Privacy Policy

Effective date: 3 October 2026

The short version

• Who we are. Rhubarb Group Pty Ltd, the company behind Dee Zibara, based in Sydney, Australia.
• What we collect. Your contact and account details, what you buy, how you use our site, and, if you join a programme, health information you choose to give us.
• Health information is protected more strictly. We only collect it with your explicit consent, use it only to run your programme safely, and never use it for marketing or advertising.
• We don’t sell your information.
• Where it goes. Some of our providers, such as our programme platform (Kajabi), are in the United States and other countries. We use contracts and safeguards to protect your information there.
• Your choices. You can ask to see, correct or delete your information, unsubscribe from marketing at any time, and opt out of advertising cookies.
• Questions or complaints. Email hello@deezibara.com.

The full policy is below.

1. Who we are and what this policy covers

In this policy, we, us and our mean Rhubarb Group Pty Ltd (ABN 58 653 651 855), the company behind Dee Zibara. We are responsible for your personal information. Under European and UK law, we are the “controller”.

This policy covers personal information we handle through:

• our website, deezibara.com;
• our members area and checkout at members.deezibara.com, including when you access it through Kajabi’s mobile app;
• our programmes, coaching, workshops and masterclasses;
• our emails, forms and social media accounts.

It doesn’t cover our Dee’s Teas online shop, which has its own privacy policy, or websites and apps run by other companies.

Laws we follow. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and the Health Records and Information Privacy Act 2002 (NSW). Because we offer our programmes internationally, we also comply with the EU General Data Protection Regulation (GDPR) and UK GDPR where they apply to you, and with applicable US state privacy laws.

2. What we collect

What we collect depends on how you deal with us. You don’t have to give us information, but without it we may not be able to provide a programme or answer your enquiry.

We don’t ask for other sensitive information, such as racial or ethnic origin, religion, political views or sexual orientation. Please don’t send it to us.

3. How we collect it

• From you, when you fill in a form, join our email list, book a call, buy a programme, complete onboarding, attend a coaching session or contact us.
• Automatically, through cookies, pixels and similar technologies when you use our website and members area (see section 7).
• From service providers, such as our programme platform and payment processors, when they tell us about your purchase or account.

We collect health information only directly from you, with your consent. If you give us information about someone else, please make sure they’re happy for you to do so.

4. How we use it

We use personal information only for the purposes below, or for a related purpose you would reasonably expect. The right-hand column shows our legal basis under the GDPR and UK GDPR.

Where we rely on legitimate interests, we have weighed our interests against yours. You can object at any time (see section 12).

5. Health information

Health information is sensitive, and the law protects it more strictly. We treat it that way.

• Explicit consent. We ask for your consent separately when you complete programme onboarding. It isn’t bundled into our terms of sale.
• Limited use. We use it only to deliver your programme, check it’s suitable and safe for you, support you during the programme, and keep the records the law requires.
• Never for marketing or advertising. We don’t use health information to market to you, and we never give it to advertising platforms.
• Never sold. We don’t sell or trade it.
• Limited access. Only Dee and the people who help deliver your programme can see it, and only when they need to.
• Disclosure. We don’t disclose it to anyone else without your consent, unless the law requires or allows it, for example to lessen a serious threat to someone’s life, health or safety.

You can withdraw your consent at any time by contacting us. If you do, we may not be able to keep providing your programme safely. Withdrawing consent doesn’t affect what we did before, and we may still need to keep some records to meet legal requirements (see section 10).

6. Automated decisions and AI tools

We use two computer programs that help shape the nutrition guidance in some programmes.

Calorie range calculation. During onboarding, a calculation estimates your energy needs from your age, height, weight, activity level and goals. It uses the Harris–Benedict equation, adjusted for the exercise in your programme. It then places you in one of our set calorie ranges. Estimates like this can vary by 20–30% between people.

AI meal planner. Some programmes include an AI meal planner that suggests a day of meals. It uses:

• the ingredients you choose to include or leave out;
• your calorie range; and
• which half of your menstrual cycle you’re in.

The planner is powered by Anthropic’s Claude AI model. What you type is sent to Anthropic in the United States to generate your plan. Please don’t enter your name or other personal or health details into the planner.

You stay in control. Both tools produce suggestions, not medical advice, and you decide what to eat. If you think your calorie range isn’t right for you, contact us and Dee will review it personally. You can also ask us how a result was reached.

7. Cookies, pixels and advertising

Cookies are small files stored on your device. Pixels are small pieces of code that tell a service a page was visited. We use them on deezibara.com and in our members area at members.deezibara.com.

Analytics and advertising tools receive information such as the pages you visit, the links you click (for example, “book a call” or checkout), and cookie and device identifiers. When you send an enquiry through our contact or Kangen Water form and advertising cookies are on, we also send Google and Meta a scrambled (hashed) copy of your email address, so they can tell us whether your enquiry came from one of our ads. We don’t do this for visitors in Washington or Nevada. We never send these tools your health information.

Your choices:

• EU, EEA, UK, Washington and Nevada visitors: when you first visit deezibara.com, we ask whether you’re happy for us to use analytics and advertising cookies. They stay off unless you turn them on.
• Everyone: you can switch analytics or advertising cookies off at any time using Cookie settings in the site footer. You can also block or delete cookies in your browser settings, and manage ad personalisation in your Google and Meta settings. Google also offers a browser add-on to opt out of Google Analytics.

