The event organiser, Ingrove Academy, has the legal responsibility to tell ticket buyers and event attendees how their personal information will be collected and used. You can find their Privacy Policy below or contact them to request it.
1. About this Privacy Policy
Ingrove is committed to protecting your privacy and handling your personal information in a transparent, responsible and secure manner.
This Privacy Policy explains how we collect, hold, use, disclose and protect personal information and personal data in accordance with applicable privacy and data-protection laws, including:
- the Privacy Act 1988 (Cth) and the Australian Privacy Principles;
- the General Data Protection Regulation (EU) 2016/679;
- applicable Dutch legislation implementing the GDPR;
- the UK General Data Protection Regulation; and
- the Data Protection Act 2018 (UK).
Under the GDPR and UK GDPR, organisations should explain their identity, processing purposes, lawful bases, recipients, retention practices, international transfers and individual rights in clear and accessible language.
This Privacy Policy applies to the websites, brands, products and services operated by the Ingrove entities, including:
- Ingrove
- Ingrove Academy;
- Ingrove Press;
- ingrove.com.au;
- ingroveacademy.com;
- ingrovepress.com; and
- any other website, platform or service that links to this Privacy Policy.
2. Who We Are
For the purposes of this Privacy Policy, “Ingrove”, “we”, “us” and “our” refer to one or both of the following entities, depending on the product, service or region concerned.
Australia and the rest of the world, excluding the United Kingdom and Europe
Ingrove Pty Ltd
ABN: 26 635 070 236
Unit 1, 226 Bay Road
Sandringham VIC 3191
Australia
Email: support@ingrovegroup.com
Phone: +61 3 8686 9077
United Kingdom and Europe
Ingrove Group B.V.
A private limited company incorporated in the Netherlands
KvK registration number: 42008846
VAT identification number: NL869264540B01
Registered address:
Korte Lijnbaanssteeg 1-4592
1012 SL, Amsterdam
Netherlands
Email: support@ingrovegroup.com
3. Which Entity Is Responsible for Your Information?
The entity responsible for your personal information will generally depend on the region in which the relevant product or service is offered or supplied.
Ingrove Group B.V.
Ingrove Group B.V. will generally be responsible where you:
- register for or attend a workshop, conference or event in the United Kingdom or Europe;
- purchase books, resources or services supplied through our UK or European operations;
- enter into a coaching, consulting, publishing or licensing arrangement with Ingrove Group B.V.; or
- otherwise deal directly with Ingrove Group B.V.
Ingrove Pty Ltd
Ingrove Pty Ltd will generally be responsible where you:
- register for or attend a workshop, conference or event outside the United Kingdom and Europe;
- purchase books, resources or services supplied through our Australian or international operations outside the United Kingdom and Europe;
- enter into a coaching, consulting, publishing or licensing arrangement with Ingrove Pty Ltd; or
- otherwise deal directly with Ingrove Pty Ltd.
In some cases, both entities may process personal information where they jointly administer websites, customer relationships, events, publishing activities or group operations.
4. What Is Personal Information?
Personal information or personal data is information that identifies you, relates to you or could reasonably be used to identify you.
Depending on how you interact with us, this may include:
- your name;
- postal address;
- email address;
- telephone number;
- organisation, school, employer or job title;
- billing and delivery information;
- workshop, event or course registration information;
- dietary, accessibility or special-assistance requirements;
- purchase and transaction details;
- correspondence and enquiry records;
- account or login information;
- IP address;
- browser, device and operating-system information;
- website usage and analytics information;
- marketing and communication preferences;
- photographs, video or audio recordings where appropriate consent or notice has been provided;
- recruitment or employment application information; and
- any other information you voluntarily provide to us.
We do not ordinarily receive or retain complete payment-card details. Payments may be processed by third-party payment providers, which handle payment information under their own privacy and security arrangements.
