Privacy Policy

Last updated: 14 July 2026

1. About this Privacy Policy

Ocea Marie respects your privacy and understands that the information you share with us may be personal, private and, in some circumstances, sensitive.

This Privacy Policy explains how we collect, hold, use, disclose and protect personal information when you:

visit www.oceamarie.com;
subscribe to our emails or request a complimentary resource;
read or subscribe to an Ocea Marie publication on Substack;
contact us or submit an enquiry;
purchase a journal, workbook, audio recording or other digital resource;
enrol in or access an online program;
create an account;
participate in a workshop, group program or online community;
book or receive private counselling or advisory services;
attend a Zoom meeting, workshop or webinar;
respond to a survey;
provide feedback, an image or a testimonial; or
otherwise interact with Ocea Marie.

It also explains the choices and privacy rights that may be available to you.

This Policy should be read with our Terms of Use and Sale, Cookie Notice and, where applicable, any counselling agreement, program conditions, booking conditions, checkout notice, consent form or other collection notice provided to you.

2. Who We Are

The Website and services are operated by:

Ocea Marie
Ocea Ebel trading as Ocea Marie
ABN 14 152 307 660
PO Box 344
Stepney SA 5069
Australia

Email: [email protected]
Website: www.oceamarie.com

For the purposes of applicable privacy and data-protection laws, Ocea Marie is generally responsible for deciding why and how personal information is handled. Under European and United Kingdom data-protection terminology, this ordinarily means that Ocea Marie acts as the data controller.

Some third-party providers, particularly payment and platform providers, may also act as independent controllers for information they collect or use for their own purposes. Their privacy policies apply to that independent processing.

Privacy questions, requests and complaints should be directed to [email protected].

3. Privacy Framework and International Application

Ocea Marie is based in South Australia. We handle personal information in accordance with the Australian Privacy Act 1988, the Australian Privacy Principles and other Australian laws that apply to our activities, including laws governing electronic marketing and data-breach notification.

Because we provide counselling and wellbeing services and may hold health information, Australian privacy obligations may apply to us regardless of annual turnover.

Depending on your location and the nature of our interaction, additional privacy or data-protection laws may apply. These may include the European Union General Data Protection Regulation, the United Kingdom General Data Protection Regulation and Data Protection Act 2018, New Zealand and Canadian privacy laws, the Brazilian General Data Protection Law, applicable United States state privacy laws and other mandatory laws.

Where a mandatory local law gives you additional rights or imposes additional obligations on us, that law will apply to the extent required. Nothing in this Policy is intended to exclude, restrict or modify a privacy right that cannot lawfully be excluded, restricted or modified.

4. Meaning of Personal and Sensitive Information

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. Depending on the applicable law, similar concepts may be described as personal data or personally identifiable information.

Sensitive information receives greater protection. It may include information about:

physical or psychological health;
emotional wellbeing and counselling history;
disability, medications or treatment;
racial or ethnic origin;
religious or philosophical beliefs;
sexual orientation or sexual life;
political opinions;
professional or trade-union membership;
genetic or biometric information; and
other information classified as sensitive, health-related or special-category data under applicable law.

In this Policy, “processing” includes collecting, recording, organising, storing, accessing, using, sharing, transferring, correcting, restricting, deleting and otherwise handling personal information.

5. Information We May Collect

The information we collect depends on how you interact with us and which products or services you use.

Identity, eligibility and contact information

your name;
email address;
telephone number;
postal or billing address;
country, state, province, region and time zone;
your physical location when an online counselling session occurs;
confirmation that you are at least 18 years old;
preferred method of communication; and
account username, profile details or display name.

Purchase and transaction information

the products or services you purchase;
order and invoice details;
transaction date, currency and payment status;
billing details;
refunds, disputes and chargebacks;
promotional codes;
transaction identifiers and limited payment information supplied by a payment provider; and
fraud, risk or verification information where relevant.

We generally do not receive or store your complete payment-card number. Stripe, PayPal, Afterpay and other payment providers collect and process payment information under their own terms and privacy policies.

