Privacy Policy

Herbology Hub  |  ABN 96 881 491 418

Last updated: 19 May 2026

1. INTRODUCTION

Herbology Hub (ABN 96 881 491 418) is committed to protecting the privacy of our members, website visitors, and anyone else who interacts with us. We take our privacy obligations seriously and we handle personal information with care, honesty, and respect.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and store it, who we share it with, and what your rights are in relation to it. It applies to all personal information collected through our website at herbologyhub.au, our membership platform hosted by Magnify Hub, our email communications, and any other interaction you have with Herbology Hub.

We are bound by the Australian Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs) contained within it. This policy has been written to reflect those obligations clearly and in plain language.

If you have any questions about this policy or about how we handle your personal information, please contact us at [email protected]. We are always happy to talk through any concerns directly.

2. WHO WE ARE

Herbology Hub is an Australian online educational membership platform focused on medicinal herb cultivation. We deliver practical, experience-based learning to home growers, gardeners, and qualified herbalists through live webinars, recorded sessions, topic-based courses, and written educational materials.

Our membership platform is hosted and operated through Magnify Hub. Our website is located at herbologyhub.au.

Contact details

Herbology Hub

ABN 96 881 491 418

7 Dowell Street, Cowra NSW 2794, Australia

Email: [email protected]

Phone: 0412 016 892

3. WHAT PERSONAL INFORMATION WE COLLECT

We collect only the personal information that is reasonably necessary to provide our services, communicate with you, and meet our legal obligations. We do not collect personal information we do not need.

Information you provide directly

When you interact with us, you may provide us with personal information including:

•       Your name and email address, when you subscribe to our newsletter, create a membership account, or contact us directly.

•       Your phone number, where you choose to provide it.

•       Billing and payment information, including your name, billing address, and payment card details, when you purchase a membership or course. Note that full payment card details are processed and held by our payment provider, not by Herbology Hub directly.

•       Your account login credentials, including your username and password, when you create a membership account.

•       Any information you voluntarily share with us through Q&A sessions, platform discussions, survey responses, or direct communications, including questions about your growing conditions, location, or experience level.

•       Correspondence you send us by email or through our website contact form.

Information collected automatically

When you visit our website or use our membership platform, certain information may be collected automatically through cookies and similar technologies, including:

•       Your IP address and general geographic location.

•       The type of device, browser, and operating system you are using.

•       Pages visited on our website, time spent on those pages, and how you arrived at our site.

•       Your activity within our membership platform, including content accessed, webinars attended, and course progress.

This information is used to improve our website and platform, understand how our content is used, and ensure our services are functioning correctly. It does not, on its own, identify you as an individual.

Information we do not collect

We do not collect sensitive information as defined by the Privacy Act, such as health information, racial or ethnic origin, religious beliefs, or criminal records, unless you choose to share such information with us voluntarily in the course of a Q&A session or communication. Any such information shared voluntarily is treated with the highest level of care and discretion and is not stored or used beyond the context in which it was shared.

We do not collect personal information from children under the age of 18 without the consent of a parent or guardian. Our services are intended for adults.

4. HOW WE COLLECT PERSONAL INFORMATION

We collect personal information in the following ways:

Directly from you

•       When you subscribe to our newsletter or mailing list.

•       When you create a Herbology Hub membership account.

•       When you purchase a membership plan or course.

•       When you participate in a live webinar or Q&A session.

•       When you contact us by email, phone, or through our website.

•       When you respond to a survey or provide feedback.

•       When you contribute to discussions or post content within our membership platform.

Automatically

•       Through cookies and analytics tools when you visit our website or use our membership platform. See Section 9 of this policy for more detail on our use of cookies.

From third parties

•       From our membership platform provider, Magnify Hub, in relation to account activity and subscription status.

•       From our payment processor, in relation to the status of payment transactions. We receive confirmation of successful or failed transactions but do not receive your full payment card details.

•       From email service providers, in relation to the delivery and engagement status of our email communications.

Where we collect personal information from third parties, we take reasonable steps to ensure that the collection is lawful and consistent with this Privacy Policy.

5. WHY WE COLLECT PERSONAL INFORMATION AND HOW WE USE IT

We collect and use personal information only for the purposes for which it was provided, or for related purposes that you would reasonably expect. We do not use your personal information in ways that would surprise you.