5. How We Collect Personal Information
We may collect personal information:
- when you visit or use one of our websites;
- when you create an account;
- when you purchase a book, resource, digital product or service;
- when you register for a workshop, conference, coaching program or event;
- when you submit a contact form, enquiry or support request;
- when you subscribe to a mailing list or marketing communication;
- when you communicate with us by email, telephone, video conference, social media or other channels;
- when your school, employer or another organisation registers or communicates on your behalf;
- when you participate in surveys, promotions or feedback activities;
- through cookies, pixels, analytics and similar technologies;
- from payment, registration, ticketing, ecommerce or fulfilment providers;
- from distributors, publishing partners, event hosts, facilitators and contractors;
- from publicly available sources; and
- from other third parties where permitted by law.
Where reasonable and practicable, we collect personal information directly from you.
Where information is collected from another source, we will take reasonable steps to ensure that you are appropriately informed where required.
6. Information About Other People
You may provide us with personal information about another person, such as:
- another workshop participant;
- a colleague;
- an attendee registered by a school;
- a delivery recipient;
- an emergency contact; or
- an authorised representative.
Where you provide another person’s information, you must have authority to do so and must ensure that the person is aware of this Privacy Policy where reasonably practicable.
7. Why We Collect and Use Personal Information
We may collect, hold and use personal information to:
- provide and administer our products and services;
- process workshop and event registrations;
- administer attendance, certificates, materials and participant communications;
- process purchases, payments, refunds and deliveries;
- fulfil book and resource orders;
- provide coaching, consulting and professional-learning services;
- manage publishing, distribution, licensing and royalty arrangements;
- respond to enquiries and provide customer support;
- create and manage customer accounts;
- verify identity and prevent fraud or misuse;
- communicate service, order or event updates;
- manage suppliers, contractors, partners and facilitators;
- administer surveys and collect feedback;
- improve our websites, services and customer experience;
- analyse website traffic and usage;
- send marketing communications where permitted;
- maintain business, accounting and tax records;
- comply with legal, tax, regulatory and reporting obligations;
- establish, exercise or defend legal rights;
- manage recruitment and employment applications;
- protect the security and integrity of our systems; and
- carry out ordinary administrative and operational activities.
We collect only the information reasonably required for the relevant purpose and aim to process personal information lawfully, fairly, transparently and for specified purposes.
8. Lawful Bases for Processing Under the GDPR and UK GDPR
Where the GDPR or UK GDPR applies, we rely on one or more of the following lawful bases.
Contract
Processing may be necessary to:
- take steps at your request before entering into a contract;
- process your registration or order;
- deliver products or services;
- administer an event or workshop; or
- fulfil our contractual obligations.
Consent
We may rely on your consent where required, including for:
- optional marketing communications;
- non-essential cookies;
- certain photographs or recordings;
- some uses of sensitive or special-category information; and
- other activities where consent is the appropriate lawful basis.
You may withdraw consent at any time. Withdrawal does not affect processing that occurred lawfully before consent was withdrawn.
Legitimate interests
We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
These interests may include:
- operating and improving our business;
- managing customer and professional relationships;
- protecting our websites and systems;
- preventing fraud;
- understanding how our services are used;
- communicating with existing business contacts; and
- promoting relevant products and professional-learning opportunities where legally permitted.
Where legitimate interests are relied upon, we consider the necessity of the processing and its potential impact on individuals. The appropriate lawful basis must be determined and documented for each processing purpose.
Legal obligation
We may process information where necessary to comply with:
- tax and accounting laws;
- corporate-record requirements;
- consumer laws;
- regulatory obligations;
- court orders; or
- other applicable legal requirements.
Vital interests
In limited circumstances, we may process information where necessary to protect someone’s life or physical safety, such as in an emergency during an event.
We generally do not rely on public-task processing because we are private commercial organisations.
9. Sensitive Information and Special-Category Data
We may occasionally collect limited health, dietary, allergy or accessibility information to safely administer workshops or events.
We will only collect or process sensitive or special-category information where:
- you have provided explicit consent;
- it is necessary to protect vital interests;
- processing is required or authorised by law; or
- another lawful basis and special-category condition applies.
Under the GDPR and UK GDPR, processing special-category or criminal-offence information generally requires both an Article 6 lawful basis and an additional applicable condition.
