe request within 5 business days. We will not sell, rent or trade your email address.
Links to other websites
Our website and emails may link to other sites. We do not control them and are not responsible for their privacy practices. Please read their privacy policies.
Discussion boards and comments
If you post in a community area or comment section, what you post may be visible to others and is not protected by this policy. Please do not post personal information about yourself or anyone else without permission. We will remove posts that breach another person’s privacy once we are told about them.
Changes to this policy
We may update this policy as our tools and the law change. We will post the new version here with a new effective date. If we plan to use your information in a materially different way from what we told you when we collected it, we will email you first and, where the law requires, ask for your consent.
Contact us
Mysticpreneur Pty Ltd (ABN 38 129 793 175)
Melbourne, Australia
Privacy contact: Mary Henderson, support@maryhendersoncoaching.com