Privacy Policy — Aspect Music Academy

How Aspect Music Academy handles your information.

This policy explains what personal information I collect through portal.aspectmusicacademy.com, why I collect it, how it’s stored, and the choices you have. It’s written to comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Last updated: 16 May 2026


Who this policy applies to

Aspect Music Academy is operated by Matt Tinkler, a sole trader based in Australia, trading as Aspect Music Academy (“Aspect”, “we”, “us”, “I”, “me”, “my”). If you visit portal.aspectmusicacademy.com, create an account, book a session, purchase a membership, or subscribe to our emails, this policy applies to you.


What information I collect

Information you give me directly

When you sign up, book a session, purchase a membership, or contact me, I may collect:

  • Your name
  • Your email address
  • Your country
  • Your account login details (username and a hashed password)
  • Your community profile (display name, profile photo/avatar, and any optional bio or profile fields you choose to fill in)
  • User-generated content you post inside the community — including posts, comments, replies, reactions, and direct messages to other members or to me
  • Billing information required to process payments (handled by Stripe or PayPal — see below)
  • Any other information you choose to include in a message, form, or profile field

Information collected automatically

When you visit the site, my analytics tools automatically collect standard technical information:

  • Your IP address (typically truncated/anonymised by Google Analytics)
  • Browser type and version, device type, and operating system
  • Pages visited, time on page, referring website, and approximate location (city/country)
  • Search queries that led you to the site (via Google Search Console)
  • Course progress and engagement data (e.g. which lessons you’ve viewed) for logged-in members
  • Community activity data (e.g. which spaces you’ve joined, what you’ve reacted to or commented on) for logged-in members

This information is collected via cookies and similar technologies. See the Cookies section below.


Why I collect it

I only collect personal information for purposes that are reasonably necessary to run the Academy, including to:

  • Create and manage your account and membership
  • Deliver the courses, downloads, masterclasses, and community access you’ve signed up for
  • Process payments and manage subscriptions
  • Schedule and run 1:1 sessions you’ve booked
  • Send transactional emails (e.g. receipts, booking confirmations, password resets)
  • Send marketing emails you’ve opted in to receive
  • Respond to support enquiries
  • Understand how members use the site so I can improve it
  • Comply with my legal, tax, and accounting obligations

I will not use your personal information for any purpose that isn’t reasonably related to what you originally provided it for, unless you’ve consented or the law requires it.


The tools I use

FluentCRM (self-hosted on this site)

Member records and the email list are managed using FluentCRM, a self-hosted WordPress plugin. Your name, email address, country, and engagement data (e.g. which emails you’ve opened, which courses you’ve progressed through) are stored on the same server as this website. They are not sent to a third-party email platform like Mailchimp or ConvertKit.

FluentCommunity (self-hosted on this site)

The Academy’s community spaces, courses, lesson progress, member profiles, and direct messages between members run on FluentCommunity, a self-hosted WordPress plugin. All of this data — including your profile, posts, comments, reactions, course progress, and DMs — is stored on the same Australian server as the rest of the site. It is not sent to a third-party community platform like Circle, Discord, or Skool.

A few things worth being clear about:

  • Member visibility: your display name, profile photo, and anything you post inside a community space is visible to other logged-in members of that space. Don’t share anything in the community that you wouldn’t want other members to see.
  • Direct messages (DMs): messages between members are private to the participants, but as the site administrator I have technical access to all data on the platform, including DMs. I will only access DMs where it’s necessary for safety, moderation, or to resolve a support issue — never for marketing or any other purpose.
  • Moderation: I may remove posts, comments, or accounts that breach the community guidelines. Removed content may be retained for a reasonable period for moderation records.
  • What happens if you leave: when you cancel your membership, your profile and access to community spaces are removed. Posts, comments, and reactions you’ve made may remain visible to other members in their original context, but will be reattributed to a generic “former member” label rather than your name. If you want your community content fully deleted, email me and I’ll do my best to honour the request (some content may need to be retained where it forms part of a conversation thread).

FluentBooking + Google Calendar

Bookings for 1:1 sessions are managed using FluentBooking, another self-hosted WordPress plugin. When you book a session, the booking details are added to my Google Calendar so I can prepare for and attend the session. Google’s handling of calendar data is governed by their own privacy policy.