10. Workshop and Event Information
When you register for an event or workshop, we may collect:
- participant names;
- contact details;
- school or organisation details;
- job titles;
- invoicing details;
- payment status;
- attendance records;
- dietary requirements;
- accessibility requirements;
- professional-learning records;
- feedback; and
- photographs or recordings where applicable.
We may share limited participant information with:
- event venues;
- caterers;
- facilitators;
- event hosts;
- ticketing providers;
- payment processors; and
- other suppliers involved in delivering the event.
We will only share information reasonably necessary for the relevant service.
11. Marketing Communications
We may send you information about:
- workshops and events;
- books and resources;
- coaching and consulting services;
- publishing news;
- professional-learning opportunities; and
- other Ingrove products or services.
We will send electronic marketing communications only where permitted by applicable law.
You can unsubscribe at any time by:
- using the unsubscribe link in the communication;
- updating your preferences where available; or
- contacting support@ingrovegroup.com.
We may still send essential non-marketing communications relating to an existing order, registration, account, contract or service.
Under the GDPR and UK GDPR, individuals have the right to object to direct marketing.
12. Cookies and Website Analytics
We may use cookies and similar technologies to:
- operate and secure our websites;
- remember user preferences;
- maintain shopping-cart and checkout functionality;
- understand website usage;
- analyse traffic and performance;
- improve website functionality;
- personalise content; and
- support advertising or marketing activities where permitted.
Where legally required, we will seek consent before placing non-essential cookies.
You may manage cookies through:
- our cookie-consent settings;
- your browser settings; or
- the opt-out tools provided by relevant third parties.
Further information is available in our separate Cookie Policy.
Disabling certain cookies may affect website functionality.
13. Disclosure of Personal Information
We may disclose personal information to:
- the other Ingrove entity;
- employees, directors and authorised representatives;
- contractors and professional facilitators;
- website-hosting and information-technology providers;
- cloud-storage and software providers;
- email, marketing and customer-relationship platforms;
- payment processors;
- ecommerce, ticketing and registration providers;
- couriers, printers, distributors and fulfilment providers;
- event venues, caterers and event partners;
- publishing, licensing and distribution partners;
- analytics and advertising providers;
- regulators, courts, government bodies or law-enforcement agencies;
- prospective purchasers or advisers in connection with a corporate transaction; and
- other recipients where you have authorised disclosure or where disclosure is required or permitted by law.
We do not sell personal information in the ordinary meaning of selling customer databases for payment.
14. International Data Transfers
Because Ingrove operates internationally, personal information may be transferred to, accessed from or stored in countries including:
- Australia;
- the Netherlands;
- other European Union or EEA countries;
- the United Kingdom;
- the United States;
- countries in which our service providers operate; and
- countries in which workshops, events, customers, suppliers or business partners are located.
Information may be shared between Ingrove Pty Ltd and Ingrove Group B.V. where necessary to:
- provide products and services;
- administer customer relationships;
- manage registrations and events;
- fulfil orders;
- operate group systems;
- manage publishing activities; and
- comply with legal obligations.
Where the GDPR or UK GDPR applies, we use appropriate safeguards for transfers outside the relevant jurisdiction where required. These may include:
- European Commission Standard Contractual Clauses;
- the UK International Data Transfer Agreement or UK Addendum;
- an applicable adequacy decision;
- contractual, technical and organisational safeguards; or
- another legally permitted transfer mechanism.
The GDPR requires organisations to inform individuals whether data will be transferred outside the EU and the safeguards relied upon.
15. Data Security
We take reasonable technical and organisational measures to protect personal information from:
- misuse;
- interference;
- loss;
- unauthorised access;
- unauthorised modification;
- disclosure;
- destruction; and
- cyber-security threats.
Measures may include:
- access controls;
- password and authentication controls;
- encryption where appropriate;
- secure cloud systems;
- system monitoring;
- backups;
- confidentiality obligations;
- staff access restrictions;
- service-provider reviews; and
- incident-response procedures.
No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we take reasonable steps proportionate to the nature of the information and relevant risks.
