<- Back to Income Lab

Privacy Policy

Last updated: February 23, 2026

1. Overview

This Privacy Policy explains how Income Lab collects, uses, discloses, and manages personal information when you visit our website or use our membership services. Income Lab is a business operated by Pepform Pty Ltd (ACN/ABN registered in Australia). We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained in that Act.

2. Information We Collect

We may collect the following categories of personal information:

  • Contact information such as your name and email address.
  • Account and membership data such as subscription status, preferences, and referral details.
  • Payment information (processed securely by Stripe; we do not store full card numbers or sensitive payment data on our systems).
  • Usage data such as pages viewed, features used, and actions taken within the platform.
  • Communications you send to us, including support requests and feedback.
  • Device and technical data, including IP address, browser type, and basic diagnostics.

We collect personal information only by lawful and fair means, and only where it is reasonably necessary for our functions and activities (APP 3).

3. How We Use Your Information

We use your personal information to operate the Service, provide access to content, process payments, send transactional and account communications, respond to support requests, personalise your experience, improve our offerings, and meet our legal and security obligations. We will not use your personal information for a purpose that is unrelated to these primary purposes without your consent (APP 6).

4. Marketing Communications

We may send you marketing emails about Income Lab products and updates. All marketing emails include an unsubscribe mechanism in accordance with the Spam Act 2003 (Cth). You may opt out at any time by clicking "Unsubscribe" in any email or by contacting us at hello@referlabs.com.au. Transactional emails (such as login codes, payment receipts, and account notices) are not subject to opt-out as they are necessary to provide the Service.

5. Disclosure of Your Information

We disclose personal information only as necessary to operate the Service. This includes trusted third-party service providers such as Stripe (payment processing), Supabase (authentication and database), and Resend (transactional email). These providers are required to handle your information securely and only for the purpose of providing services to us.

We may also disclose personal information to comply with a legal obligation, protect our legal rights, or in connection with a business transfer. We do not sell your personal information (APP 6).

6. Overseas Disclosure

Income Lab operates from Australia. Some of our third-party service providers may store or process personal information in overseas locations, including the United States and European Union. We take reasonable steps to ensure these providers comply with privacy standards consistent with the APPs (APP 8). By using the Service, you consent to such overseas disclosure.

7. Cookies and Local Storage

We use cookies and browser local storage to keep you signed in, remember preferences, and help the Service function correctly. You can control cookies through your browser settings, but disabling them may affect site functionality.

8. Data Quality and Security

We take reasonable steps to ensure that personal information we hold is accurate, up to date, and complete (APP 10). We use reasonable administrative, technical, and physical safeguards to protect your information from misuse, interference, loss, and unauthorised access or disclosure (APP 11). However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information for as long as necessary to provide the Service and meet our legal obligations. When personal information is no longer required, we take reasonable steps to destroy or de-identify it (APP 11.2).

10. Your Privacy Rights (APP 12 & 13)

Under the Australian Privacy Principles, you have the right to:

  • Request access to the personal information we hold about you (APP 12).
  • Request correction of inaccurate, out-of-date, or incomplete personal information (APP 13).
  • Request deletion of your personal information, subject to legitimate business or legal obligations.

To exercise these rights, email us at hello@referlabs.com.au. We will respond within 30 days.

11. Children's Privacy

Income Lab is not intended for children under 18. We do not knowingly collect personal information from anyone under 18 years of age.

12. Complaints

If you believe we have mishandled your personal information, please contact us first at hello@referlabs.com.au. We will investigate and respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or by a prominent notice on our website. Continued use of the Service after updates constitutes acceptance of the revised policy.

14. Contact

Income Lab is operated by Pepform Pty Ltd (Australia). For privacy enquiries, contact us at hello@referlabs.com.au.