Providing and managing our services

•       To create and manage your membership account.

•       To process your subscription payments and manage billing.

•       To provide you with access to our membership content, including webinars, courses, and recorded sessions.

•       To communicate with you about your membership, including scheduling, content updates, and account matters.

•       To respond to your questions, support requests, and complaints.

Improving our services

•       To understand how members use our platform and content, so we can improve the quality and relevance of what we offer.

•       To analyse website and platform usage patterns to improve the user experience.

•       To gather feedback and develop new content, courses, and webinar topics that meet our members' needs.

Communication and marketing

•       To send you our newsletter and educational content, where you have subscribed or consented to receive it.

•       To send you promotional information about new courses, webinars, or membership offers, where you have consented to receive such communications.

•       To send you transactional communications relating to your account, such as payment receipts, subscription renewal reminders, and service updates. These communications are not marketing and are sent regardless of your marketing preferences.

Legal and compliance

•       To meet our obligations under Australian law, including the Privacy Act 1988 (Cth), Australian Consumer Law, and the Spam Act 2003 (Cth).

•       To maintain accurate financial records as required by Australian taxation law.

•       To investigate and respond to complaints, disputes, or potential breaches of our Terms of Service.

We will not use your personal information for any purpose that is incompatible with the purposes described in this policy without first obtaining your consent, unless we are required or authorised to do so by law.

6. WHO WE SHARE YOUR PERSONAL INFORMATION WITH

We do not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. We share personal information only where it is necessary to deliver our services or meet our legal obligations, and only with trusted parties who are required to handle your information securely and appropriately.

Service providers

We share personal information with the following categories of third-party service providers who assist us in operating our business and delivering our services:

•       Magnify Hub, our membership platform provider, which hosts and manages our membership accounts, content delivery, and subscriber data.

•       Our payment processor, which handles the secure processing of membership subscription payments. Our payment processor is required to maintain Payment Card Industry Data Security Standards (PCI-DSS) compliance.

•       Our email service provider, which manages the delivery of our newsletter and membership communications.

•       Website analytics providers, which collect aggregated data about website usage to help us improve our site.

Each of these providers is engaged on the basis that they use your personal information only for the specific purpose for which it is shared, maintain appropriate security measures, and do not disclose your information to other parties without our authorisation.

Legal requirements

We may disclose your personal information to government authorities, law enforcement agencies, courts, or other regulatory bodies where we are required to do so by law, a court order, or a lawful request from a regulatory authority. We will take reasonable steps to notify you of any such disclosure where we are permitted to do so.

Business transfers

In the event that Herbology Hub is sold, merged, or restructured, your personal information may be transferred to a successor entity as part of that transaction. We will take reasonable steps to ensure that any successor entity is bound by privacy obligations consistent with this policy, and we will notify members of any material change to how their information is handled as a result of such a transfer.

With your consent

We may share your personal information with other parties in circumstances not described above where you have given us your express consent to do so.

Overseas disclosure

Some of the third-party service providers we use, including platform infrastructure and analytics providers, may store or process data outside of Australia. Where this occurs, we take reasonable steps to ensure that those providers are subject to privacy obligations that are at least comparable to the Australian Privacy Principles. By using our services, you consent to the possible transfer of your personal information to overseas recipients in accordance with this policy.

7. HOW WE STORE AND PROTECT YOUR PERSONAL INFORMATION

Storage

Your personal information is stored securely within our membership platform, hosted by Magnify Hub, and within the systems of the third-party service providers described in Section 6 of this policy. We take reasonable steps to ensure that all systems used to store your personal information are appropriately secured.

Security measures

We implement a range of technical and organisational measures to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These measures include:

•       Encrypted payment processing through our payment provider, which means your full payment card details are never transmitted to or stored by Herbology Hub directly.

•       Secure access controls on our membership platform, requiring authenticated login to access member content and account information.

•       Password protection for membership accounts, with members encouraged to use strong, unique passwords and to keep their login credentials confidential.

•       Use of reputable third-party providers with established security practices for data storage, email delivery, and payment processing.