16. Data Retention
We retain personal information only for as long as reasonably necessary to:
- provide the relevant product or service;
- maintain customer and business records;
- comply with tax, accounting and corporate-record obligations;
- manage legal claims;
- meet regulatory requirements; and
- fulfil the purposes described in this Privacy Policy.
Retention periods vary according to the type of information and applicable law.
Certain accounting, contractual and transaction records may be retained for at least seven years or for another period required by applicable law.
When information is no longer required, we will take reasonable steps to delete, destroy or anonymise it, subject to legal and operational requirements.
17. Your Rights Under Australian Privacy Law
Subject to applicable exceptions, you may request:
- access to personal information we hold about you; and
- correction of inaccurate, incomplete or outdated personal information.
You may also make a complaint about how we have handled your personal information.
We may need to verify your identity before responding to a request.
18. Your Rights Under the GDPR and UK GDPR
Where the GDPR or UK GDPR applies, you may have the right to:
- be informed about how your personal data is used;
- access your personal data;
- correct inaccurate or incomplete data;
- request deletion of personal data;
- restrict processing;
- object to processing;
- object to direct marketing;
- receive certain information in a portable format;
- withdraw consent;
- lodge a complaint with a supervisory authority; and
- request information about safeguards used for international transfers.
You may also have rights concerning automated decision-making and profiling.
These rights are not absolute and may be subject to legal exceptions. The European Commission summarises GDPR rights as including access, rectification, erasure, restriction, portability and objection.
We do not currently make decisions that produce legal or similarly significant effects solely through automated processing.
19. Exercising Your Rights
To exercise a privacy right, contact:
Email: support@ingrovegroup.com
Please include sufficient information to identify:
- who you are;
- the entity or service involved;
- the information concerned; and
- the action you are requesting.
We may request proof of identity to protect your information from unauthorised access.
We will respond within the timeframe required by applicable law.
20. Children’s Privacy
Our products and services are primarily intended for educators, schools, organisations and adult customers.
We do not knowingly collect personal information directly from children where parental, guardian or school authorisation is legally required.
Where information about a child or student is provided by a school, parent, guardian or authorised organisation, the person providing the information must have appropriate authority.
We do not require schools or educators to provide identifiable student information unless it is genuinely necessary and specifically requested.
21. Third-Party Websites and Services
Our websites may contain links to third-party websites, social-media platforms or embedded services.
We are not responsible for the privacy, security or content practices of third parties. You should review the relevant third party’s privacy policy before providing personal information.
22. Data Breaches
Where we become aware of a data breach, we will assess and respond to it in accordance with applicable law.
Where required, we will notify:
- affected individuals;
- the Office of the Australian Information Commissioner;
- the Dutch Data Protection Authority;
- the UK Information Commissioner’s Office; or
- another relevant supervisory authority.
23. Complaints
Australian complaints
You may first submit a complaint to us using the contact information below.
We will investigate the complaint and respond within a reasonable period.
If you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner.
European complaints
Where the GDPR applies, you may lodge a complaint with the competent data-protection supervisory authority.
For matters concerning Ingrove Group B.V., this may include the Dutch Data Protection Authority, Autoriteit Persoonsgegevens.
United Kingdom complaints
Where the UK GDPR applies, you may lodge a complaint with the UK Information Commissioner’s Office.
24. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- changes to our business;
- new products or services;
- changes to our systems or service providers;
- legal or regulatory developments; or
- changes to our privacy practices.
The current version will be published on our website with its effective date or last-updated date.
Material changes may also be communicated by email or another appropriate method where required.
25. Contact Us
For questions, requests or complaints about privacy, contact:
General privacy contact
Ingrove
Email: support@ingrovegroup.com
Telephone: +61 3 8686 9077
Australia and rest of world, excluding the United Kingdom and Europe
Ingrove Pty Ltd
ABN: 26 635 070 236
Unit 1, 226 Bay Road
Sandringham VIC 3191
Australia
United Kingdom and Europe
Ingrove Group B.V.
KvK registration number: 42008846
VAT identification number: NL869264540B01
Korte Lijnbaanssteeg 1-4592
1012 SL, Amsterdam
Netherlands