Privacy Policy

Innovation Shed - An Initiative by With Impact In Mind

Last Updated: 6 March 2026

Innovation Shed ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you participate in our programs, use our website, or interact with our services.

Quick Summary: We collect information to run Innovation Shed programs effectively, connect innovators with mentors, and improve our services. We don't sell your data, and we only share information necessary to deliver our programs or as required by law. You have rights to access, correct, and delete your information.

1. Information We Collect

We collect information in the following ways:

1.1 Information You Provide Directly

When you register for Innovation Shed, apply to become a mentor, or interact with our programs, you may provide:

Contact Information: Name, email address, phone number, location
Professional Information: Company name, role, industry, areas of expertise, LinkedIn profile
Program Information: Startup stage, goals, challenges, areas where you need help
Participation Data: Attendance at sessions, skill stations visited, deliverables created
Feedback and Surveys: Responses to surveys, program evaluations, testimonials
Payment Information: Processed securely via Stripe (we do not store credit card details). We receive confirmation of payment and billing name only.

1.2 Information Collected Automatically

When you visit our website or use our digital platforms, we may automatically collect:

Device Information: IP address, browser type, operating system, device identifiers
Usage Information: Pages viewed, links clicked, time spent, referring website
Location Data: General location based on IP address
Cookies and Tracking Technologies: See Section 8 below

2. How We Use Your Information

We use your personal information for the following purposes:

2.1 Program Delivery and Operations

Registering you for sessions and programs
Matching participants with relevant mentors and skill stations
Sending session reminders, updates, and program communications
Managing attendance and participation tracking
Processing payments and maintaining financial records
Providing access to resources, templates, and materials

2.2 Communications

Responding to your inquiries and providing customer support
Sending updates about upcoming sessions, events, and opportunities
Sharing educational content, resources, and community announcements
Conducting surveys and gathering feedback to improve our programs

2.3 Program Improvement and Research

Analysing participation patterns and outcomes to enhance program design
Understanding which skill stations and topics are most valuable
Measuring impact and tracking program success metrics
Generating anonymised, aggregated data for research and reporting

2.4 Legal and Compliance

Complying with Australian legal and regulatory requirements
Enforcing our terms and conditions
Protecting our rights and the rights of participants and mentors
Preventing fraud, security threats, or illegal activities

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

3.1 With Mentors and Other Participants

Mentors: We share your name, business information, and session goals with mentors you work with to enable effective mentorship
Participants: Your first name and business name may be visible to other participants in sessions to facilitate collaboration and networking
Community Platform: If you join our Slack/Discord community, your profile information you choose to share will be visible to other community members

3.2 With Service Providers

We work with trusted third-party service providers who help us deliver our programs. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your data. These include:

Payment Processing: Stripe handles secure payment processing (see Stripe's privacy policy at stripe.com/privacy)
Platform Hosting: Lovable provides hosting for our booking platform
Email Communications: Email service providers for newsletters and program updates
Analytics: Google Analytics for website usage analysis (anonymised data)
Document Collaboration: Google Workspace for shared resources and materials

3.3 Venue and Event Partners

Spacecubed and other venue partners: We share attendance lists and emergency contact information for safety and security purposes
Event insurance: Basic participant count and event details for insurance purposes

3.4 For Legal Reasons

We may disclose your information if required by law or in good faith belief that such action is necessary to:

Comply with a legal obligation, court order, or government request
Enforce our Terms and Conditions
Protect the rights, property, or safety of Innovation Shed, our participants, or others
Investigate potential violations or fraud

3.5 Business Transfers

If Innovation Shed is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any such change in ownership or control.

4. Data Security and Storage

We take the security of your personal information seriously and implement reasonable technical and organisational measures to protect it:

4.1 Security Measures

Encrypted Data Transmission: All data transmitted to and from our platforms uses HTTPS/SSL encryption
Secure Password Storage: Passwords are hashed and encrypted, never stored in plain text
Access Controls: Limited access to personal information, only authorised personnel can view data
Regular Security Updates: We keep our systems updated with the latest security patches
Secure Backups: Regular encrypted backups stored securely

4.2 Data Storage

Primary Storage: Data stored on secure cloud infrastructure (Australia and global)
Payment Data: Credit card information is never stored by us; Stripe handles all payment data in PCI DSS compliant infrastructure
Retention Period: We retain your information for as long as necessary to provide services and as required by law

