Privacy Policy

In this Privacy Policy, ‘I’, ‘me’, ‘us’, ‘we’ or ‘our’ means Mike McGregor. We are committed to respecting your privacy. Our Privacy Policy sets out how we collect, use, store and disclose your personal information.

This Privacy Policy covers all of Mike McGregor’s websites and the services provided through them: mikemcgregor.com.au, inneredgebreathwork.com (Inner Edge Breathwork), momentumprofile.com (Momentum) and the client portal at mikemcgregor.com.au/clients. Inner Edge Breathwork and Momentum are run by Mike McGregor. Where this policy says ‘our website’ or ‘our sites’, it means any of these, and where it says ‘our app’, it means the client portal and the Momentum assessment.

Please read this Privacy Policy carefully.  We may change our Privacy Policy from time to time by publishing changes to it on our website. We encourage you to check our website periodically to ensure that you are aware of our current Privacy Policy.  We will notify you of any modifications to this Privacy Policy that might materially affect the way we use or disclose your personal information prior to the change becoming effective. The date at the top shows when it last changed.

Personal information includes information or an opinion about an individual that is reasonably identifiable. For example, this may include your name, age, gender, postcode and contact details. It may also include financial information, including your credit card information. When you pay us, you enter your card details into Stripe’s own payment form, and they go to Stripe, our payment provider. We do not see or keep your full card number. If you pay with Apple Pay or Google Pay, Apple or Google passes your card to Stripe for you.

What personal information do we collect?

We may collect the following types of personal information:

• name;

• mailing or street address;

• email address;

• telephone number and other contact details;

• age or date of birth;

• credit card information, which Stripe collects and holds for us when you pay;

• your device ID, device type, geo-location information, computer and connection information, statistics on page views, traffic to and from the sites, ad data, IP address and standard web log information;

• with your consent, limited health information (such as medical history, or a condition you tell Mike about before a breathwork session);

• details of the products and services we have provided to you or that you have enquired about, including any additional information necessary to deliver those products and services and respond to your enquiries;

• any additional information relating to you that you provide to us directly through our website or app or indirectly through your use of our website or app or online presence or through other websites or accounts from which you permit us to collect information;

• your bookings: which session, its day and time, whether it is on Zoom or in person, and whether you joined it;

• the audio, the transcript and Zoom’s AI summary of each recorded online session, and the notes Mike makes from them (see ‘Online sessions’ below);

• your client portal account: your name, your email address, your password (kept in a scrambled form we cannot read), the sessions you have paid for, and the notes you write yourself;

• your Momentum answers, the three life domains you choose, and the profile made from them;

• which of our mailing lists you have joined, the site and page you joined from, and whether you have unsubscribed;

• a one way code made from your internet address (never the address itself), used only to stop too many bookings or messages coming from one place;

• information you provide to us through customer surveys; or

• any other personal information that may be required in order to facilitate your dealings with us.

We may collect these types of personal information either directly from you, or from third parties. We may collect this information when you:

• register on our website or app;

• communicate with us through correspondence, chats, email, or when you share information with us from other social applications, services or websites;

• book a session or a group class through our booking calendar, or pay for one;

• join an online session on Zoom;

• use the client portal;

• send us a message through the form on our Contact page;

• join one of our mailing lists, or Momentum’s early bird list;

• complete Momentum;

• interact with our sites, services, content and advertising; or

• invest in our business or enquire as to a potential purchase in our business.

The third parties we collect from are mainly the services listed under ‘Services that hold your information’ below. For example, Stripe tells us the name and email you paid with, and Zoom gives us the transcript and summary of a recorded online session and a list of who joined each online session.

In addition, when you apply for a job or position with us we may collect certain information from you (including your name, contact details, working history and relevant records checks) from any recruitment consultant, your previous employers and others who may be able to provide information to us to assist in our decision on whether or not to make you an offer of employment or engage you under a contract. This Privacy Policy does not apply to acts and practices in relation to employee records of our current and former employees, which are exempt from the Privacy Act in Australia.