Account, program and community information

account registration and authentication information;
program enrolments, progress and access activity;
downloads and content viewed;
responses or exercises submitted through an online platform;
comments, questions, discussion posts and community participation;
attendance at live sessions; and
technical or customer-support requests.

Communication and marketing information

emails, contact-form submissions and correspondence;
appointment requests and support communications;
newsletter and Substack subscription information;
marketing preferences, consent records and unsubscribe requests;
email delivery, opening and link-engagement information where available;
survey responses and feedback; and
information you choose to provide during a telephone, video or written conversation.

Website, cookie and technical information

internet protocol address;
browser type and version;
device type and operating system;
approximate location derived from an IP address;
referring website or campaign source;
pages viewed, links selected and dates and times of access;
session and account-authentication activity;
cookie, consent and device identifiers; and
information used to detect fraud, misuse, faults or security threats.

Counselling and health information

Where you enquire about or receive private counselling, advisory or related services, we may collect information concerning:

your physical and psychological health;
emotional wellbeing and health history;
current symptoms, concerns, medications and treatment;
lifestyle, nutrition, sleep and activity;
personal, family and relationship circumstances;
employment, financial or other life stressors;
values, priorities, goals and significant life experiences;
behavioural patterns, emotional triggers and risk or safety concerns;
health practitioners, referral providers and support services;
your nominated emergency contact and local emergency arrangements;
intake, consent and suitability information;
appointment history, session notes, assessments and correspondence; and
other information reasonably relevant to providing the service.

Please provide only information that is relevant to your enquiry or service. Do not post confidential health or counselling information in public comments, Substack discussions or online community spaces.

Testimonials, images and recordings

testimonials and feedback;
photographs;
audio or video recordings;
case-study information; and
records of the permissions you have given.

We will not publish identifiable counselling information, your image, a testimonial or your personal story for marketing purposes without your express permission.

Private counselling sessions will not be recorded, transcribed or summarised using Zoom recording or AI features without prior notice and your express consent.

6. How We Collect Information and the Platforms We Use

We generally collect personal information directly from you when you complete a form, subscribe, create an account, make a purchase, book an appointment, complete an intake or consent process, attend a session, participate in a program or community, contact us, respond to a survey or provide feedback.

We may also collect information automatically through the Website, cookies, server logs and similar technologies, and through the following providers.

Kajabi

We use Kajabi for functions that may include Website hosting, landing pages, forms, customer accounts, online-program delivery, digital downloads, online communities, email communication, checkout administration and Website or email analytics. Depending on how you interact with us, Kajabi may process identity, contact, account, purchase, program, communication, device and Website-activity information.

Substack

We use Substack for newsletter publishing, subscriptions and related reader interaction. Substack may provide us with subscriber details, subscription status, engagement information, comments, replies and other information you choose to provide. Substack may independently process information for its own account, platform operation, recommendations, discovery, security, analytics, legal compliance and other purposes described in its privacy policy.

Zoom

We use Zoom for counselling and advisory appointments, consultations, meetings, workshops and webinars. Zoom may process your display name, email address, IP address, device information, meeting metadata, attendance information and content you choose to communicate during a session.

We do not record confidential sessions or enable AI transcription, meeting summaries or similar features for confidential counselling unless we have explained the purpose, storage, access and retention arrangements and obtained your express consent.

CookieScript

We use CookieScript as our consent-management platform. CookieScript may scan the Website for cookies and similar technologies, display our cookie banner, record consent choices, manage cookie categories, support script blocking and maintain consent or preference records. It may process consent identifiers, timestamps, browser or device information, IP-derived information and cookie-preference data as necessary to provide those functions.

Stripe

We may use Stripe to process payments, support checkout, prevent fraud, administer refunds and manage transaction disputes. Stripe may collect payment, identity, billing, device, transaction and fraud-prevention information directly from you. Stripe may act as our service provider for some processing and as an independent controller for other processing described in its privacy policy.

PayPal

We may offer PayPal and PayPal Pay Later products as payment options. PayPal may independently collect and process identity, payment, account, transaction, device, fraud-prevention, dispute and regulatory information. Where a Pay Later product is selected, PayPal may also conduct eligibility, identity, affordability or credit-related checks.

