Effective date: 12 August 2026.

1. Who we are and what this policy covers

1.1 Lunar Luxe Pty Ltd (ABN 82 613 965 629), trading as The Max Effect and The Max Effect Consulting (TMEC, we, us or our), operates the websites, funnels, products and services covered by this policy.

1.2 This policy applies to information collected through our websites, forms, emails, customer accounts, support interactions, purchases and services.

1.3 We are based in Australia and may provide services to customers in Australia, New Zealand, the United Kingdom, Canada, the United States and other countries. Additional privacy rights may apply depending on where you are located.

1.4 Privacy and general support questions may be sent to [email protected].

2. Information we collect

2.1 We may collect your name, business name, email address, phone number, billing details, account details, order history, enquiries, support messages and information you provide during onboarding.

2.2 We may collect technical information such as IP address, approximate location, browser, device, pages visited, referral source, timestamps and cookie or tracking information.

2.3 If you use a service that processes information about your customers, staff or contacts, we may process that information on your instructions to provide the service. You are responsible for having the permissions and notices required to provide it to us.

2.4 Please do not provide sensitive information unless it is necessary for the service and you have permission to do so.

3. How we use information

3.1 We use personal information to provide, configure, maintain, secure and support our products and services; process payments; manage accounts; respond to enquiries; send service messages; handle refunds and complaints; and comply with law.

3.2 We may use information to improve our products, systems and customer experience, using reasonable safeguards and in accordance with applicable law.

3.3 Where required by law, we rely on consent, performance of a contract, legitimate interests or legal obligations. You may ask us about the basis used for a particular activity.

4. When we share information

4.1 We may share information with payment processors, hosting and CRM providers, email and communications providers, analytics providers, AI or automation providers, professional advisers and contractors who help us provide the Services.

4.2 We may disclose information where required or authorised by law, to protect rights or safety, to investigate fraud or misuse, or as part of a business sale or restructure.

4.3 We do not sell personal information.

4.4 Service providers may process information in Australia, the United States or other countries. We take reasonable steps to use providers and contractual or technical safeguards appropriate to the information and applicable law.

5. Marketing communications

5.1 We may send marketing emails or messages where permitted by law. Each marketing message identifies us and includes a functional unsubscribe method.

5.2 We may contact business contacts using business contact details obtained directly or from public or commercial sources where lawful. Public availability alone is not treated as consent where consent is legally required.

5.3 You can unsubscribe at any time. We will continue sending necessary service, billing, security and account messages where required to provide the Services.

6. Cookies and similar technologies

6.1 We may use essential cookies, analytics and advertising technologies to operate, measure and improve our websites and campaigns.

6.2 Where a preference tool is available, you can manage non-essential cookies through it. You can also use browser controls, although some website functions may not work properly.

6.3 The technologies actually used may change as our websites and campaigns change. We will provide information about material tracking technologies where required by law.

7. Customer data used in our Services

7.1 If you use our Services to manage information about your customers or contacts, you generally decide why that information is collected and how it is used. We process it to provide and support the Services and under your instructions.

7.2 You must provide lawful instructions and respond to requests from the people whose information you submit. We will provide reasonable assistance where required by our agreement and applicable law.

7.3 AI voice, call recording and transcription are not part of the current launch scope unless expressly included in your Offer Record. If enabled later, we will provide additional instructions and the customer must give the required notices and obtain the required permissions.

8. Retention

8.1 We keep personal information for as long as reasonably needed for the purpose collected, to provide the Services, meet legal and accounting obligations, resolve disputes and protect our rights.

8.2 When information is no longer needed, we will delete it, de-identify it or securely retain it only where a legal, backup or dispute-related reason requires retention.

8.3 Specific customer-data export and deletion arrangements may also be stated in the Offer Record or our agreement with the customer.

9. Security and data incidents

9.1 We take reasonable technical and organisational steps to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure.

9.2 No online system is completely secure. If we become aware of a data incident that requires notification, we will notify affected people or regulators as required by law.

10. Your privacy rights

10.1 Depending on applicable law, you may have rights to access or correct information, request deletion or restriction, object to certain uses, withdraw consent and request data portability.

10.2 To make a privacy request, email [email protected]. We may need to verify your identity before responding.

10.3 We will respond within the timeframe required by applicable law. If you are in the United Kingdom and UK GDPR applies, the UK GDPR response timeframe applies.

10.4 If you are not satisfied, you may contact the privacy regulator in the country where you are located. In Australia, this is generally the Office of the Australian Information Commissioner.

11. Children

11.1 Our Services are intended for businesses and adults. We do not knowingly collect personal information from children for the purpose of selling our Services.

12. Changes to this policy

12.1 We may update this policy when our Services, providers or legal obligations change. The current version will be published on our website with its effective date.

12.2 If a change materially affects how we use personal information, we will provide additional notice where required.

13. Contact

13.1 Lunar Luxe Pty Ltd (ABN 82 613 965 629), trading as The Max Effect and The Max Effect Consulting.

13.2 Email: [email protected]