Privacy Policy

Riley Coleman trading as AI Flywheel
ABN : 41959059098:
Last updated: 6 February 2026

1. Introduction

Riley Coleman trading as AI Flywheel ("AI Flywheel", "we", "us", "our") respects your privacy and is committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy describes the types of personal information we collect, how we collect, use, store, and disclose that information, how you can access and correct your information, and how you can make a complaint.

This Policy applies to personal information collected through the ai-flywheel.com website ("Website"), our SMS/text messaging services, email communications, course enrolments, community membership, and any related services (collectively, "Services").

By accessing our Website and Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Policy, please do not use our Website or Services.

This Policy does not apply to the practices of companies that we do not own or control, or to individuals that we do not employ or manage.

2. Collection of Personal Information

2.1 What We Collect

We may collect the following categories of personal information:

Identity and contact information:

• Full name
• Email address
• Mobile phone number
• Billing address (where applicable)

Account and enrolment information:

• Course enrolment details
• Community membership status
• Payment and transaction records (processed via third-party payment providers; we do not store full credit card numbers)

SMS and messaging information:

• Mobile phone number
• SMS consent status (opted in or opted out)
• Opt-in date, time, and method (e.g. web form, SMS keyword)
• Message delivery status and engagement data

Technical and usage information:

• IP address
• Browser type and version
• Device type
• Pages visited, time spent, and referring URLs
• Cookie and analytics data (see Section 8)

2.2 How We Collect Information

We collect personal information:

• Directly from you — when you fill out a form on our Website, enrol in a course, subscribe to our email newsletter, opt in to SMS communications, make a purchase, or contact us
• Automatically — through cookies, web beacons, and analytics tools when you visit our Website (see Section 8)
• From third parties — from payment processors (e.g. Stripe) who confirm transaction details, or from SMS delivery platforms who provide message delivery status

We will only collect personal information that is reasonably necessary for our functions and activities, in accordance with APP 3.

2.3 SMS Opt-In and Consent Details

We collect your mobile phone number when you voluntarily provide it via the course enrolment form, SMS opt-in form, or community sign-up form on our Website.

By checking the consent box and providing your mobile number, you expressly consent to receive recurring automated SMS/MMS messages from Riley Coleman trading as AI Flywheel at the mobile number provided. Message types may include course notifications, community updates, account alerts, and promotional messages (with your explicit marketing consent).

Your SMS consent is not a condition of purchase or enrolment in any programme.

3. Use of Personal Information

We use your personal information for the following purposes, in accordance with APP 6:

Service delivery:

• Processing course enrolments and managing your account
• Providing access to course materials and community features
• Processing payments and sending transaction confirmations

Communications:

• Sending course notifications, session reminders, and programme updates
• Sending community event information and cohort updates
• Sending account alerts and administrative notices

SMS communications:

• Delivering the SMS message types you have consented to receive
• Managing your opt-in and opt-out preferences
• Monitoring message delivery to ensure service quality

Email marketing:

• Sending newsletters with insights on Human-Centred AI design
• Sending promotional information about upcoming cohorts and new programmes (you may unsubscribe at any time)

Website improvement:

• Analysing usage patterns to improve Website functionality and user experience
• Compiling aggregated, de-identified statistical reports on Website traffic

Legal and regulatory compliance:

• Complying with applicable Australian laws and regulations
• Responding to lawful requests from government or regulatory authorities

We will not use your personal information for a purpose other than the purpose for which it was collected, unless you have consented or an exception under the APPs applies.

4. Mobile Information Sharing Disclosure

We will not sell, rent, loan, trade, lease, or otherwise transfer for profit any phone numbers or personal information collected through our SMS/text messaging programme to any third party for their marketing or promotional purposes.

Your mobile phone number and messaging consent information will never be shared with unaffiliated third parties for their own marketing purposes.

We may share your mobile information only with the following categories of service providers who are contractually bound to protect your data and use it solely to help us deliver our Services:

• SMS platform providers (e.g. Twilio, MessageMedia) — for message delivery and opt-out management
• Customer relationship management (CRM) tools — for managing your enrolment and communication preferences

These service providers are prohibited from using your information for any purpose other than providing services to Riley Coleman trading as AI Flywheel.

5. Disclosure of Personal Information

We may disclose your personal information to:

• Service providers who assist us in operating our Website and Services, including payment processors, email delivery platforms, SMS platforms, analytics providers, and hosting providers. These providers are contractually obligated to protect your data and only use it for the services they provide to us.
• Professional advisers including lawyers, accountants, and auditors where necessary.
• Government authorities or regulators where required or authorised by Australian law, including to comply with a court order, subpoena, or mandatory reporting obligation.