Our website doesn’t currently respond to “Do Not Track” or Global Privacy Control browser signals. Please use Cookie settings instead.

8. Who we share it with

We don’t sell your personal information, and we don’t share it with other businesses for their own marketing. We share it only with the people and providers below, and only what they need.

Our providers may only use your information to provide their services to us, and must protect it.

We may also disclose information:

• when the law requires or allows it, for example to a court, regulator or law enforcement agency;
• to prevent a serious threat to someone’s life, health or safety; or
• to a buyer or successor if our business is sold or restructured, on the condition that they protect it in line with this policy.

9. Overseas transfers

We’re based in Australia, but several of our providers store or process information overseas, mainly in the United States, and also in Ireland and other countries where they run data centres (see section 8).

Before we send personal information overseas, we take reasonable steps to make sure the recipient protects it to Australian Privacy Principle standards. We do this mainly through contracts. We remain responsible for how our providers handle it.

For people in the EU, EEA and UK: where your information goes to a country without an adequacy decision, we rely on the recipient’s certification under the EU–US Data Privacy Framework (and its UK extension), or on the European Commission’s Standard Contractual Clauses and the UK equivalent. You can ask us for a copy of the relevant safeguards.

10. How long we keep it

We keep personal information only as long as we need it, or as long as the law requires. After that, we securely delete it or permanently de-identify it.

11. Security and data breaches

We protect personal information with measures that include:

• encrypted connections (HTTPS) across our website and members area;
• two-factor authentication on our business accounts wherever it’s available;
• access limited to the people who need it;
• reputable providers with their own security programmes; and
• never storing full card numbers ourselves.

No system is completely secure, so please keep your members area password private and use one you don’t use anywhere else.

If there’s a data breach, we’ll act quickly to contain it and assess the risk, generally within 30 days. If it’s likely to cause serious harm, we’ll tell you and the Office of the Australian Information Commissioner as soon as practicable. Where the GDPR applies, we’ll notify the relevant supervisory authority within 72 hours where required.

12. Your rights

Everyone, wherever you live, can ask us to:

• give you a copy of the personal information we hold about you;
• correct information that’s inaccurate, out of date or incomplete;
• delete your information, unless we have to keep it by law (see section 10);
• stop sending you marketing; and
• explain how we handle your information.

Where it’s lawful and practical, you can also deal with us without giving your name, for example when asking a general question.

In the EU, EEA and UK, you also have the right to:

• restrict or object to how we use your information, including where we rely on legitimate interests;
• receive your information in a portable format;
• withdraw consent at any time, without affecting what we did before; and
• not be subject to a decision based solely on automated processing that significantly affects you, and to ask for a person to review it (see section 6).

In the United States, depending on your state, you may have similar rights to access, correct and delete your information, and to opt out of targeted advertising. We honour these requests whatever state you live in. People in Washington and Nevada have extra rights over consumer health data, set out in our Consumer Health Data Privacy Policy.

How to make a request. Email hello@deezibara.com. We may need to confirm your identity first. We don’t charge for requests. We’ll reply within 30 days. If we can’t do what you ask, we’ll explain why and tell you how to complain.

13. Marketing

We send marketing emails only if you’ve signed up, or, where the law allows, if you’ve bought from us before. We follow the Spam Act 2003 (Cth) and the anti-spam laws of other countries where they apply.

• Every marketing email has an unsubscribe link. We action it straight away.
• We’ll only send marketing by SMS if you’ve specifically agreed to it.
• We’ll keep sending essential service messages, such as receipts and programme updates, while you’re a client.
• We never use health information for marketing, and we don’t share your details with other businesses for their marketing.

14. Children, third-party sites and social media

Children. Our website and programmes are for adults aged 18 and over. We don’t knowingly collect information from anyone under 18. If you think a child has given us information, contact us and we’ll delete it.

Other websites. Our site links to other websites, such as our Dee’s Teas shop, booking tools, podcasts and social media. Their own privacy policies apply, not this one.

Social media. If you message or comment on our Instagram, Facebook, YouTube, LinkedIn or Spotify pages, that platform also handles your information under its own policy. Anything you post publicly can be seen by others.

15. Complaints

If you’re unhappy with how we’ve handled your information, please contact our Privacy Officer first (section 17). Tell us your name, how to reach you, and what went wrong. We’ll acknowledge your complaint within 2 business days and respond in full within 30 days.

If you’re not satisfied with our response, you can complain to:

• Australia: the Office of the Australian Information Commissioner, on 1300 363 992 or at oaic.gov.au.
• Health information in NSW: the NSW Information and Privacy Commission, on 1800 472 679 or at ipc.nsw.gov.au.
• EU and EEA: the data protection authority in the country where you live or work.
• UK: the Information Commissioner’s Office, at ico.org.uk.
• United States: your state attorney general.

16. Changes to this policy

We’ll update this policy when the law changes or when we change how we handle personal information. The effective date at the top shows when it last changed. If we make a significant change, we’ll email current clients and show a notice on our website before it takes effect.

We won’t use information we already hold in a new way that needs your consent without first asking for it.

17. Contact our Privacy Officer

For questions, requests or complaints about your personal information, contact:

Privacy Officer
Rhubarb Group Pty Ltd, the company behind Dee Zibara
ABN 58 653 651 855
1/39 Leighton Place, Hornsby NSW 2077, Australia
Email: hello@deezibara.com