While we take these steps seriously, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. If you have reason to believe that your account has been compromised or that your personal information has been accessed without authorisation, please contact us immediately at [email protected].

Data breach response

If we become aware of a data breach that is likely to result in serious harm to individuals whose personal information is involved, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as required under the Notifiable Data Breaches scheme established under the Privacy Act 1988 (Cth). We will take immediate steps to contain the breach, assess the risk of harm, and communicate clearly and promptly with affected individuals.

Data retention

We retain your personal information for as long as is necessary to provide our services, maintain accurate business records, and meet our legal obligations. In practical terms:

•       Membership account information is retained for the duration of your membership and for a reasonable period following cancellation, to allow for the resolution of any disputes or queries that may arise after your membership ends.

•       Financial records, including payment transactions and subscription history, are retained for a minimum of seven years to comply with Australian taxation law.

•       Email marketing records, including subscription preferences and communication history, are retained until you unsubscribe or request deletion.

•       General correspondence and support communications are retained for a reasonable period to assist with ongoing member relations and dispute resolution.

Where your personal information is no longer required for any lawful purpose, we will take reasonable steps to securely destroy or permanently de-identify it.

8. MARKETING COMMUNICATIONS AND YOUR CHOICES

Our newsletter and marketing emails

From time to time we send educational content, membership updates, and promotional information to people who have subscribed to our newsletter or consented to receive marketing communications from us. We do not send unsolicited commercial emails. All marketing communications we send comply with the Spam Act 2003 (Cth).

Our newsletter and marketing emails typically include:

•       Educational content related to medicinal herb cultivation.

•       Updates about new webinars, courses, and membership content.

•       Occasional information about special offers or membership promotions.

•       Seasonal growing insights and tips drawn from our practical experience.

Transactional communications

We also send transactional communications that are necessary to the operation of your membership. These include payment receipts, subscription renewal notifications, webinar scheduling information, and important service updates. These communications are not marketing and are sent as a necessary part of delivering the service you have purchased. They cannot be opted out of while your membership is active, though you can manage your preferences for non-essential communications at any time.

How to unsubscribe or manage your preferences

You can unsubscribe from our marketing communications at any time by:

•       Clicking the unsubscribe link included in the footer of every marketing email we send.

•       Contacting us directly at [email protected] with the subject line "Unsubscribe" and we will remove you from our marketing list promptly.

•       Updating your communication preferences within your membership account settings, where this option is available.

We will process all unsubscribe requests promptly and within five business days at the latest. Unsubscribing from marketing communications does not affect the delivery of transactional communications related to your active membership.

If you are a non-member subscriber to our newsletter who wishes to be removed from our list entirely, please email us at [email protected] and we will remove your details completely.

9. COOKIES AND WEBSITE TRACKING

What cookies are

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work properly, to remember your preferences, and to provide website owners with information about how their sites are being used.

How we use cookies

Our website and membership platform may use cookies and similar tracking technologies for the following purposes:

•       Essential cookies, which are necessary for the website and membership platform to function correctly, including maintaining your login session and remembering your account preferences. These cookies cannot be disabled without affecting the core functionality of the site.

•       Analytics cookies, which collect aggregated, anonymised information about how visitors use our website, including which pages are visited most often and how people navigate the site. This information helps us improve the structure and content of our website. We use this information in aggregate form only and it does not identify you as an individual.

•       Functionality cookies, which remember your preferences and settings to improve your experience on return visits.

Third-party cookies

Some cookies on our website may be placed by third-party services we use, including analytics providers and our membership platform provider Magnify Hub. These third parties have their own privacy policies governing their use of cookie data. We encourage you to review the privacy policies of any third-party services you interact with through our website.

Managing cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling certain cookies may affect the functionality of our website and membership platform, including your ability to log in and access member content.

Instructions for managing cookies in common browsers are available through your browser's help documentation. If you have questions about cookie management in the context of our website, please contact us at [email protected].

10. YOUR PRIVACY RIGHTS

Under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have a number of rights in relation to the personal information we hold about you. We are committed to honouring these rights promptly and in good faith.

Right of access

You have the right to request access to the personal information we hold about you. This includes knowing what information we hold, how we collected it, and how we are using it. To make an access request, please contact us at [email protected] with the subject line "Privacy Access Request". We will respond within a reasonable timeframe, and in most cases within 30 days of receiving your request.