Afterpay

We may offer Afterpay as an instalment-payment option. Afterpay independently determines eligibility and may collect and process identity, contact, payment, transaction, device, fraud-prevention, repayment, affordability and credit-related information under its own terms and privacy policy.

Other sources

We may also collect information:

through booking, accounting, storage, form, survey or communication providers;
from a health practitioner, referrer, emergency contact or support person where you have consented or collection is otherwise permitted by law;
from someone acting with your authority;
from publicly available sources where appropriate and lawful; or
where collection is required or authorised by law.

We generally collect health and other sensitive information directly from you and with the consent or other lawful authority required in the circumstances.

Provider privacy information is available at:

7. Remaining Anonymous and Consequences of Not Providing Information

You may browse general Website content without identifying yourself, although strictly necessary technical information may still be processed through server logs, security tools and cookies.

You may also make a general enquiry without providing more information than is reasonably necessary. It will not usually be practical to remain anonymous when you:

make a purchase;
create an account;
enrol in a program;
subscribe through Substack;
book or receive counselling;
request access to or correction of personal information;
make a privacy complaint; or
ask us to enter into or perform a contract.

If you do not provide information that is reasonably necessary, we may be unable to respond, process a transaction, assess suitability, provide a service, maintain safety arrangements or comply with legal and professional obligations.

8. Why We Use Personal Information

We may use personal information to:

operate, maintain and secure the Website;
respond to enquiries and provide information you request;
supply complimentary resources;
create and administer accounts and subscriptions;
process purchases, payments, refunds and disputes;
deliver digital products and online programs;
provide counselling, advisory and related services;
assess suitability and manage client safety;
conduct appointments and manage bookings, cancellations and attendance;
communicate about a purchase, subscription, account, appointment or service;
provide technical and customer support;
manage programs, communities, workshops and webinars;
maintain appropriate client, consent, transaction and business records;
personalise the reasonable operation of our services;
improve our content, products, systems and services;
conduct surveys, evaluation and research using aggregated or de-identified information where appropriate;
send marketing communications where permitted;
manage consent, cookie and communication preferences;
prevent fraud, misuse, security incidents and unlawful activity;
comply with legal, taxation, accounting, insurance, ethical and professional obligations;
establish, exercise or defend legal claims;
protect the life, health, safety, rights and interests of individuals;
manage complaints and enforce agreements; and
operate, restructure, sell or transfer the business.

We will not use counselling notes or identifiable health information for unrelated advertising, behavioural profiling or marketing without separate, express consent and a lawful basis.

9. Legal Bases for EEA, UK and Swiss Information

Where European, United Kingdom or equivalent Swiss data-protection law applies, we rely on one or more lawful bases for each processing activity.

Contract and steps requested before a contract

Processing may be necessary to respond to an enquiry, process a purchase, create an account, deliver a digital product or program, administer a booking or provide an agreed service.

Consent

We may rely on consent for optional marketing, non-essential cookies, particular sensitive-information activities, publication of testimonials or images, session recording or another optional purpose explained to you. You may withdraw consent at any time. Withdrawal does not make earlier lawful processing unlawful and may affect our ability to provide a service.

Legal obligation

We may process information to comply with taxation, financial-record, consumer-protection, privacy, data-breach, court, tribunal, professional and other legal obligations.

Legitimate interests

We may process information where reasonably necessary for legitimate interests that are not overridden by your rights, including operating and improving the Website, securing systems, preventing fraud, responding to enquiries, maintaining business records, managing relationships with existing customers and establishing or defending legal claims.

Vital interests

In exceptional circumstances, we may process information where necessary to protect your life, health or safety, or that of another person.

Sensitive and special-category information

Where information is classified as sensitive or special-category data, we also rely on a condition permitted by applicable law. Depending on the circumstances, this may include:

your explicit consent;
the provision of health or wellbeing services subject to appropriate confidentiality obligations, where that condition is legally available;
protection of vital interests where consent cannot be obtained;
the establishment, exercise or defence of legal claims;
a substantial public-interest condition permitted by law; or
another condition authorised by applicable law.