Why do we collect, use and disclose personal information?

We may collect, hold, use and disclose your personal information for the following purposes:

• to enable you to access and use our services and app, including the client portal and Momentum (whether that means booking a session or a group class, joining a retreat, or becoming a Counselling and Coaching client);

• to operate, protect, improve and optimise our services and app, business and our users’ experience, such as to perform analytics, conduct research and for advertising and marketing;

• to send you service, support and administrative messages, reminders, technical notices, updates, security alerts, and information requested by you;

• to send offers, promotions or discounts;

• to send you marketing and promotional messages and other information that may be of interest to you, including information sent by, or on behalf of, our business partners that we think you may find interesting;

• to administer rewards, surveys, contests, or other promotional activities or events sponsored or managed by us or our business partners;

• to make and manage your bookings: Mike’s calendar invite to you, your Zoom link, and moving or cancelling a session;

• to run your client portal: your sessions, what you still have to book, your transcripts, Mike’s notes for you and your receipts;

• to prepare for and follow up your sessions, including Mike’s notes made from a session’s transcript and summary;

• to keep a record of who joined each online session;

• to give you your Momentum profile and, if you choose Momentum With Mike, to work from it in your sessions;

• to stop misuse of our booking calendar, our contact form and our sign up forms;

• to comply with our legal obligations, resolve any disputes that we may have with any of our users, and enforce our agreements with third parties; and

• to consider your employment application.

Do we use your personal information for direct marketing?

With your consent where required by law, we may send you direct marketing communications and information about our services and products. This may take the form of emails, SMS, mail or other forms of communication, in accordance with the Spam Act and the Privacy Act, or relevant law in your jurisdiction. You may opt out of receiving marketing materials from us by contacting us using the details set out below or by using the opt-out facilities provided (e.g. an unsubscribe link).

Our mailing lists

We have three mailing lists, one for each site: Mike McGregor (mikemcgregor.com.au), Inner Edge Breathwork (inneredgebreathwork.com) and Momentum (momentumprofile.com). Momentum’s early bird list, which you join from a Buy Momentum button while Momentum is coming soon, is the Momentum list.

You join a list only by giving your email in one of our sign up forms: Stay Connected at the foot of each page, the sign up after you send a message on our Contact page, or Momentum’s early bird list. Booking or paying for a session does not add you to a list. For each sign up we keep your email, any name you gave, the list, the site and page you joined from, and, for Momentum’s early bird list, which of Momentum’s two ways (On Your Own or With Mike) you had pressed. When you join a list, you get one welcome email for it.

Every email from a list has an Unsubscribe link. In the welcome email you get when you join a list, one press takes you off that list only, so you stay on any other list you joined. Mike’s own emails to a list are sent through Resend, and their Unsubscribe link is Resend’s own: one press takes you off every one of our lists. We keep a note that you unsubscribed, so you are not added back by mistake; joining again puts you back on a list you left from its welcome email. To come off every list, or to have your sign up deleted altogether, contact us (see Contact Us).

We keep our lists, and send their emails, through Resend (see ‘Services that hold your information’ below).

To whom do we disclose your personal information?

We may disclose personal information for the purposes described in this Privacy Policy to:

• our employees and sub-contractors;

• third party suppliers and service providers (including providers for the operation of our websites and/or our business or in connection with providing our products and services to you), which are listed under ‘Services that hold your information’ below;

• professional advisers, dealers and agents;

• payment systems operators (e.g. merchants receiving card payments);

• our existing or potential agents, business partners or partners;

• our sponsors or promoters of any competition that we conduct via our services;

• anyone to whom our assets or businesses (or any part of them) are transferred;

• specific third parties authorised by you to receive information held by us; and/or

• other persons, including government agencies, regulatory bodies and law enforcement agencies, or as required, authorised or permitted by law.

