Privacy Policy

Information We Collect

We collect different types of information depending on how you interact with our services. Some of it you give us directly, other information comes from how you use our platform.

Information You Provide Directly

When you sign up for our learning programs or contact us, we collect:

• Contact details: Name, email address, phone number, and postal address
• Account information: Username, password (stored encrypted), and profile preferences
• Payment information: Billing address and transaction details (payment card data is processed by our payment provider and never stored on our servers)
• Course progress: Your learning activities, completed modules, quiz results, and saved resources
• Communications: Messages you send us through contact forms, emails, or customer support channels

Information Collected Automatically

When you visit our website, we automatically gather certain technical data:

• Device information: Browser type, operating system, screen resolution, and device identifiers
• Usage data: Pages visited, time spent on pages, click patterns, and navigation paths
• Location data: General location based on IP address (city and region level, not precise GPS)
• Cookies and similar technologies: Small files stored on your device to remember preferences and improve functionality

How We Use Your Information

We use the information we collect for specific purposes that help us provide and improve our services. Here's what we actually do with your data:

• Deliver our services: Process your enrolment, provide access to learning materials, track your progress, and issue completion certificates
• Improve user experience: Personalize content recommendations, remember your preferences, and optimize platform performance
• Communicate with you: Send course updates, respond to inquiries, provide customer support, and share important service announcements
• Process payments: Handle transactions, send receipts, and manage billing issues
• Marketing (with your consent): Send newsletters, program announcements, and educational resources that might interest you
• Legal compliance: Meet regulatory requirements, prevent fraud, and enforce our terms of service
• Analytics: Understand how people use our platform to make it better and fix problems

Legal Basis for Processing (Australian Context)

Under Australian privacy law, we process your information based on:

• Contract performance: Processing necessary to deliver the services you've signed up for
• Consent: When you've explicitly agreed to specific uses like marketing communications
• Legitimate interests: For operational purposes like improving our services, provided this doesn't override your rights
• Legal obligations: When required by Australian law or court orders

Information Sharing and Disclosure

We share your information only when necessary and with trusted parties who help us operate our services:

Service Providers

We work with third-party companies that perform services on our behalf:

• Payment processors: To handle secure transactions (they maintain PCI-DSS compliance)
• Email service providers: To send course updates and communications
• Cloud hosting: To store data securely and ensure platform reliability
• Analytics tools: To understand website usage and improve performance
• Customer support platforms: To manage and respond to your inquiries efficiently

All service providers are contractually required to protect your data and use it only for the specific purposes we authorize.

Legal Requirements

We may disclose your information if required by law, court order, or government authority. This includes situations involving suspected fraud, threats to safety, or violations of our terms of service.

Business Transfers

If vendolirax is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We'll notify you before your data becomes subject to a different privacy policy.

Data Retention

We keep your information only as long as needed for the purposes outlined in this policy:

After retention periods expire, we securely delete or anonymize your information. You can request earlier deletion by contacting us, subject to legal obligations we must meet.

Your Rights and Choices

Australian privacy law gives you several rights regarding your personal information. Here's what you can do:

Access Your Information

You can request a copy of the personal data we hold about you. We'll provide this within 30 days, free of charge for reasonable requests.

Correct Your Information

If your information is inaccurate or incomplete, you can update it directly in your account settings or ask us to correct it.

Delete Your Information

You can request deletion of your personal data. We'll comply unless we're legally required to keep certain records (like financial transaction data for tax purposes).

Object to Processing

You can object to how we use your information for direct marketing or other purposes based on legitimate interests.

Withdraw Consent

When we process data based on your consent, you can withdraw that consent anytime. This won't affect processing that occurred before you withdrew consent.

Data Portability

You can request your data in a structured, commonly used format to transfer to another service provider.

Security Measures

We implement technical and organizational measures to protect your information from unauthorized access, loss, or misuse:

• Encryption: All data transmitted between your device and our servers uses TLS encryption. Passwords are hashed using industry-standard algorithms.
• Access controls: Staff access to personal data is restricted based on job role and necessity. All access is logged and monitored.
• Secure infrastructure: Our servers are hosted in secure facilities with physical access controls, fire protection, and redundant power supplies.
• Regular security testing: We conduct vulnerability assessments and penetration testing to identify and fix potential security issues.
• Incident response: We maintain procedures to detect, respond to, and notify affected parties of any data breaches as required by law.
• Staff training: All team members receive regular training on data protection and security best practices.

While we take security seriously, no system is completely secure. You should protect your account credentials and notify us immediately if you suspect unauthorized access.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your experience and analyze how our site is used.

Types of Cookies We Use

• Essential cookies: Required for the website to function properly (login sessions, security features)
• Performance cookies: Help us understand how visitors interact with our site through anonymous analytics
• Functionality cookies: Remember your preferences and settings
• Marketing cookies: Track your browsing to show relevant content and measure campaign effectiveness

You can control cookie settings through your browser preferences. Disabling certain cookies may limit website functionality. Most browsers allow you to refuse cookies or delete existing ones.

International Data Transfers

Our primary servers are located in Australia. However, some of our service providers operate from other countries, which means your data may be transferred internationally.

When we transfer data outside Australia, we ensure appropriate safeguards are in place through:

• Contractual protections requiring overseas recipients to handle data according to Australian privacy standards
• Using service providers in countries with privacy laws similar to Australia's
• Implementing additional security measures for cross-border transfers

By using our services, you acknowledge that your information may be transferred to and processed in countries outside Australia.

Children's Privacy

Our services are designed for adults and we don't knowingly collect information from individuals under 18 without parental consent. If you're a parent and believe your child has provided us with personal information, please contact us and we'll delete it promptly.

Changes to This Policy

We update this privacy policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email or through a prominent notice on our website.

The "Last updated" date at the top shows when the policy was last revised. We encourage you to review this policy periodically to stay informed about how we protect your information.

Continuing to use our services after policy changes take effect means you accept the updated terms.

Complaints and Regulatory Contact

If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the issue. If you're not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):