Uncommon Potential Pty Ltd | Version 7 | 29 October 2026
ACN 703 476 608 | ABN 69 703 476 608 Aaron@UncommonPotential.com.au | www.uncommonpotential.com.au
This policy explains how Uncommon Potential Pty Ltd handles personal information when you enquire, visit our website or use our career guidance and development services. Contact Aaron Spiteri at Aaron@UncommonPotential.com.au with privacy questions.
1 Information we collect
We collect contact details, enquiries, authorised representative details where needed, booking and payment information, Harrison assessment results and reports, completed UP resources, correspondence, relevant coaching notes and action plans. With the relevant permission, we may also hold transcripts, checked summaries and AI-assisted working material. We do not retain full audio or video as ongoing client records.
Discussions may involve sensitive matters such as health or disability. Please share only information relevant to your service and avoid unnecessary information about other people. We seek appropriate consent where required.
2 Collection and purposes
We generally collect information directly from you through forms, email, resources and sessions. Harrison processes your questionnaire and makes results available through our coach account. We may receive information from a guardian or another person with appropriate authority.
We use information to respond, arrange appointments and payment, provide assessments and coaching, prepare agreed deliverables, support follow-up, improve services using de-identified lessons, handle concerns and meet legal or legitimate recordkeeping needs. You may make general enquiries without identifying yourself where practical; missing contact or assessment information may prevent us responding or providing the purchased service.
3 Service providers and overseas handling
We use Harrison Assessments for questionnaires and reports, Square for invoices and payments, website and email providers for communications, and an online meeting platform identified in your invitation. Optional AI or transcription providers are explained before permission is requested. We share information relevant to each provider’s function, rather than routinely giving access to your whole client file.
Providers may process information overseas. Harrison’s supplied terms identify hosting in Singapore. Square identifies overseas processing including the United States, Canada, Japan, Ireland, France, Spain and the United Kingdom. Other locations depend on the provider used; we explain relevant locations for optional AI before use. Square’s buyer privacy notice is at squareup.com/au/en/legal/general/buyer-privacy. Contact us for further provider details.
We may also disclose necessary information to authorised advisers or support providers under appropriate safeguards, or where required or otherwise lawfully justified. We do not sell client reports or contact lists. Payment by an employer, relative or other person does not automatically authorise report access.
4 AI recording and transcription
AI-assisted report review and session transcription are separate optional choices. They may assist comparison of reports and resources, recurring themes, summaries and action planning. We check outputs before relying on or sending them. Manual review and notes are available if you decline.
Before processing, we explain the selected tool, information involved, purpose, relevant overseas handling, training use, retention/deletion and any temporary recording. We obtain the relevant permissions, including from other attendees before transcription. We do not submit Harrison material to external AI without resolving the relevant permissions. Contact us to withdraw permission for future processing; we explain deletion options and any limits for information already processed.
5 Storage security and retention
Working client files are stored on the business operator’s Mac in an encrypted client container. Local backups use an external Time Machine drive. Providers also hold information in their systems. We take reasonable technical and organisational steps to protect information and restrict access to those who need it. No electronic system guarantees complete security.
We retain relevant records while reasonably needed for service delivery, continuity, justified follow-up, complaints and legal or legitimate recordkeeping requirements. We review ongoing need and delete or de-identify information when it is no longer required. Reports, plans and concise notes may remain useful longer than transcripts, drafts or unsuccessful enquiries. We do not retain every record indefinitely simply because follow-up is possible.
Legal requirements, disputes or insurance-related recordkeeping may justify longer retention. Backups and providers may retain copies for different periods, so deletion may not be immediate everywhere. Contact us to discuss your records or request deletion.
6 Access correction and complaints
Email Aaron@UncommonPotential.com.au to request access, correction or deletion, or to raise a privacy concern. We may verify your identity and will consider and respond to requests under applicable requirements. If we lawfully refuse a request, we explain why and available complaint options. Report delivery arrangements do not override statutory access rights.
If a concern remains unresolved, you may contact the Office of the Australian Information Commissioner at oaic.gov.au or, where applicable, the NSW Information and Privacy Commission at ipc.nsw.gov.au. We assess suspected information incidents and make notifications where legally required.
7 Feedback and marketing
We may use de-identified feedback and lessons to improve UP resources. Testimonials, identifiable case studies and use of coaching content for marketing require separate permission. Marketing subscriptions are separate from service acceptance, and you can unsubscribe.
8 Website information and updates
Our website and technology providers may receive technical information such as IP addresses, browser details and access logs. Cookies or similar tools may support website functions. Where optional analytics or marketing tracking is used, we explain the collection and available choices. External websites have their own privacy practices.
We update this policy when our practices change and display the current version on our website. Material changes in optional AI processing are explained and any necessary fresh permission obtained before the new use. A policy update does not itself authorise unrelated uses of information already collected.