Services that hold your information, and where they are

We use these services to run our websites and our business. Each holds some of your information for us:

• Stripe takes card payments for sessions and for Momentum. It holds your card details, the name and email you pay with, and your receipts. Where: the United States and other countries.

• Microsoft 365 holds Mike’s calendar and his email. Each booking is an event in his calendar with your name and email, and your calendar invite is sent from it, from Mike’s own email address. Messages you send through our contact form arrive in Mike’s email there. Where: Australia.

• Nylas connects our booking calendar to Mike’s Microsoft 365 calendar and to Zoom, so your booking passes through it. Where: the United States.

• Zoom runs online sessions. For a recorded session, it makes the recording, the transcript and the AI summary, and it keeps the audio and the AI summary after the video is deleted. It tells us who joined each online session. For an online group session, it holds your name and email to give you your own join link. Where: the United States and other countries.

• Supabase is our database and the client portal’s sign in. It holds your account, your bookings, your transcripts and notes, the record of who joined, and mailing list sign ups. Where: Seoul, South Korea. Today’s Momentum assessment uses the same Supabase accounts as the client portal, so Supabase also holds your Momentum answers, scores and profile, with your account, in Seoul.

• Resend sends our emails: mailing list emails, the contact form’s messages to Mike, and the client portal’s welcome and password emails. It also keeps our mailing lists. Where: the United States; its sending servers are in Tokyo, Japan.

• Vercel hosts our three websites and the client portal, and keeps standard web logs. Where: the United States and Vercel’s worldwide network.

• Vercel Web Analytics counts visits to our three websites and the client portal (see ‘Analytics and session recordings’ below). Where: the United States and Vercel’s worldwide network.

• Microsoft Clarity makes heatmaps and recordings of visits to our three websites and the client portal (see ‘Analytics and session recordings’ below). Where: Microsoft’s Azure cloud, run by Microsoft in the United States.

• Anthropic writes the insights in your Momentum profile with its AI, Claude. Today’s Momentum assessment is built to send it what is needed from your answers and results to write them. Where: the United States.

So some of your information is kept or handled outside Australia: in South Korea (our database), the United States (Stripe, Nylas, Zoom, Resend, Vercel and its Web Analytics, Microsoft Clarity and Anthropic) and Japan (where our emails are sent from). Each of these services also has its own privacy policy, which applies to what it holds.

Online sessions: recordings, transcripts and notes

Online sessions on Zoom may be recorded to Zoom’s cloud and transcribed, and Zoom’s AI Companion may write a summary of them. The online group breathwork session is not recorded at all: no audio, no transcript and no AI summary. Sessions in person in Hawthorn, including the group at Kozen Yoga, are not recorded.

For a recorded session, we keep the audio, the written transcript and Zoom’s AI summary, and never the video. Your transcript goes into your client portal, under that session, where you can read it. Once the transcript is saved and the summary is in (or a day after the session, if Zoom gives no transcript or no summary), the video is deleted from Zoom for good, not moved to Zoom’s trash. The audio and Zoom’s AI summary stay in Zoom.

Zoom’s summary becomes a draft of Mike’s notes for you. Only Mike sees the draft. Nothing from it reaches you until he has checked, edited and approved it.

Zoom also tells us who joined each online session, when, and for how long. Only Mike sees this record.

If you tell Mike about your health, or anything else personal, during a recorded session, it will be in that session’s audio and transcript and may be in Zoom’s summary.

Every booking, paid or free, goes into a client portal account, yours already or one opened for you (see ‘The client portal’ below). Only if opening your account fails when you pay or book is your booking kept under your email without one. Then your transcript is kept on our server, where no client can read it, and goes into your portal once your booking is linked to a portal account.

We tell you that online sessions may be recorded before you book, in our Terms and Conditions, which our booking calendar asks you to agree to when you book.

Group sessions

Online group: everyone in the Zoom meeting sees the name you join with, and sees and hears you while your camera and microphone are on. Each person gets their own calendar invite and their own Zoom link, so nobody else in the group sees your email address. To give you your own link, Zoom keeps your name and email for that session.

