Privacy Policy

1. Information We Collect

We collect personal information that is reasonably necessary for, or directly related to, our functions and activities as a training and competency provider.

1.1 Information you provide at sign-up

When you create an account or register your company, we may collect:

• Full name and email address
• Phone number
• Job title, role, and department
• Company name, ABN, industry, and address
• Manager or supervisor email address (if applicable)
• Profile photo (optional)

1.2 Training and competency data

As you or your employees utilise our platform, we collect:

• Course enrolments, progress, and completion records
• Competency details, high-risk work licences, and professional certificate uploads
• Assessment submissions, marks, and results
• Assigned training matrices and compliance requirements

1.3 Technical and usage data

We automatically collect device, browser, IP address, and platform usage information when you visit or interact with our online services.

2. How We Use Your Information

We use your personal information to provide, maintain, and improve our services, including to:

• Create, verify, and manage user and corporate accounts
• Deliver training courses, assessments, and certifications
• Track and report on training progress, competencies, and compliance status
• Allow authorised company administrators and managers to oversee their team's training compliance
• Communicate with you regarding account administration, course updates, and system notifications
• Process payments securely via our third-party payment provider (Stripe)
• Assist organisations in meeting their legislative record-keeping obligations under Australian Work Health and Safety (WHS) legislation

3. How We Share and Disclose Your Information

We do not sell, rent, or trade your personal information. We disclose your information only for the primary purpose it was collected, or for a related secondary purpose you would reasonably expect. This includes sharing with:

• Your Organisation: Company administrators and managers within your employer's organisation for training compliance oversight.
• Platform Partners: Cloud Assess (our external training and assessment engine) to facilitate course delivery.
• Payment Processors: Stripe, to process course fees securely.
• Customer Relationship Management: HubSpot, to manage communications and client relationships.
• Professional Advisers and Regulators: Where required or authorised by law, or to meet WHS statutory reporting requirements.
• Overseas Data Disclosures: Some of our third-party service providers (such as HubSpot or Stripe) may host or process data on servers located outside Australia (predominantly in the United States). By providing your information, you consent to this overseas transfer, noting that we take reasonable steps to ensure these providers adhere to strict data protection standards.

4. Data Security and the NDB Scheme

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. We utilise cloud infrastructure with strict access controls, data encryption (in transit and at rest), and regular security reviews.

In the unlikely event of an eligible data breach that is likely to result in serious harm, we will manage the incident and notify you and the Office of the Australian Information Commissioner (OAIC) in strict accordance with the Notifiable Data Breaches (NDB) scheme.

5. Data Retention

We retain your personal information for as long as your account is active, or as required to assist your organisation in meeting its training compliance and record-keeping obligations under Australian WHS laws. Where data is no longer required for any authorised purpose, we take reasonable steps to destroy or permanently de-identify it.

6. Your Rights: Access, Correction, and Direct Marketing

You have specific rights under the APPs regarding your data:

• Access and Correction: You can request access to the personal information we hold about you, or request that we correct inaccurate, incomplete, or out-of-date information.
• Direct Marketing: If we use your details to send you updates or promotional material via HubSpot, you can opt out at any time by clicking the "unsubscribe" link in the email or contacting us directly.

To make an access or correction request, please contact our Privacy Officer at admin@sheqmanagement.com.au.

7. Third-Party Links

Our platform may contain links to external websites (e.g. SHEQ Management, SHEQDocX, SHEQ Assure). This Privacy Policy does not apply to third-party sites, and we recommend reviewing their respective privacy policies.

8. Children's Privacy

Our platform is designed strictly for commercial, workplace training purposes and is not intended for use by individuals under the age of 16.

9. Complaints and Changes to This Policy

If you believe we have breached the Australian Privacy Principles, you can lodge a complaint in writing using the contact details below. We will investigate your complaint promptly and respond to you in writing, usually within 30 days. If you are unsatisfied with our response, you may take your complaint to the Office of the Australian Information Commissioner (www.oaic.gov.au).

We may update this policy periodically. The "Last updated" date at the top will indicate when changes were last made.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact: