Privacy Policy

I value your privacy.  This Privacy Policy explains how Nicol Heard t/a Courageous You and Biz Bestie (ABN 99 629 864 613) (“CY”, “me”, “I”) and Nicol Heard deals with the information that I collect through my website [INSERT], social media or directly from you.

Personal Information

Personal Information is any information that is identifiable to a person and includes records that I create about individuals.  Sensitive Information is personal information that includes information about a person’s:

  • Racial or ethnic origin;
  • Religious beliefs or affiliations;
  • Philosophical beliefs; and
  • Health information.

Collecting Personal Information

I collect information when people deal directly with me, through social media, through my booking system and through my website.  I primarily collect information to provide my services to clients.  The type of information I collect depends upon the purpose of collection.  I collect the following kinds of personal information:

  • Full name;
  • Email address;
  • Mobile phone number; and
  • Social media handles / profiles.

I do not collect Sensitive Information as a matter of course.

Working with me:

If you work with me, it is likely that we will discuss other personal information including:

  • details of your motivations and goals;
  • information about your personal experiences;
  • information about family members; and
  • sensitive Information.

You choose the extent of Personal Information that you share with me.  All notes of consultations with me are provided to you in a shareable link.  Once downloaded by you, they are destroyed by CY.

Membership Program

This Privacy Policy applies to any group programs operated by Courageous You.  You are in control of and are responsible for the information that you share in a group environment, including on social media.  By participating in online groups, you are consenting to Courageous You communicating with you in the group environment.  If you want to engage with me privately you should contact me through private means.

When interacting in a group through social media, you have separately agreed to the Privacy Policy of the platform.  This Policy relates only to how Courageous You deals with your personal information.

Third party information

I don’t collect personal information from third parties, other than if a client speaks about a third party to me.  In that context, the collection of information is predominantly about the client, as opposed to the third party.

Payment information

I use a third-party payment provider and do not collect your payment information.  You should review the Privacy Policy of the payment provider (Square or PayPal) to understand how your payment information is dealt with.

Using Personal Information

I personal information to:

  • Communicate with you, and respond to your inquiries;
  • Provide my services to you; and
  • Send marketing communications.

I use Google Drive to store information.  Google Drive has a range of servers based in data centre locations in the United States, Taiwan, Singapore, Ireland, the Netherlands, Finland and Belgium.  I cannot identify where Courageous You’s information is stored.  I do not otherwise disclose any information to any entity based overseas other than as described in this Privacy Policy.

I will only use your personal information to the extent that it is necessary to do so.  I will not share or disclose your personal information with any third parties unless:

  1. You have given me your consent to do so.
  2. When I believe that it is necessary to do so to lessen or prevent a serious threat to the life, health or safety of an individual.
  3. I am required by law to do so.

Behaviour Profiling:

I offer a range of profiling services relating to emotional intelligence, conversational intelligence, motivators and behaviours. I licence third party software to undertake the profiling and provide the reports to you.  The third-party software is provided by Assessments24k7 which is based in the United States of America.  I only disclose your name to them.  When you answer the profiling questions, the information goes to the third-party software for conducting the assessment and producing the results to you.  Ask me if you want more information about how your personal information is dealt with for profiling services.

Using pseudonyms and anonymity

You can use my website, follow my public social media pages and subscribe to my mailing list anonymously.  If you book a consultation with me, or join my group, you must provide me with your name and contact information so that I can contact you in relation to the appointment.

Keeping your information & Security

I maintain reasonable security arrangements to protect personal information from unauthorised access, use or disclosure.  However, I cannot guarantee that the security of information transmitted through the internet or through social media is impenetrable.  You are responsible for keeping all passwords confidential and configuring the appropriate control settings on your devices.  I will keep your personal information for as long as necessary to provide our services to you, or as required by law.

I keep information in Acuity Software, provided by Reed Business Information Group.  Reed Business Information Group have a server based in Australia and use attempts to store information in a localised area.

Cookies and Analytics

The website may include the use of cookies and analytics.  To use this website, you must consent to the use of cookies.  If you reside in the EU and do not consent to the use of cookies you must leave this website immediately and notify me on the email address below.  You can withdraw your consent to the use of cookies at any time by clearing the cookies in your browser and leaving the page.

Cookies are small files that a website transfers to your computer’s hard drive through your web browser, that enables the website to recognise your browser and capture and remember certain information.  Cookies do not contain personal information in themselves, but they can be used to identify a visitor to the website when combined with other information.

At times I may use cookies to compile aggregate data about how users interact with the website so I can offer better website experiences in the future.  If you prefer, you can choose to have your computer warn you each time a cookie is being sent, or you can turn off all cookies through your browser settings.  If you turn off the cookies, some aspects of the website may not function properly.

Analytics tools track how visitors interact with our Site and are used so that I can provide a better user experience through the website.

Access to Information

You have the right to access, update or ask me to remove personal information from my possession at any time.  Please contact me by email to with any inquiries, requests or complaints relating to your personal information.  All complaints in relation to personal information will be promptly dealt with.  I will endeavour to respond to complaints within 28 days.

This Privacy Policy may change from time to time.  Please consult my Website for the latest version.

Your Legal Rights – European Citizens

European Union Citizens have rights under the General Data Protection Regulation (GDPR). These include the right to:

  • access your data held by me.
  • rectify any data held by me.
  • request me to erase your data.
  • ask me to stop processing your data.
  • ask me to send your data to another Data Controller.

These requests, and any complaints about how we have handled your data should be made in writing to:  I will respond to your concerns within 30 days.

You also have the right to lodge a complaint with the supervisory authority in the EU Member State where you reside, work, or in the pace where your privacy has alleged9ly been infringed. Courageous You does not have an establishment in the EU. If you suffer damage because of my breach of the GDPR, you have the right to claim compensation through the courts in the Member State where you habitually reside. Courageous You is not required to pay compensation if I was not responsible for the event that caused the damage.


This Policy was last updated in October 2018.