The online group session is not recorded, so no audio, transcript or summary of it is kept, for you or for anyone else in it.

The record of who joined is seen only by Mike. We ask everyone in a group to keep what others share to themselves.

Group at Kozen Yoga: you pick your Sunday in our booking calendar with your name and email, then book and pay on Kozen Yoga’s own website. We do not send your details to Kozen Yoga. What you give Kozen Yoga is covered by its own privacy policy.

The client portal

How you get an account. When you pay for a session in our booking calendar, the name and email you pay with open your client portal account, and we email you a welcome with a link to sign in and set your own password. If you already have an account, the new session is added to it. A free booking (an Insight Session, or a Sunday at Kozen Yoga) opens an account the same way, and your calendar invite also carries a private link to move or cancel it.

What it holds. Your name and email; your sessions, past and booked, and what you still have to book; the transcripts of your recorded online sessions; Mike’s notes for you, once he approves them; the notes you write yourself before and after each session; and your receipts. Your receipts are read from Stripe each time you open them.

Who sees it. You see only your own sessions and notes, and only while the booking is yours. Mike’s own page in the portal, which opens only for his sign in, holds the list of portal clients, any booking whose email does not yet match a portal account, the drafts of his notes, the record of who joined each online session, and any booking that did not go through. No client can see that page.

Momentum

Momentum is coming soon. Until it opens, its Buy Momentum buttons ask only for your email, for the early bird list.

Once it opens, you pay through Stripe and take the assessment online. Before its 120 questions you choose three life domains, and you answer for your last one to four weeks. Your answers are saved every ten questions, so you can stop and pick up again. Your profile, results and experiments are kept so you can come back to them, and a retake at six months is included.

Your answers and your profile are private. You see them, and so does Mike if you choose Momentum With Mike, for your sessions. Your employer never does, and we never pass them on without your consent. Momentum has its own sign in page, separate from the client portal’s, but today’s assessment uses the same accounts as the client portal. Your Momentum answers, scores and profile are kept with your account in our database, Supabase, in Seoul, South Korea. To write the insights in your profile, the assessment is built to send what is needed from your answers and results to Anthropic, whose AI, Claude, writes them (see ‘Services that hold your information’).

We keep your Momentum answers and profile with no set end date, so you can come back to them, and delete them whenever you ask.

Using our app and cookies

We may collect personal information about you when you use and access our website and app.

While we do not use browsing information to identify you personally, we may record certain information about your use of our website, such as which pages you visit, the time and date of your visit and the internet protocol address assigned to your computer.

We may also use ‘cookies’ or other similar tracking technologies on our website that help us track your website usage and remember your preferences. Cookies are small files that store information on your computer, TV, mobile phone or other device. They enable the entity that put the cookie on your device to recognise you across different websites, services, devices and/or browsing sessions. You can disable cookies through your internet browser but our websites may not work as intended for you if you do so.

We may also use cookies to enable us to collect data that may include personal information. For example, where a cookie is linked to your account, it will be considered personal information under the Privacy Act. We will handle any personal information collected by cookies in the same way that we handle all other personal information as described in this Privacy Policy.

At the date at the top, our websites use no advertising trackers. The two services that tell us how they are used are set out under ‘Analytics and session recordings’ below. Apart from those two, what our websites keep in your browser is only what makes them work: your sign in, if you sign in, so you stay signed in until you sign out; the times our booking calendar has loaded, and a time you are holding, in that browser tab only; a random code your browser makes for itself, so only that browser can pay for or let go a time it is holding; the page you signed in from, so signing out brings you back to it; and a note of how the menu fits your screen.