There is no charge for making an access request. In rare circumstances where providing access would be unreasonably burdensome or where access must be refused under applicable law, we will explain the reason for any refusal in writing.

Right to correction

If you believe that personal information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, you have the right to request that we correct it. Please contact us at [email protected] with details of the correction you are seeking. We will respond within a reasonable timeframe and will update your information where your request is valid.

If we are unable to agree that the information needs to be corrected, we will explain our reasons and, if you request it, we will attach a statement of the correction you sought to the relevant record.

Right to deletion

In certain circumstances, you may request that we delete the personal information we hold about you. We will consider all such requests and will delete your information where we are not required by law to retain it and where there is no other legitimate reason to keep it. Where we are unable to delete your information in full, we will explain what we are retaining and why.

Right to complain

If you believe we have interfered with your privacy or mishandled your personal information, you have the right to make a complaint. We encourage you to contact us in the first instance at [email protected] with the subject line "Privacy Complaint" so that we can work to resolve the matter directly and promptly. We will acknowledge your complaint within five business days and aim to provide a substantive response within 30 days.

If you are not satisfied with our response, or if you prefer to escalate your complaint directly, you have the right to lodge a formal complaint with the Office of the Australian Information Commissioner (OAIC):

•       Website: www.oaic.gov.au

•       Phone: 1300 363 992

•       Post: GPO Box 5218, Sydney NSW 2001

How to exercise your rights

To exercise any of your privacy rights, please contact us at [email protected] with your full name, the email address associated with your account, and a clear description of the request you are making. We may need to verify your identity before processing your request in order to protect the security of your personal information.

11. LINKS TO THIRD-PARTY WEBSITES

Our website and membership platform may contain links to third-party websites, resources, and services that are not operated by Herbology Hub. These links are provided for your convenience and information.

We do not control third-party websites and are not responsible for their content, privacy practices, or the way they handle personal information. We encourage you to read the privacy policy of any third-party website you visit before providing your personal information. Your interaction with any third-party website is at your own risk and is governed by that website's own terms and privacy policy, not by this policy.

The inclusion of a link to a third-party website on our platform does not constitute an endorsement of that website or its content.

12. CHILDREN'S PRIVACY

Our services are intended for adults aged 18 years and over. We do not knowingly collect personal information from children under the age of 18 without the consent of a parent or legal guardian.

If you are a parent or guardian and you believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take prompt steps to identify and delete that information from our systems.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our services, changes in applicable Australian law or regulation, or improvements in the way we handle personal information. The date of the most recent update is displayed at the top of this document.

Where changes are material, meaning they significantly affect how we collect, use, or share your personal information, we will notify you by email to the address associated with your account before the changes take effect. For minor changes, we will update this policy on our website without direct notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our website or membership services following any update to this policy constitutes your acceptance of the updated terms.

If you do not agree with any changes to this policy, please contact us at [email protected] to discuss your concerns or to request that your account and personal information be deleted where this is legally permissible.

14. HOW TO CONTACT US

We genuinely welcome contact from our members and website visitors on any privacy matter. If you have a question about this policy, a concern about how we have handled your personal information, or a request to access, correct, or delete your information, please get in touch.

When you contact us about a privacy matter, you are contacting a real person who takes these responsibilities seriously. We will respond in good faith and within a reasonable timeframe.

Contact details

Herbology Hub

ABN 96 881 491 418

7 Dowell Street, Cowra NSW 2794, Australia

Email: [email protected]

Phone: 0412 016 892

For privacy-related enquiries, please use the subject lines below to help us direct your message to the right place:

•       "Privacy Access Request" - to request access to the personal information we hold about you.

•       "Privacy Correction Request" - to request a correction to your personal information.

•       "Privacy Complaint" - to raise a concern about how we have handled your personal information.

•       "Unsubscribe" - to be removed from our marketing communications.

•       "Privacy Enquiry" - for any other privacy-related question.

We aim to respond to all privacy-related emails within three business days and to resolve substantive requests within 30 days.

External regulator

If you are not satisfied with our response to any privacy concern, you have the right to contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.