Privacy Policy
Introduction to our Privacy Policy
This Privacy Policy explains how personal and technical data is collected, used, and protected when users interact with this website. The Company adheres to all applicable privacy laws and regularly reviews its privacy practices for compliance.
Users are encouraged to review this policy periodically. It outlines rights regarding personal data, the types of information collected, and how individuals can contact the Company with privacy-related concerns or requests.
How data is collected
Personal and technical data may be collected when users interact with the website, complete forms, or use site features. Data collection is limited to information necessary for the operation and improvement of the website.
Information provided directly by users
- Contact details such as name and email address provided through forms.
- User-submitted content or communications sent via the website.
- Preferences and settings chosen by the user during site use.
- Any payment or transaction data, if applicable and provided.
- Authentication or login credentials if an account is created.
Automatically collected technical information
- Device type and operating system details may be collected.
- Browser type, version, and language preferences are recorded.
- Access dates, times, and visited pages are automatically logged.
- IP address and general location may be captured for security and analytics.
- Technical events such as errors or performance issues are logged for diagnostics.
Purposes for using your data
Collected data is used to operate the website, improve services, maintain security, and comply with legal obligations. Personal data is not sold or used for unrelated marketing purposes.
- Operating and maintaining core website functions.
- Improving and updating site performance.
- Responding to user inquiries and support requests.
- Monitoring for fraudulent or malicious activity.
- Analysing aggregated usage data for improvement.
- Customising user experience as permitted by law.
- Complying with legal and regulatory obligations.
Privacy commitment: The Company is committed to protecting user privacy and complies with all applicable privacy laws, including the Australian Privacy Act and GDPR where relevant. Personal data is handled with care and only used for clearly defined purposes.
Data sharing and disclosure
Personal data may be shared with trusted service providers or required by law. All third parties are obligated to use the information solely for the intended purpose and maintain confidentiality.
Third-party service providers
Third-party service providers may assist with website operation, analytics, or communications. All providers are required to comply with applicable data protection requirements.
Legal obligations
Data may be processed or retained as required by applicable law, regulatory requirements, or to respond to lawful requests from authorities.
Anonymous usage statistics
The Company may collect anonymous data for statistical analysis, such as aggregated site usage patterns. This information does not identify individual users and is used solely for website improvement and performance tracking.
User data rights
Users have rights under privacy law, including access, correction, deletion, limitation, objection, and data portability. These rights may be exercised by contacting the Company. Requests will be handled in line with legal requirements.
- Users have the right to request access to their personal information held by the Company.
- Users may request correction of inaccurate or incomplete personal data.
- Users can request deletion of their personal information, subject to legal limitations.
- Users may request a copy of their personal data in a structured, machine-readable format.
- Users may object to processing of their personal data in specific cases as provided by law.
- Users can request restrictions on processing of their personal data in certain circumstances.
To exercise any data rights, users may contact the Company using the details provided. The Company will respond in accordance with applicable legal timelines.
Data security measures
The Company implements technical and organisational measures to protect personal data from loss, misuse, or unauthorised access. Security is regularly reviewed and updated to address emerging threats.
Technical data protection measures
- Encryption is used to protect data during transmission where appropriate.
- Secure servers are maintained for data storage and processing.
- Regular security assessments are conducted to identify vulnerabilities.
- Firewall and intrusion detection systems monitor for unauthorised access.
Organisational data protection measures
- Access to personal data is restricted to authorised staff and service providers.
- Staff receive training on privacy and data security responsibilities.
- Incident response procedures are in place to address potential data breaches.
- Regular audits and reviews are conducted to ensure ongoing compliance.
Data retention policy
Personal and technical data is stored only as long as needed for the purposes described in this policy or as required by law. Retention periods depend on data type and legal obligations.
- Account details, if collected, are used only for site access and user authentication.
- Learning data may be collected if users interact with educational features or resources.
- Communications data, such as messages sent through contact forms, may be retained for follow-up or quality assurance.
- Financial data is only collected if required for a transaction or service request.
- Marketing data is collected only with user consent and used solely for authorised communications.
Data will be securely deleted or anonymised when no longer required.
International data transfers
Personal information may be transferred outside Australia for processing by trusted service providers. Such transfers comply with applicable data protection laws and ensure adequate safeguards are in place.
- Personal data may be transferred to service providers outside Australia for processing.
- All transfers comply with applicable data protection laws and contractual safeguards.
- Where required, standard contractual clauses or similar mechanisms are used.
- Data subject rights remain protected after transfer.
Cookies and related technologies
Cookies are used to ensure essential website functionality, remember user preferences, and analyse site performance. Some cookies are necessary for the site to operate, while others help improve usability or serve analytical purposes.
Types of cookies used
- Essential cookies are necessary for website functionality and do not store personally identifiable information.
- Performance cookies collect data on website usage to help improve content and functionality.
- Personalisation cookies allow the website to remember custom settings and user preferences.
- Functionality cookies remember preferences and choices to enhance user experience.
Users can manage cookie settings via their browser. Disabling certain cookies may affect website performance or functionality.
Policy changes and notifications
This policy may be updated to reflect legal, technical, or operational changes. All updates are posted on this page with the effective date clearly indicated. Users are responsible for reviewing the policy periodically.
- Users will be notified of major policy updates via the website.
- Material changes will be clearly indicated with updated effective dates.
- Continued use of the website after changes indicates acceptance of the revised policy.
- Users are encouraged to review policy updates regularly.
Significant changes will be communicated appropriately.
Contact and questions
Users may contact the Company with questions regarding privacy or to exercise data rights. All inquiries will be addressed in accordance with legal requirements.
Quenzalithe
Level 4, 55 Southbank Boulevard, Southbank, VIC 3006, Australia
Support phone: +61 3 1520 2701
Support email: content@quenzalithe.com