10. Counselling Confidentiality, Safety and Professional Supervision

Information disclosed during private counselling is treated as confidential and handled with particular care. Confidentiality is not absolute.

Information may be used or disclosed where:

you consent;
use or disclosure is reasonably necessary to provide the service you requested;
use or disclosure is required or authorised by law;
a valid court, tribunal or regulatory requirement applies;
there is a serious threat to your life, health or safety or that of another person;
confidential professional supervision or consultation is reasonably necessary;
information is necessary to manage a complaint, insurance matter or legal claim; or
another recognised legal, ethical or professional exception applies.

Where professional supervision is used, information will be de-identified where reasonably practicable. Identifiable information will only be disclosed where reasonably necessary and permitted by law, professional obligations or your consent.

For cross-border online counselling, we may collect your physical location and local emergency-contact details so that appropriate action can be considered if a serious safety concern arises. Ocea Marie is not an emergency or crisis service.

Further information about confidentiality, records, emergency arrangements and their limitations is included in the counselling client agreement.

11. Children and Young People

The Website, products, programs and services are designed for adults aged 18 years and over. They are not directed to children.

A person under 18 must not:

create an account;
subscribe to a resource requiring personal information;
make a purchase;
enrol in a program;
book a counselling or advisory service;
participate in an online community; or
submit health or other sensitive information.

We do not knowingly collect personal information from anyone under 18.

If we learn that a person under 18 has provided personal information, we may suspend or close the account, cancel the registration or transaction, discontinue communication and delete or de-identify the information. We may retain limited information where required for legal, safety, refund, fraud-prevention or record-keeping purposes.

A parent or legal guardian who believes that a person under 18 has provided information to us should contact [email protected].

We do not currently provide services to people under 18, including with parental consent, unless a particular service expressly states otherwise and is supported by separate written consent, privacy, professional and safeguarding arrangements.

12. Cookies, CookieScript and Similar Technologies

The Website uses cookies, pixels, tags, scripts, web beacons, local storage and similar technologies. We use CookieScript to scan for these technologies, display our consent banner, record privacy choices and manage the activation of optional categories.

Strictly necessary technologies

Strictly necessary technologies support Website operation, security, network management, account access, authentication, customer sessions, shopping carts, checkout, payment processing, fraud prevention and the recording of privacy preferences. The Website or a requested service may not function correctly without them.

Functional technologies

Functional technologies may remember choices and support enhanced Website features. Where applicable law requires consent, optional functional technologies remain inactive until you enable them.

Analytics technologies

Analytics technologies may help us understand how visitors arrive at and use the Website, which pages are viewed, whether features operate correctly, general engagement and how our content or services may be improved. Where consent is required, analytics technologies remain inactive until you enable them.

Advertising and marketing technologies

Where used, advertising and marketing technologies may help measure campaigns, understand whether advertising led to a visit or purchase, limit repeated advertising and provide or measure relevant advertising. Where consent is required, these technologies remain inactive until you enable them.

We do not intentionally provide counselling notes, intake responses or identifiable health information to advertising platforms.

Provider technologies

Kajabi, Substack, Zoom, Stripe, PayPal, Afterpay and embedded or linked services may use cookies or similar technologies when their features are displayed or used. The provider’s own privacy and cookie information applies to processing it conducts independently.

Your choices

Where consent is required, CookieScript allows you to accept optional cookies, reject non-essential cookies or manage categories. Optional categories are intended to remain disabled until you make the relevant choice.

You can change or withdraw your choices through the Cookie Settings link on the Website. You may also manage cookies through your browser, although blocking strictly necessary technologies may prevent account, program, checkout or payment functions from working correctly.

Where a browser-based privacy signal such as Global Privacy Control is legally recognised and supported by our CookieScript configuration, we will respond to it as required by applicable law.

Our separate Cookie Notice and CookieScript preference centre provide the current operational details of cookies and similar technologies detected on the Website, including their category, provider, purpose and duration.

