The Model Audit
Privacy Policy
Last updated 19 August 2026
This policy explains how The Model Audit handles personal information in our application form and in the internal CRM our team uses to manage enquiries and client relationships. We collect only what we need to assess an application, run the sales conversation and support clients, and we keep it locked down to the people who need it.
What we collect
- From applicants: name, email, phone, Instagram handle, and the answers you give in the audit form (age, height, experience, goals, budget range) plus any photo you choose to upload.
- From clients: billing details handled by our payment provider, agreement and signature records, and payment history.
- From conversations: notes our team writes, emails, call records and call recordings where a recording tool is in use, and calendar bookings.
- From staff accounts: name, work email, phone, timezone, and activity in the CRM for audit purposes.
Why we use it
To assess whether we can help you, to book and run calls, to send agreements and process payments, to deliver the mentorship or community you have joined, and to keep internal records of who spoke to whom and when. We also use aggregate figures (deals closed, cash collected) to run the business.
Advertising measurement (Meta)
We record which ad or link brought you to our site (campaign, ad set and ad names) so we can tell which ads work. Outside the EU, UK and Switzerland, we also use the Meta pixel and send Meta (Facebook and Instagram) a small set of signals when you apply, book, confirm or start with us: Meta's cookie ID and click ID, your IP address and browser type. This is for measuring ads and helping Meta show them to people likely to be interested. We do not send Meta your name, email or phone. Visitors in the EU, UK and Switzerland get no Meta pixel and no Meta events. To opt out, block third-party cookies or use Meta's ad preferences, or contact us and we'll stop sending events about you.
Calendars and connected accounts
Team members can connect their own Google Calendar and inbox. Where calendars are shared for team scheduling, only busy and free time blocks are visible to teammates — never event titles, guests, descriptions or attachments. Each person chooses which calendars are shared and can disconnect at any time from their settings, which removes our stored access.
Call recordings
Where a call is recorded, the recording is used for coaching and record-keeping. We ask for consent at the start of the call, and you can ask us not to record or to delete a recording afterwards.
Who can see it
Access is limited to our sales and support team through named accounts. Sensitive settings, commission figures and team administration are restricted to administrators. Nobody outside the business is given access to the CRM.
We share information with service providers only where it is needed to run the business — for example payment processing, e-signature, email delivery, calendar and scheduling, call handling, and our hosting and database provider. Those providers act on our instructions. We do not sell personal information, and we do not share it for third-party advertising.
How we protect it
Data is stored in a managed cloud database with row-level access rules, so records are only readable by accounts entitled to them. Access to the CRM requires a verified email sign-in, uploaded photos sit in a private storage bucket that is not publicly listable, and credentials for connected accounts are stored encrypted. No system is perfect, so if something goes wrong we will investigate promptly and notify affected people where we are required to.
How long we keep it
Applications that do not progress are kept for up to 24 months. After that, personal details are removed automatically unless there is a purchase, agreement or payment attached. Client records, agreements and payment history are kept for as long as we need them for tax, accounting and legal reasons.
Age is only visible to our admins, never to the wider sales team. Anyone under 18 who applies without a parent or guardian named is declined automatically and is never added to a call list. We do not ask for body measurements in the application form.
Your choices
You can ask for a copy of the information we hold about you, ask us to correct it, ask us to delete it, or withdraw consent for marketing messages. Use the form below and we will action it, subject to records we are legally required to keep.
Delete my information
Tell us the name and email you applied with and we will remove your details.
Contact
Questions or requests: joey@themodelaudit.com.au. If you are not happy with our response, you can raise it with the Office of the Australian Information Commissioner.