We will not disclose your personal information to any other third parties without your consent, unless required or authorised by law in accordance with APP 6.

6. Cross-Border Disclosure of Personal Information

Some of our service providers (e.g. email platforms, SMS providers, analytics tools, payment processors) may store or process your personal information in countries outside Australia, including the United States.

Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that the overseas recipient complies with the APPs or is bound by a substantially similar privacy framework, in accordance with APP 8.

By providing your personal information to us, you consent to this cross-border disclosure. We remain accountable for any breach of the APPs by an overseas service provider to whom we have disclosed your personal information.

7. Retention of Personal Information

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including to:

• Maintain your account and provide our Services
• Comply with legal, accounting, and reporting obligations under Australian law
• Resolve disputes and enforce our agreements

SMS data retention: We retain your mobile phone number and consent records for as long as you remain opted in, plus any additional period required by law. When you opt out, we retain a record of your opt-out request to ensure we honour it, but cease all messaging.

When personal information is no longer required, we will take reasonable steps to destroy or de-identify it in accordance with APP 11.

8. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to collect usage information and improve your experience.

Types of cookies we use:

• Essential cookies — required for the Website to function (e.g. session management)
• Analytics cookies — used to understand how visitors interact with our Website (e.g. Google Analytics)
• Marketing cookies — used to track the effectiveness of our marketing campaigns (only if you have consented to marketing)

Third-party analytics tools we use may include:

• Google Analytics — Google's Privacy Policy
• Meta Pixel (if applicable) — Meta's Privacy Policy

Your choices: You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please note that disabling cookies may affect the functionality of our Website. For more information about cookies, visit www.allaboutcookies.org.

9. Email Marketing

We offer electronic newsletters and marketing emails to which you may voluntarily subscribe. We are committed to keeping your email address confidential and will not disclose it to any unaffiliated third parties for their marketing purposes.

All commercial emails will comply with the Australian Spam Act 2003 and the CAN-SPAM Act (where applicable). Every commercial email we send will:

• Clearly identify Riley Coleman trading as AI Flywheel as the sender
• Include our business contact details
• Include a clear unsubscribe mechanism
• Honour unsubscribe requests promptly

To unsubscribe: Click the unsubscribe link at the bottom of any email, or email us at riley@ai-flywheel.com with the subject line "Unsubscribe". Unsubscribe requests are processed within 5 business days. You will continue to receive transactional emails related to active enrolments or purchases.

10. Privacy of Children

Our Website and Services are intended for individuals aged 18 years and older. We do not knowingly collect personal information from children under the age of 18.

If you are under 18, please do not submit any personal information through our Website or Services. If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information promptly.

Parents and guardians are encouraged to monitor their children's internet usage and instruct them not to provide personal information online without permission.

11. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. As there is no uniform standard for how DNT signals should be interpreted, our Website does not currently respond to DNT signals. We do, however, limit our collection and use of personal information as described in this Policy.

12. Information Security

We take reasonable steps to protect your personal information from misuse, interference, loss, and from unauthorised access, modification, or disclosure, in accordance with APP 11. Our security measures include:

• Secure (HTTPS) encryption on our Website
• Access controls limiting who can view personal information
• Use of reputable third-party service providers with appropriate security measures
• Regular review of our data handling practices

However, no method of electronic transmission or storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

13. Data Breach Notification

In the event of a data breach that is likely to result in serious harm to any individual whose personal information is involved, we will comply with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth). This means we will:

• Take reasonable steps to contain the breach and assess the risk of serious harm
• Notify the Office of the Australian Information Commissioner (OAIC) as required
• Notify affected individuals as soon as practicable, including information about the breach, the type of information involved, and recommended steps

14. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you (APP 12)
• Request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading (APP 13)
• Withdraw consent for marketing communications at any time (including SMS and email)
• Request deletion of your personal information, subject to any legal obligations requiring us to retain it
• Make a complaint about how we have handled your personal information

To exercise any of these rights, contact us at the details in Section 16. We will respond to access and correction requests within 30 days, unless an exception applies. We will not charge you for making a request or for correcting your information.

15. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically.

Your continued use of our Website and Services after any changes constitutes your acceptance of the updated Policy. We will not, without your consent, use your personal information in a manner materially different from what was stated at the time it was collected.

16. Contacting Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, please contact us:

We will respond to all enquiries within 30 days.

17. Complaints to the OAIC

If you are not satisfied with our response to a privacy complaint, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):