When you press Continue on a paid session, Stripe’s payment form loads from Stripe, with fonts from Google Fonts, and Stripe may set cookies of its own to prevent fraud. The client portal shows photos from Unsplash, so your browser asks Unsplash for them. When you sign in, use the client portal, book while signed in, or open our booking page at mikemcgregor.com.au/clients/book, your browser loads the sign in program from jsDelivr, a public code library. Once your Sunday at Kozen Yoga is saved in our booking calendar, your browser asks Momence, Kozen Yoga’s booking system, for that class on Kozen Yoga’s timetable, so the Pay at Kozen button can go straight to it. Your name and email are not sent to Momence.

Our sites link to other sites, such as Kozen Yoga, Spotify, Instagram and LinkedIn. Those sites have their own privacy policies.

Analytics and session recordings

Two services tell us how our websites are used, so we can make them better. Both run on mikemcgregor.com.au, including the client portal, and on inneredgebreathwork.com and momentumprofile.com.

Vercel Web Analytics counts visits: the pages viewed, the website that sent you, your country and the kind of device and browser you use. It does not use cookies.

Microsoft Clarity makes heatmaps of where visitors click, tap and scroll, and recordings that replay visits. It uses cookies, both our own and Microsoft’s. How Microsoft uses this data is set out in the Microsoft Privacy Statement.

In the client portal, Clarity’s recordings hide your transcripts, Mike’s notes for you, the notes and answers you write yourself, your email, your account details and your payments, and Mike’s own page in the portal.

Security

We may hold your personal information in either electronic or hard copy form. We take reasonable steps to protect your personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure and we use a number of physical, administrative, personnel and technical measures to protect your personal information. However, we cannot guarantee the security of your personal information.

For example: you can see only your own part of the client portal; Mike’s page in the portal opens only for his sign in; Stripe holds card details, not us; internet addresses used to stop misuse are kept only as one way codes; and the video of online sessions is deleted from Zoom.

If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the Privacy Act requires.

How long we keep your information

We keep your personal information only for as long as we need it for the purposes in this Privacy Policy, or for as long as the law requires. Then we delete it, or remove what identifies you.

• Video of online sessions: never kept. It is deleted from Zoom once the transcript and summary are saved, as described under ‘Online sessions’. Zoom’s AI summary stays in Zoom.

• Audio and transcripts of online sessions, Mike’s notes and your own notes: kept while your portal account is open, and deleted when you ask us to close it.

• Your bookings and the record of who joined: kept while your portal account is open, and deleted when you ask us to close it.

• Payment records: as long as Australian tax law requires.

• Messages sent through our contact form: not stored in our database. Each one is only emailed to Mike.

• Mailing lists: until you unsubscribe; after that, only the note that you unsubscribed, unless you ask us to delete it.

• Momentum answers and profiles: no set end date; kept until you ask us to delete them.

Accessing or correcting your personal information

You can access the personal information we hold about you by contacting us using the information below. Sometimes, we may not be able to provide you with access to all of your personal information and, where this is the case, we will tell you why. We may also need to verify your identity when you request your personal information.

If you think that any personal information we hold about you is inaccurate, please contact us and we will take reasonable steps to ensure that it is corrected.

You can read your own transcripts, Mike’s approved notes, your own notes and your receipts in the client portal at any time.

Deleting your information. You can ask us to delete your information, close your client portal account, or delete your Momentum answers and profile, by contacting us (see Contact Us). There is no delete button in the portal yet. We will confirm when it is done, within 30 days, apart from anything the law requires us to keep, such as payment records. Stripe and Zoom may keep their own records under their own privacy policies.

Making a complaint

If you think we have breached the Privacy Act, or you wish to make a complaint about the way we have handled your personal information, you can contact us using the details set out below. Please include your name, email address and/or telephone number and clearly describe your complaint. We will acknowledge your complaint and respond to you regarding your complaint within a reasonable period of time. If you think that we have failed to resolve the complaint satisfactorily, we will provide you with information about the further steps you can take.

If you are not satisfied with our answer, you can also complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Contact Us

For further information about our Privacy Policy or practices, or to exercise control over your personal information, or make a complaint, please contact us via the contact page.