Privacy Policy

Effective date: 27 October 2026

Who we are

Iconic Business Owner is a Melbourne-based website founded by Sally Siyakatshana. This notice explains how personal information is handled when you use our website, contact us, subscribe or request resources. Privacy questions can be sent to engage@iconicbusinessowner.com.

Applicable rights depend on the law covering the activity and your circumstances. This notice does not assume that every overseas privacy law applies to every visit. Visiting the website is not, by itself, consent to all processing or optional marketing.

Information collected

When you submit a form, contact us or subscribe, information can include your name, email address, message, preferences and the resource requested. Please do not submit passwords, payment-card details, sensitive personal information or confidential client records through general contact forms.

Technical information may include IP address, browser and device details, pages requested, timestamps, referral information and security logs. Analytics and affiliate technologies may process identifiers and usage information as described in our Cookie Policy.

If you comment or use an account feature, the information collected depends on the fields and functions presented. If we offer a paid product, the checkout notice will identify the information required and payment provider. A purchase on an external affiliate merchant’s website is handled by that merchant; it does not mean IBO receives your full payment-card details.

How information is used

Information is used to respond to enquiries, deliver requested resources, manage subscriptions, maintain the website, address technical and security issues and understand use of our content. Marketing subscriptions should reflect your choice; requesting a resource does not automatically authorise unrelated marketing without an appropriate basis.

Where applicable law requires a legal basis, it may be consent, fulfilling a requested service or contract, a legal obligation, or a legitimate interest such as security, subject to the required balancing of individual rights. We do not treat voluntarily sending sensitive information as blanket consent to unrestricted processing.

Service providers and external links

The website uses WordPress, Fluent Forms and Mailchimp-related integrations for website and form or newsletter functions. Mailchimp may process subscriber details and email engagement information according to the features enabled. Google Site Kit and a Google tag are present for connected Google services; analytics may process usage and device information. Hosting, email and backup services may handle information needed to provide their services.

See Intuit/Mailchimp privacy information and Google’s Privacy Policy. Installed software alone does not mean every optional feature is enabled.

We may disclose information where required by law, to address fraud or security threats, or with your authorisation. External websites and affiliate merchants have their own practices. An affiliate commission is a commercial relationship and does not, on its own, describe all data shared with a provider.

Overseas processing

Service providers may process information in Australia, the United States and other countries where they operate or use subprocessors. The location depends on the service and its configuration. Contact us for information about a particular service or disclosure.

Where applicable law requires safeguards for an international transfer, those requirements apply. We do not claim that a particular transfer agreement or safeguard has been verified merely because a provider is named in this policy.

Retention and security

Our retention standard is to keep information only as long as reasonably needed for the purpose for which it was collected, relevant legal obligations and the handling of disputes or security incidents. Retention depends on the record and service; this policy does not invent fixed periods that have not been verified.

Unsubscribing stops marketing to the relevant subscription. A limited suppression record may be retained to respect that choice. Records required for another lawful purpose and backup copies may remain for their applicable retention period.

We take reasonable steps to protect information, but no internet service is completely secure. We do not promise that every security control or audit operates at all times. If you suspect an information-security issue, contact us promptly. Data-breach notification obligations are assessed under the law applicable to the incident.

Access, correction and other requests

You may contact us to request access to or correction of information, ask about retention, withdraw consent where processing relies on it, or request deletion. We may need proportionate identity verification. Some information may need to be retained for legal or other legitimate purposes.

Where applicable, additional rights may include restriction, objection, portability and rights concerning sale, sharing or targeted advertising. These rights depend on jurisdiction and the activity involved. We will assess a request under applicable law rather than promising rights without qualification or refusing them solely because a particular law is not named here.

Email and cookie choices

Marketing emails should include an unsubscribe option. You can also contact us about your subscription. Withdrawing marketing consent does not prevent necessary replies to a request you make.

See our Cookie Policy for the current status of website controls and browser options. A browser’s legacy “Do Not Track” signal is different from legally recognised opt-out preference signals; any applicable obligations concerning those signals must be assessed separately.

Children

Our content is intended for an adult business audience, and purchases or agreements require an adult with legal capacity. We do not seek children’s personal information. If you believe a child has supplied information, contact us so we can investigate and take appropriate action. This audience statement does not replace obligations under applicable children’s privacy law.

Complaints

Email engage@iconicbusinessowner.com with the concern, relevant page or interaction, and the outcome you are seeking. We will investigate and respond, requesting further details where needed. If additional time is needed, we will explain why.

If you are dissatisfied, you may be able to complain to the relevant privacy regulator, including the Office of the Australian Information Commissioner where the matter falls within its jurisdiction, or your relevant overseas authority.

Changes

The effective date records this revision. We will update this notice as practices change and provide additional notice or request consent where required. Continued browsing does not itself provide consent to a new use requiring consent.