13. Email, Substack and Direct Marketing

We may send marketing communications where you have subscribed or consented, where applicable law otherwise permits us to do so, or where the communication concerns similar services and you have a clear opportunity to opt out and that approach is lawful.

Marketing consent is not a condition of purchasing a product or receiving counselling unless the communication is necessary to provide the requested product or service.

You may unsubscribe using the link in a marketing email, through Substack’s subscription controls or by contacting [email protected]. We may retain limited information on a suppression list so that we can honour your request.

Unsubscribing from marketing does not stop necessary communications concerning a purchase, account, subscription, program, appointment, payment, security issue, privacy request or other active transaction or service.

Substack may send platform, account, recommendation or service communications independently from Ocea Marie. Those communications are governed by Substack’s own settings and privacy practices.

We will not use counselling notes or identifiable health information to target marketing communications without separate, express consent and a lawful basis.

14. When We Disclose Personal Information

We do not sell counselling records or identifiable health information. We do not sell personal information for money.

We may disclose or make personal information available where reasonably necessary and lawful to the following recipients.

Website, publication and technology providers

Kajabi, Substack, CookieScript and other technology providers may process information to support Website hosting, forms, accounts, email communication, newsletter publishing, subscriptions, programs, digital products, communities, analytics, consent management, security and technical support.

Video and service-delivery providers

Zoom and other approved communication or scheduling providers may process information to provide appointments, meetings, workshops, webinars, booking functions, security and technical support.

Payment and financial providers

Stripe, PayPal, Afterpay, banks, payment networks and fraud-prevention providers may process identity, billing, transaction, device, eligibility, repayment, credit-related and risk information to process payments, provide instalment services, prevent fraud, administer refunds or disputes and comply with legal obligations.

Payment providers may act independently when determining eligibility, conducting credit or regulatory checks, managing an account or using information for their own legally permitted purposes.

Professional and operational providers

We may disclose information to confidential professional supervisors, legal advisers, accountants, bookkeepers, insurers, information-technology and cybersecurity providers, cloud-storage or record-management providers, administrative contractors and other advisers or suppliers subject to appropriate legal, contractual or professional obligations.

Health, emergency and support services

With your consent, or where otherwise permitted or required by law, information may be disclosed to a health practitioner, referral provider, emergency contact, emergency service, crisis service or another appropriate support service.

Government, regulatory and legal recipients

Information may be disclosed where required or authorised by law, in response to a valid court or tribunal process, to a regulator, to investigate suspected fraud or unlawful conduct, to protect a person’s life, health, safety or rights, or to establish, exercise or defend a legal claim.

Business transactions

If Ocea Marie is restructured, sold, merged or transferred, relevant personal information may form part of the transaction. We will take reasonable steps to protect information and require it to be handled consistently with applicable law and the purposes for which it was collected.

15. International Processing and Transfers

Ocea Marie operates from Australia and may serve customers and clients located in other countries. Our providers may store, access or process personal information outside your country of residence.

Likely processing locations include Australia, the United States, the United Kingdom, countries within the European Economic Area and other countries in which Kajabi, Zoom, Substack, CookieScript, Stripe, PayPal, Afterpay or their approved subprocessors operate. Provider locations and subprocessors may change over time.

Privacy laws in another country may differ from the laws in your country.

Before disclosing personal information to an overseas recipient, we take reasonable steps appropriate to the circumstances. These steps may include:

assessing the provider’s privacy and security information;
reviewing or relying on available data-processing agreements and provider terms;
limiting disclosure to information reasonably necessary for the service;
using access controls, encryption and secure transmission where available;
requiring confidentiality and appropriate security measures;
maintaining records of material providers and processing activities; and
limiting or discontinuing a provider where adequate protection cannot reasonably be established.

Where European or United Kingdom international-transfer requirements apply, an appropriate safeguard may include an adequacy decision, the European Commission’s Standard Contractual Clauses, a United Kingdom International Data Transfer Agreement or approved addendum, an applicable Data Privacy Framework certification, explicit consent where legally appropriate or another lawful transfer mechanism.

