Lyndaz Referral & Affiliate Rewards Program

Affiliate Privacy & Data Handling Policy

Program operator: Lyndaz
ABN: 98 155 359 118
Business location: Rooty Hill, NSW, Australia
Website: lyndazkreativeklasses.com
Email: info@lyndazkreativeklasses.com
Proposed effective date: 12 October 2026
Document version: 1.0 

1. Purpose of This Policy

Lyndaz respects the privacy of individuals participating in the Lyndaz Referral & Affiliate Rewards Program.

This policy explains how personal information may be collected, used, stored, shared and protected when individuals apply for membership, participate in referral activities or request reward payments.

Lyndaz aims to handle personal information responsibly and in accordance with applicable privacy and data protection laws.

2. Information Collected

Lyndaz may collect the following information from affiliate applicants and approved members:

• Full legal name and preferred name

• Email address and contact telephone number

• Country of residence

• Relevant social media profiles or promotional channels

• Information about intended promotional activities

• Affiliate registration and membership status

• Assigned referral identification code

• Referral activity and eligible transaction records

• Pending, approved and paid reward amounts

• Communications relating to membership, rewards and disputes

• Records of acceptance of program terms and policies

Only information reasonably necessary for administering the program should be requested.

3. Payment Information

Lyndaz does not require applicants to provide bank account or PayID details when initially registering for affiliate membership.

Payment information will be requested through an appropriate secure process when an affiliate becomes eligible and submits a payout request.

Depending on the payout method, information may include:

• Account holder's name

• Australian bank account details

• PayID details

• International payment details

• Country of payment destination

• Additional information reasonably required for lawful payment processing

Payment information will be used for authorised reward payments, payment verification, financial records and applicable legal obligations.

Lyndaz will limit access to payment information and retain it only as necessary for these purposes.

4. How Information Is Collected

Information may be collected through:

• Affiliate registration forms

• Jotform submissions

• Lyndaz website enquiries

• Customer booking and purchase records

• Referral codes and tracking links

• Email correspondence

• Payout request forms

• Payment processing records

• Membership administration and dispute investigations

Where relevant, information may also be collected automatically through website analytics or referral tracking technologies, subject to applicable legal requirements.

5. How Information Is Used

Lyndaz may use affiliate information to:

• Review and process membership applications

• Communicate with applicants and approved members

• Assign and administer referral codes

• Record and verify customer referrals

• Calculate and approve referral rewards

• Process eligible payout requests

• Maintain accurate financial and administrative records

• Prevent fraud, duplication and misuse

• Investigate membership or payout disputes

• Communicate important program changes

• Meet applicable legal, tax and regulatory obligations

Information will not be used for unrelated purposes without an appropriate legal basis or consent where required.

6. Customer Information and Referral Verification

Affiliates are not automatically entitled to access customer personal information.

Lyndaz may verify referrals using customer booking, enrolment, purchase and payment records.

Affiliate reward statements should display only the information reasonably necessary to identify and explain eligible referral activity.

Customer names, contact details, health information, disability information and other confidential records must not be disclosed to affiliates unless there is a lawful and necessary reason.

Affiliates must not collect sensitive customer information or request NDIS details on behalf of Lyndaz without express written authorisation and a lawful basis.

7. Third-Party Service Providers

Lyndaz may use external service providers to operate the program, including:

• Jotform for online registration and administrative forms

• Google Workspace and Google Sheets for authorised business administration and recordkeeping

• Shopify for website, product and booking-related processes

• Banks and supported payment providers for reward transfers

• Other necessary hosting, security, communication or technical service providers

These providers may process information on Lyndaz's behalf or act independently in accordance with their respective terms and privacy arrangements.

Lyndaz will take reasonable steps to select and configure service providers appropriately and limit unnecessary access to personal information.

8. International Affiliates and Overseas Processing

The program may accept eligible applicants residing outside Australia.

Personal information may be processed or stored in countries other than the affiliate's country of residence or Australia, depending on the systems and service providers used.

International payments may require information to be disclosed to financial institutions or payment providers in other countries.

Where applicable, Lyndaz will take steps to comply with relevant cross-border privacy requirements and provide any additional disclosures, safeguards or choices required by law.

International membership does not guarantee that every payment method or program service will be available in every country.

9. Information Security

Lyndaz will take reasonable administrative and technical measures to protect personal information against unauthorised access, misuse, loss, alteration or disclosure.

These measures may include:

• Password-protected business accounts

• Multi-factor authentication where available

• Restricted access to affiliate and payment records

• Secure form and payment processes

• Limiting the sharing of financial information

• Reviewing access permissions

• Maintaining appropriate recordkeeping and backup procedures

No electronic storage or transmission system can be guaranteed to be completely secure.

10. Data Retention

Affiliate information will be retained only for as long as reasonably necessary for membership administration, referral verification, financial recordkeeping, dispute resolution and applicable legal obligations.

Where records are no longer required, Lyndaz will take reasonable steps to securely delete or de-identify them.

Some information may need to be retained after membership ends to satisfy taxation, accounting, legal or legitimate dispute-resolution requirements.

11. Access, Correction and Privacy Requests

Affiliates may contact Lyndaz to request:

• Access to personal information held about them

• Correction of inaccurate or outdated information

• Information about how their personal information is handled

• Deletion of information where legally available

• Withdrawal of consent where processing depends on consent

• Assistance with a privacy-related concern

Requests will be considered in accordance with applicable law and any relevant record-retention obligations.

12. Marketing Communications

Lyndaz may send members necessary administrative communications about applications, membership, reward balances, payouts, security and policy changes.

Optional marketing communications will be handled in accordance with applicable consent and unsubscribe requirements.

Membership in the affiliate program does not automatically authorise unrelated promotional marketing.

13. Cookies and Referral Tracking

The Lyndaz website or approved referral systems may use cookies, referral links, identifiers or similar technologies to record referral activity and support attribution.

The technologies actually used, their purposes and any relevant consent or opt-out options will be explained through applicable website notices and settings.

Referral tracking may not always be successful, including where customers block tracking, change devices or fail to provide a referral code.

14. Privacy Complaints

Individuals who believe their personal information has been mishandled may contact Lyndaz with details of their concern.

Lyndaz will review the complaint, investigate where appropriate and provide a response within a reasonable period.

Where applicable, individuals may also have the right to raise concerns with a relevant privacy regulator, including the Office of the Australian Information Commissioner.

15. Changes to This Policy

Lyndaz may update this policy to reflect changes in business operations, technology, legal requirements or program administration.

The current version and effective date will be displayed on the Lyndaz website.

Where reasonably practicable, material changes affecting affiliate members will be communicated in advance.

16. Contact Details

For privacy enquiries, access or correction requests, or concerns about personal information, contact:

Lyndaz
ABN: 98 155 359 118
Rooty Hill, NSW, Australia
Email: info@lyndazkreativeklasses.com
Website: lyndazkreativeklasses.com