Stripe and PayPal (payment processing)

Payments for memberships and 1:1 sessions are processed by Stripe or PayPal, depending on which option you choose at checkout. I do not see or store your full card or bank details — those are handled directly by Stripe or PayPal under their own privacy policies:

I only receive limited information from these processors (e.g. confirmation that a payment succeeded, the amount, and the email/name associated with the transaction) for accounting and customer support purposes.

Google Site Kit (Google Analytics 4 & Google Search Console)

I use Google Site Kit to access Google Analytics 4 and Google Search Console. These services help me understand how visitors find and use the site. They collect the automatic technical information described above and may transfer that data to Google servers outside Australia (including the United States). Google’s handling of this data is governed by their privacy policy: policies.google.com/privacy.


Where your information is stored

portal.aspectmusicacademy.com is hosted on SiteGround servers located in Australia. Your account record, FluentCRM data, FluentCommunity data (profile, posts, DMs, course progress), and FluentBooking data all sit on those Australian servers.

Some third-party services I rely on (Google, Stripe, PayPal) may store or process data overseas. By using this site or its forms, you consent to your information being handled by those providers under their own terms.

How I keep it secure

I take reasonable steps to protect your personal information, including:

  • Serving the site over HTTPS/TLS encryption
  • Using a reputable Australian host (SiteGround) with managed security
  • Storing passwords using one-way cryptographic hashing (never in plain text)
  • Keeping WordPress core, themes, and plugins up to date
  • Using strong, unique passwords and two-factor authentication on admin accounts
  • Limiting access to the minimum number of people necessary (in practice, just me)

No system can be guaranteed 100% secure, but if a data breach occurs that is likely to result in serious harm to you, I will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.


Cookies

Cookies are small text files saved by your browser. This site uses cookies for:

  • Essential functionality — to keep you logged in, remember your cart/checkout state, and process secure payments
  • Analytics — set by Google Analytics 4 (via Site Kit) to measure traffic and member engagement
  • Preferences — to remember settings you’ve chosen on the site

You can disable or delete cookies in your browser settings at any time. Disabling essential cookies will prevent the site from working properly — for example, you won’t be able to stay logged in or complete a purchase.


Sharing your information

I do not sell, rent, or trade your personal information. I only share it where necessary to operate the Academy — for example, with Google (analytics + calendar), SiteGround (hosting), and Stripe or PayPal (payment processing). I may also disclose information if required by Australian law (e.g. in response to a court order or lawful request from a government agency).

Refunds, cancellations & membership data

If you cancel your membership, your account will be deactivated and your access to paid content will end at the conclusion of your current billing period. I’ll keep a record of your account and transaction history for as long as is necessary to meet my legal and tax obligations (generally a minimum of 5 years under Australian record-keeping law), after which it will be deleted or anonymised.

Email marketing & unsubscribing

If you’ve subscribed to marketing emails, you can unsubscribe at any time using the link at the bottom of every email. Unsubscribing removes you from future marketing emails but I’ll still send essential transactional emails related to your account (e.g. receipts, booking confirmations, password resets) for as long as you remain a member.


Your rights

Under the Australian Privacy Principles, you have the right to:

  • Access the personal information I hold about you
  • Correct any information that’s inaccurate or out of date
  • Request deletion of your personal information (subject to any legal obligations I have to retain it)
  • Withdraw consent for marketing emails at any time
  • Make a complaint about how I’ve handled your information

To exercise any of these rights, email me at support@aspectmusicacademy.com. I’ll respond within a reasonable timeframe — usually within 30 days.

Children

Aspect Music Academy is not directed at children under 16. I don’t knowingly collect personal information from children. If you believe a child has provided information through this site, please contact me and I’ll delete it.

Changes to this policy

I may update this policy from time to time — for example, if I add a new tool or change how I handle information. The “Last updated” date at the top of this page will always reflect the latest version. Material changes will be communicated to members via email where appropriate.


Complaints

If you’re not satisfied with how I’ve handled your personal information, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Contact

Privacy & support enquiries

Matt Tinkler — support@aspectmusicacademy.com

I’ll respond to all genuine privacy enquiries personally and as quickly as I can.