You may contact [email protected] for further information about material providers, likely processing locations and safeguards relevant to your information.

16. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to satisfy legal, professional, insurance, taxation, accounting, security and dispute-resolution requirements.

Retention periods depend on the nature and sensitivity of the information, the service provided, legal and professional requirements, limitation periods, safety considerations, the possibility of a complaint or dispute and whether deletion has been requested.

Generally:

enquiry information is retained for as long as reasonably needed to respond and manage related records;
account, subscription and program information is retained while access remains active and for a reasonable period afterwards;
transaction and financial records are retained for applicable taxation, accounting and legal periods;
marketing information is retained until you unsubscribe or we no longer require it, with limited suppression information retained to honour your request;
adult counselling records are generally retained for at least seven years after the last service, or longer where required by law, professional standards, insurance or a complaint or legal matter;
consent, cookie and preference records are retained for as long as reasonably necessary to demonstrate and manage the relevant choice;
security logs are retained for a period appropriate to security, fraud prevention and incident investigation; and
information relevant to a dispute, complaint or legal claim may be retained until the matter and relevant limitation periods have ended.

Information held in secure backups may remain until the relevant backup is overwritten or securely retired. When information is no longer required, we take reasonable steps to delete it, destroy it or permanently de-identify it.

17. Security

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, unauthorised access, unauthorised disclosure, alteration and destruction.

Depending on the information and system, safeguards may include:

strong passwords and multi-factor authentication;
access restrictions and least-privilege controls;
secure cloud and payment providers;
encryption in transit and at rest where available;
software and device updates;
data minimisation;
confidentiality obligations;
backups, monitoring and incident-response procedures;
secure deletion or destruction; and
additional restrictions for counselling and sensitive information.

Access to counselling and sensitive information is limited to people who reasonably need it and are subject to appropriate confidentiality obligations.

No internet transmission or storage system is completely secure. You should use a strong, unique password, protect your devices, use a private location for confidential Zoom sessions and avoid sending highly sensitive information through unsecured channels.

Please contact us promptly if you believe your information or account has been compromised.

18. Data Breaches

A data breach may occur when personal information is lost, accessed without authorisation or disclosed without authorisation.

If a suspected breach occurs, we will take reasonable steps to:

contain and investigate the incident;
assess the information and individuals affected;
reduce the risk of harm;
restore or improve relevant safeguards;
document the response; and
notify affected individuals and regulators where required by applicable law.

This may include notification to the Office of the Australian Information Commissioner and, where applicable, overseas privacy or data-protection authorities.

19. Your Privacy Rights

Depending on your location and the law that applies, you may have the right to:

know whether we hold personal information about you;
access your personal information;
receive a copy of certain information;
correct inaccurate or incomplete information;
request deletion or de-identification;
request restriction of processing;
object to particular processing;
withdraw consent;
opt out of direct marketing;
request portability of information;
opt out of sale, sharing or targeted advertising where applicable;
limit certain uses of sensitive information;
object to certain automated decisions or profiling;
use an authorised representative where permitted;
complain to us;
complain to a privacy or data-protection regulator; and
receive equal service without unlawful discrimination for exercising a privacy right.

These rights are not absolute. A request may be limited or refused where permitted or required by law, including where information must be retained for legal compliance, professional record keeping, safety, confidentiality, fraud prevention, security, the rights of another person or legal claims.

20. Making a Privacy Request

To make a privacy request, email [email protected] and clearly describe:

the right you wish to exercise;
the information concerned; and
any details that may help us locate it.

We may request reasonable information to verify your identity before acting. We will not request more information than is reasonably necessary for verification.

An authorised representative may make a request where permitted by law. We may require evidence of the representative’s authority and verification of identity.

We will respond within the timeframe required by applicable law. We ordinarily do not charge a fee, although a reasonable fee may apply where expressly permitted for an excessive, repetitive or manifestly unfounded request or for providing access in a particular form.

Where a request is refused or limited, we will explain the reason where required and identify any available complaint or review options.

