Privacy Policy
At Mendis we respect your privacy and protect your personal information. This policy explains what we collect, why we collect it, how we use it, and the choices you have. It applies to our website mendis.digiwell.com.au, our online groups and programs, and our membership services.
Who we are
Business name: Murfitt Elevation (ABN 87 661 641 615)
Trading as: Mendis
Email: todd@murfittelevation.com.au
Postal: PO Box 715, Hahndorf, SA 5245
What we collect
We collect the minimum information needed to run your account, provide peer-support services, and manage billing/NDIS documentation.
- Account & membership (via PMPro / custom signup): username, email, password (encrypted), membership level (Rookie/Pro), status and dates.
- Intake details (via Fluent Forms): name, contact details, NDIS number, plan manager email, relevant preferences or goals you choose to share. Do not enter clinical/diagnostic information unless necessary for service delivery.
- Payments (via PayPal and/or Square): transaction ID, amount, and method. Card numbers are handled by the payment gateway — we never store them.
- Invoices & NDIS paperwork: invoice numbers, service descriptions, date ranges and totals.
- Engagement data: attendance records, passes usage, badges/achievements (myCred), and page activity for security/analytics.
- Technical: cookies, IP address, device/browser type, and basic diagnostics (e.g., cache and security logs).
How we use your information
- Membership & access: to create accounts, authenticate logins, and control access to Rookie/Pro features.
- Programs & support: to schedule and run sessions (Zoom or in-person), track passes, and tailor content (courses, meditations, exercise videos).
- Billing & NDIS: to issue invoices/receipts and provide documents to plan managers when requested or authorised.
- Communication: to send important updates about sessions, service changes, or policy updates.
- Safety & security: to detect fraud or misuse, and to comply with legal obligations.
- Improvement: to understand what works, fix issues, and improve member experience.
Legal bases (Australia)
We process information to deliver services you request (contract), to meet legal/record-keeping obligations, and with your consent for optional features (e.g., certain communications). For sensitive information you voluntarily provide (e.g., disability-related context), we handle it with heightened care and only for the purpose of peer support and participation.
Sharing & third-party processors
We share your data only with providers that help us operate the service. They may process data on servers outside Australia. We put reasonable safeguards in place and choose reputable vendors.
| Service | Purpose | What they receive |
|---|---|---|
| Paid Memberships Pro (PMPro) | Membership levels, access control | Account & membership metadata |
| Fluent Forms | Intake forms, invoices (PDF) | Form responses (name, contact, NDIS fields) |
| PayPal / Square | Payments for Pro | Amount, order details (not full card info) |
| Zoom | Online session delivery | Name, email (for invitations/attendance) |
| Email (e.g., WP mail / SMTP) | Service emails and support | Your email & message content |
| Caching & security tools | Performance and security | Technical/usage logs, IP address |
Data retention
We keep account and billing records for as long as you have an active membership and for a reasonable period afterwards to comply with accounting and legal requirements. Intake responses relevant to service provision are retained while you are a member and then archived or deleted according to our retention schedule. You can request deletion of optional information at any time (subject to legal constraints).
Security
We use authentication controls, role-based access, HTTPS, and reputable processors. No method is 100% secure; please use a strong password and keep your login private.
International data transfers
Some providers may store or process data outside Australia. By using our services you consent to those transfers, subject to contractual and technical safeguards.
Your choices & rights
- Access/Update: you can view or update your account details via your profile or by contacting us.
- Delete: request deletion of optional data; we may retain what is required for legal/financial records.
- Communications: you can opt out of non-essential emails.
- Complaints: contact us first; you can also raise concerns with the Office of the Australian Information Commissioner (OAIC).
Children
Mendis is designed for adults. If you believe a minor has provided personal information, please contact us so we can address it.
Cookies
We use cookies for login sessions, site performance (caching), and analytics/security. You can control cookies through your browser settings; some features may not work without them.
Changes to this policy
We may update this Privacy Policy. We’ll post the new date here and, for material changes, notify members by email or site notice.
Contact
Questions or requests? Email todd@murfittelevation.com.au.