Privacy Statement:

1. About this policy

This policy explains how Blossom with Barbara collects, holds, uses and discloses your personal information, and how you can access or correct it or make a complaint.
Blossom with Barbara is a registered company (ABN 95 687 219 674) of NSW 2161, referred to as "we", "us" and "our". Financing Hope holds an Australian Credit licence 416781 and provides all finance services for Blossom with Barbara clients.
We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy applies to our website at blossomwithbarbara.com.au, our online courses (including SMSF Essentials), our coaching programmes, our email newsletters, our free resources (including the SMSF Property Playbook), our social media pages and any enquiry you make with us.
Where we arrange home, business or SMSF lending for you, your information is also handled under the privacy and credit reporting policies of our licensee, which we will give you when you begin that service.

2. The personal information we collect

We only collect personal information that is reasonably necessary for our services. Depending on how you deal with us, this may include:

Sensitive information. We do not ask for sensitive information (such as health information) through our website or courses. If you make a life insurance enquiry, we may need health information to assess your cover, and we will only collect it with your consent and where it is reasonably necessary.

Dealing with us anonymously. You can browse our website and ask general questions without identifying yourself. We cannot enrol you in a course, process a payment or provide lending or coaching services unless you give us your name and contact details.

3. How we collect it

We collect most information directly from you, for example when you:

• download a free resource such as the SMSF Property Playbook or join a waitlist

• buy or enrol in a course or coaching programme

• book a call, complete an enquiry form, email or message us

• post in our online community or take part in a course activity

• follow, message or comment on our social media pages.

We also collect some information automatically through cookies and similar technologies when you use our website or open our emails (see Section 10).

We may receive information about you from third parties, such as Stripe (confirmation of your payment), a person who refers you to us, or, for lending services, lenders and credit reporting bodies with your consent. If we receive information we did not ask for and could not have collected ourselves, we will destroy or de-identify it where it is lawful and reasonable to do so.

4. Why we collect, use and disclose it

We use your personal information to:

• deliver the resources, courses, community access and coaching you have asked for

• process payments, issue receipts and handle refunds

• create and manage your course account and track your progress

• respond to enquiries and book calls

• send you emails about your purchase, your course and changes to our terms

• send you marketing, where you have agreed to receive it (see Section 6)

• improve our website, content and services

• prevent fraud and keep our website and accounts secure

• meet our legal, tax, accounting, licensing and record-keeping obligations.

We only use or disclose your information for the purpose we collected it, for a related purpose you would reasonably expect, with your consent, or where the law requires or allows it.

Credit and lending services. If you engage Barbara for home, business or SMSF lending, we collect and disclose credit-related information under Part IIIA of the Privacy Act and the Privacy (Credit Reporting) Code. Those activities are covered by the Credit Reporting Policy at [link to licensee's Credit Reporting Policy], which we will also give you before we collect that information.

We do not sell or rent your personal information.

5. Payments and Stripe

Payments on our website are processed by Stripe, our third-party payment processor. When you pay, your card or payment details go directly to Stripe through a secure, encrypted connection. We never see or store your full card number or security code.

What we share with Stripe. To process your payment we provide Stripe with your name, email address, billing address, the product you are buying and the amount.

What Stripe collects directly. Stripe collects your payment card or bank details and may collect information about your device, browser, IP address and how you interact with the checkout. Stripe uses this to process your payment, to verify your identity and to detect and prevent fraud.

What Stripe shares with us. Stripe tells us whether your payment succeeded and gives us limited details such as the card type, the last four digits and the expiry date, which we use for receipts, refunds and payment-plan management.

Stripe's own privacy policy. Stripe collects, uses, retains and discloses your personal information as described in its own privacy policy at stripe.com/privacy, including for its own fraud prevention and legal compliance. Stripe may store and process information outside Australia, including in the United States. By making a payment, you acknowledge that your information will be handled by Stripe in this way.

If you have a question about a payment, contact us first using the details in Section 12.

6. Marketing emails

If you download a free resource, join a waitlist or buy from us, we may send you emails about our courses, coaching, events and financial education content. We do this in line with the Spam Act 2003 (Cth). Every marketing email includes an unsubscribe link, and you can also ask us to stop at any time using the details in Section 12. We will still send you essential messages about a purchase or course you are enrolled in.

7. Who we share your information with

We use trusted service providers to run our business. They only receive the information they need to provide their service to us.

We may also disclose your information to:

• our accountants, auditors, lawyers and other professional advisers

• our credit licensee, lenders and insurers, where you have asked us to arrange lending or insurance for you

• government agencies, regulators and law enforcement, where the law requires or allows it

• a buyer of our business, if the business is sold, on the condition that this policy continues to apply.

8. Overseas disclosure

Some of our service providers store or process information outside Australia, mainly in the United States (see Section 7). Before using an overseas provider, we take reasonable steps to make sure it handles your information in a way that is consistent with the Australian Privacy Principles, including by reviewing its privacy and security terms.

9. Automated decision-making

We do not use computer programs to make decisions about you that could significantly affect your rights or interests. Automated tools only send emails, grant course access after a successful payment and tag your contact record based on what you have downloaded or bought. A person makes every decision about lending, insurance, coaching acceptance and refunds. If this changes, we will update this policy to describe the kinds of information used and the kinds of decisions made.

10. Cookies and analytics

Our website and emails use cookies, pixels and similar technologies to keep you logged in, remember your preferences and understand how visitors use our site. Stripe also uses cookies during checkout to help prevent fraud. You can block or delete cookies in your browser settings, but some features, such as logging in to your course or completing a purchase, may not work without them. We do not share your personal information with Meta (Facebook or Instagram).

11. Security, retention and data breaches

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, change or disclosure. These include secure password-protected accounts, two-factor authentication where available, encrypted payment processing through Stripe and limiting access to people who need it.

We keep personal information only for as long as we need it for the purposes in this policy or as the law requires. For example, financial and tax records are generally kept for 7 years. When we no longer need information, we take reasonable steps to destroy or de-identify it.

If a data breach is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.

12. Access, correction, complaints and contact

You can ask to access the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond within 30 days. We do not charge for a request, but may charge a reasonable fee for providing access if a request is unusually large. If we refuse a request, we will explain why in writing.

If you have a question or a complaint about how we have handled your personal information, please contact us via email at [email protected] with the "Privacy" in the subject line.

We will acknowledge your query within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992. For complaints about credit or lending services, you may also contact the Australian Financial Complaints Authority (AFCA) at afca.org.au or on 1800 931 678.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be published on our website with the date it was last updated. If we make a significant change, we will let you know by email or a notice on our website.

Last updated: 01 October 2026.