21. Additional Rights for EEA, UK and Swiss Individuals

Where the GDPR, UK GDPR or equivalent Swiss law applies, you may have rights to access, rectification, erasure, restriction, objection, portability, withdrawal of consent, information about transfer safeguards and complaint to the authority in the country where you live or work or where you believe an infringement occurred.

You have an absolute right to object to direct marketing. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation, subject to lawful exceptions.

We do not currently use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.

Ocea Marie is established in Australia and is the primary contact for privacy matters. Where applicable law requires us to appoint a representative in the European Economic Area or United Kingdom, we will appoint that representative and publish their contact details in this Policy and relevant collection notices.

22. Additional Rights for United States Residents

Some United States state privacy laws apply only to businesses that meet specified thresholds. Where an applicable law covers our activities, residents may have rights to confirm processing, access, correction, deletion, portability, opt out of sale or sharing, opt out of targeted advertising or certain profiling, limit particular uses of sensitive information, use an authorised agent, appeal a refusal and receive service without unlawful discrimination.

We do not sell personal information for money. We do not knowingly sell or share the personal information of anyone under 18. We do not use identifiable counselling or health information for targeted advertising.

Some optional advertising or analytics disclosures may be treated as “sale”, “sharing” or “targeted advertising” under particular state laws even where no money is exchanged. Where an applicable law requires an opt-out, you may use the CookieScript preference centre, an applicable browser-based privacy signal or contact [email protected].

23. Rights in Other Countries

Privacy laws in Canada, New Zealand, Brazil and other countries may provide rights that are similar to, or additional to, the rights described above. Where such a law applies to Ocea Marie and to the relevant processing, we will respond in accordance with its mandatory requirements.

You may contact us to ask which rights apply to your circumstances or to request contact details for the relevant privacy authority.

24. Artificial Intelligence and Automated Tools

We may use software containing artificial-intelligence-assisted features for limited administrative, technical, security, analytical or content-support purposes.

We do not intend to:

enter identifiable counselling notes or sensitive client information into publicly available generative-AI systems;
permit a public AI provider to train its general model using identifiable counselling information;
record, transcribe or generate AI summaries of confidential Zoom counselling sessions without prior notice and express consent;
use solely automated processing to make significant decisions about whether you may receive counselling; or
replace professional judgement with an automated system.

Where an AI-assisted system would materially affect how personal or sensitive information is handled, we will assess the privacy, confidentiality, security and professional implications and provide any additional notice or obtain any consent required by law.

25. De-identified and Aggregated Information

We may create aggregated or de-identified information that does not reasonably identify an individual. This information may be used to understand general trends, evaluate programs, improve services, plan content, conduct internal research or produce general business statistics.

We will not attempt to re-identify information that has been properly de-identified unless permitted by law for security, testing, data-integrity or another legitimate purpose.

26. Third-Party Websites and Platforms

The Website, emails, Substack publication or program content may link to third-party websites, social media platforms, applications or services.

Third parties control their own information-handling practices. This Policy does not govern information collected directly by a third party for its own purposes. You should review the relevant privacy policy and cookie information before providing personal information or changing settings on an external service.

27. Privacy Complaints

Please contact us if you believe we have mishandled your personal information.

Email: [email protected]

Please include:

your name and contact details;
a description of the concern;
relevant dates or communications; and
the outcome you are seeking.

We will consider the complaint in good faith, investigate where appropriate and respond within a reasonable period and any timeframe required by law.

If you are not satisfied, you may be entitled to complain to the Office of the Australian Information Commissioner, the supervisory authority in your EEA country, the United Kingdom Information Commissioner’s Office, the Office of the Privacy Commissioner of Canada, the New Zealand Privacy Commissioner, an applicable United States state regulator, the Brazilian data-protection authority or another authority with jurisdiction.

Contacting us does not remove any right you have to approach a regulator directly.

28. Changes to This Policy

We may update this Policy to reflect changes to our services, technology, providers, information-handling practices or applicable laws.

The current version and last-updated date will be published on the Website. Where a change materially affects how we use information already collected, we will provide additional notice or obtain consent where required.

29. Contact Us

Privacy questions, requests and complaints may be directed to: