Privacy Policy

1. Who we are

The Lab is run by Vinci Advisory, a sole trader based in Victoria, Australia. We are the data controller for the information you give us when you join. You can reach us at toby@vinciadvisory.com.au.

2. What we collect

When you create an account and use The Lab, we collect:

• Your email address, used to sign in and for member emails.
• Your name and business name, if you add them to your profile.
• Your Stripe customer id and subscription status. We never see or store your card number.
• Your posts, comments and questions inside the member area.
• Your video progress so we can show you where you left off.
• Basic log data like IP address and browser type, kept short term to protect the service from abuse.

3. Why we use it

• To give you access to The Lab and keep your account working.
• To charge your subscription and keep a record of payments.
• To show your posts to other members inside The Lab.
• To send you member emails about new lessons, office hours and account matters.
• To understand which lessons are watched and improve them.
• To meet our legal and tax obligations in Australia.

4. Who sees it

Toby sees everything in your account. Other members see what you post publicly in the member area, your display name and your business name if you have set one. Other members do not see your email address, your payment details or your private account settings.

5. Third parties we use

We rely on a small set of trusted providers to run The Lab:

• Supabase for the database and sign in. Data is held in their Australian region where possible.
• Stripe for payments. Stripe stores your card details, not us.
• Resend for transactional and member emails.
• Cloudflare R2 for video and file storage, and Cloudflare for traffic protection.
• Vercel for hosting the site.

These providers only process data on our behalf, under their own privacy terms. We do not sell your personal information to anyone.

6. Cookies

We use a small number of first-party cookies to keep you signed in and remember your session. We do not run advertising cookies or third party trackers. You can clear cookies in your browser at any time. Signing out will clear your session.

7. Where your data lives

Our providers are based in Australia, the United States and the European Union. By using The Lab you understand that your data may be processed outside Australia. We only use providers that offer reasonable security and privacy protections.

8. How long we keep it

We keep your account data for as long as you are a member, and for a reasonable period after you cancel in case you want to rejoin. Payment records are kept for 7 years to meet Australian tax law. Posts you have made inside The Lab stay visible to other members unless you ask us to remove them.

9. Your rights

You can:

• Ask for a copy of the personal information we hold on you.
• Correct anything that is wrong.
• Delete your account and the personal data tied to it.
• Withdraw consent for member emails at any time.

Email toby@vinciadvisory.com.au and we will act on your request within a reasonable time. If you are in the EU or UK, you have rights under the GDPR including the right to object and the right to lodge a complaint with your local data protection authority. If you are in Australia, you have rights under the Privacy Act 1988 and can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

10. Security

We take reasonable steps to protect your data, including encrypted connections, hashed passwords and access control. No system is perfect. If something goes wrong we will tell affected members as quickly as we can and work with our providers to fix it.

11. Children

The Lab is for business owners. It is not aimed at anyone under 16 and we do not knowingly collect data from children. If you believe a child has created an account, email us and we will remove it.

12. Changes to this policy

If we make a material change to this policy we will let members know by email or inside The Lab before it takes effect. The date at the bottom of this page will always show when it was last updated.

13. Contact

For any privacy question, email toby@vinciadvisory.com.au.