4.3 Data Breach Notification

In the event of a data breach that is likely to result in serious harm, we will:

Notify affected individuals as soon as practicable
Notify the Office of the Australian Information Commissioner (OAIC) as required by law
Take immediate remedial action to secure data and prevent future breaches
Provide guidance on steps you should take to protect yourself

5. Data Retention

We retain your personal information for different periods depending on the purpose:

Active Participants: Information retained while you actively participate in programs
Alumni/Former Participants: Retained for 3 years after last participation for program evaluation and re-engagement opportunities
Financial Records: Retained for 7 years as required by Australian tax law
Marketing Consent: Retained until you unsubscribe or withdraw consent
Anonymised Data: May be retained indefinitely for research and program improvement

You can request deletion of your information at any time (subject to legal retention requirements). See Section 6 below for how to exercise this right.

6. Your Privacy Rights

Under the Australian Privacy Act 1988, you have the following rights regarding your personal information:

6.1 Access Your Information

You can request access to the personal information we hold about you. We will provide this within 30 days of your request.

6.2 Correct Your Information

You can update or correct your personal information at any time through your account settings or by contacting us. We will update inaccurate or incomplete information promptly.

6.3 Delete Your Information

You can request deletion of your personal information, subject to legal retention requirements (such as financial records). We will delete or anonymise your data within 30 days unless we have a legitimate reason to retain it.

6.4 Data Portability

You can request a copy of your personal information in a structured, commonly used, machine-readable format (e.g., CSV, JSON).

6.5 Restrict Processing

You can request that we limit how we use your personal information in certain circumstances, such as while we verify accuracy or assess a deletion request.

6.6 Object to Processing

You can object to certain uses of your information, such as direct marketing or profiling.

To exercise any of these rights, please contact us using the information provided below. We may need to verify your identity before processing your request.

7. Children's Privacy

Innovation Shed programs are designed for adults (18 years and older). We do not knowingly collect personal information from children under 18. If we learn that we have inadvertently collected information from a child under 18, we will delete it promptly. If you believe we have collected information from a child, please contact us immediately.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyse usage, and deliver personalised content. Types of cookies we use:

Essential Cookies: Necessary for website functionality
Analytics Cookies: Help us understand how you use our site (Google Analytics)
Functional Cookies: Remember your preferences and settings
Marketing Cookies: Deliver relevant content and measure campaign effectiveness

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

9. Third-Party Websites and Services

Our website and communications may contain links to third-party websites or services that are not operated by us. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

Third-Party Services We Use:

Stripe: Secure payment processing (see stripe.com/privacy)
Lovable: Platform hosting and infrastructure (see lovable.dev/privacy)
Google Workspace: Email and document collaboration
Slack/Discord: Community communication
Spacecubed: Venue and event management
Google Analytics: Website analytics (anonymised)
Email service providers: Newsletter and communications

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of any material changes by:

Posting the updated policy on our website
Updating the "Last Updated" date at the top of this policy
Sending an email notification for significant changes
Displaying a notice on our website or in our programs

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

11. International Data Transfers

Innovation Shed operates primarily in Western Australia. If you are accessing our services from outside Australia, please be aware that your information may be transferred to, stored, and processed in Australia, where data protection laws may differ from those in your country. By using our services, you consent to the transfer of your information to Australia.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Innovation Shed

An Initiative by WITH IMPACT IN MIND

Paul Cannavan

Trading as WITH IMPACT IN MIND

ABN: 78 210 957 865

Email: paul@withimpactinmind.com

General Inquiries: paul@withimpactinmind.com

Location: Perth, Western Australia

Website: innovationshed.com

13. Australian Privacy Principles

Innovation Shed is committed to complying with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). This includes:

Collecting personal information fairly, lawfully, and transparently
Using and disclosing information only for stated purposes
Maintaining the quality, security, and accuracy of personal information
Providing access to personal information upon request
Correcting inaccurate, incomplete, or outdated information
Taking reasonable steps to destroy or de-identify information when no longer needed

If you believe we have breached the APPs or your privacy rights, you can:

Contact us directly using the information above to lodge a complaint
We will investigate and respond within 30 days
If unsatisfied, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au

Thank you for trusting Innovation Shed with your information. We are committed to protecting your privacy and using your information responsibly to support Western Australia's startup ecosystem.

Home | For Participants | For Mentors | Terms & Conditions

Big picture. Small steps. Positive impact.