Privacy Policy
Last updated: 31 October 2026
This policy explains how Get Started Medicine (ABN 35 698 138 162, Tasmania, Australia; “we”, “us”), handles personal information when you use getstartedmed.com, sign up for a free guide, or buy our products.
We follow the Australian Privacy Principles (Privacy Act 1988, Cth), and for people in the UK and EU, the UK GDPR / EU GDPR. For GDPR purposes we are the controller of your personal data.
Privacy contact: [email protected].
1. What we collect
| Category | Examples | Source |
|---|---|---|
| Contact details | Email address; name (at checkout) | You; Stripe/Link |
| Preferences | Edition (AU/UK), next rotation, rotation start date (all optional) | You (signup form) |
| Purchase records | Products, order reference, amount, currency, billing country, date, refund status | Stripe/Link |
| Library and downloads | Login timestamps, download history, a hashed (not raw) IP address | Our site |
| Error reports | What you report and your email (if you give it) | You |
| Usage analytics | Pages viewed, referrer, device type, collected without cookies and without identifying you | Our self-hosted analytics (Umami) |
| Communications | Emails you send us | You |
We do not receive or store your full card details. Stripe/Link handles payment data under its own privacy policy.
We don’t knowingly collect information from anyone under 18, and our products are not directed at children.
2. How and why we use it
| Purpose | UK/EU lawful basis |
|---|---|
| Deliver your purchase, run your library, send login links, and tell you about updates and safety corrections | Contract |
| Send the free guide you asked for | Contract / your request |
| Send marketing emails (tips, new titles, offers timed to your rotation) | Consent, which you can withdraw at any time |
| Prevent fraud, misuse and unauthorised sharing (e.g. download limits, watermarks) | Legitimate interests (protecting our products and customers) |
| Handle refunds, disputes and support | Contract; legitimate interests |
| Improve the site and our books (aggregate analytics, error reports) | Legitimate interests |
| Keep business and tax records | Legal obligation |
We don’t sell your personal information, and we don’t use it for automated decisions with legal or similarly significant effects.
3. Watermarks
Files you download are stamped with your email address (and, for purchases, an order reference). This is to deter unauthorised sharing. If a copy is found shared publicly, we may use the watermark to identify the source account.
4. Who we share it with
- Stripe / Link (payments, merchant of record, receipts, tax, fraud and dispute handling). Stripe acts as an independent controller for payment data.
- Cloudflare (website delivery and security, delivery of service emails such as confirmation and download links, bot protection on forms).
- Amazon Web Services (Amazon SES, which delivers our marketing emails if you asked for them).
- Our hosting provider, Hetzner Online GmbH, for the server in Singapore that runs our site, mailing list (Listmonk) and analytics (Umami), all of which we operate ourselves.
- Professional advisers (lawyers, accountants) where needed, and authorities where the law requires.
If you buy our books on Amazon Kindle, Amazon handles that purchase under its own privacy policy and shares no personal information with us.
5. International transfers
We are based in Australia. Our own server is in Singapore. Our service providers may also process data in Australia, the United States, the UK, the EU and other countries. For UK/EU data we rely on adequacy regulations or appropriate safeguards (such as standard contractual clauses or the UK International Data Transfer Agreement/Addendum) offered by our providers.
6. How long we keep it
| Data | Retention |
|---|---|
| Order and transaction records | 5 years after the transaction (Australian tax record-keeping) |
| Library account and entitlements | While your account is active; deleted on request (order records kept as above) |
| Download logs | 12 months |
| Marketing list data | Until you unsubscribe, then a suppression record (email only) so we don’t email you again |
| Error reports | 2 years |
| Analytics | Aggregate only; no personal identifiers |
7. Your rights
Everyone: you can ask to access or correct your personal information, unsubscribe from marketing at any time (every marketing email has an unsubscribe link), or ask us to delete your account.
UK/EU: you also have rights to erasure, restriction, data portability, to object to processing based on legitimate interests, and to withdraw consent at any time.
Email [email protected]. We’ll respond within 30 days.
Complaints: contact us first. If you’re not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or, in the UK, the Information Commissioner’s Office (ico.org.uk), or to your local EU supervisory authority.
8. Cookies
We use only essential cookies: a session cookie that keeps you logged in to your library, and security cookies set by Cloudflare (including for bot protection on forms). Our analytics don’t use cookies. Because we use no non-essential cookies, we don’t show a cookie banner. If that changes, we’ll ask for consent first.
9. Security
We use encryption in transit (HTTPS), single-use expiring login links, hashed IP addresses, private file storage and access controls. No system is completely secure. If a data breach is likely to cause serious harm, we will notify you and the relevant regulator as the law requires.
10. Changes
We’ll post any changes here and update the date above. If the changes are significant, we’ll email account holders.