Legal

Privacy Policy

Last updated: 10 September 2026

1. About this policy

This Privacy Policy explains how CredentiaIQ Pty Ltd (“CredentiaIQ”, “we”, “us” or “our”) collects, holds, uses and discloses personal information about people who use the CredentiaIQ platform and website (together, the “Service”).

CredentiaIQ is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained in that Act. We are committed to handling personal information in accordance with those principles.

By using the Service, you consent to the collection, use and disclosure of your personal information as described in this policy. If you do not agree with this policy, please do not use the Service.

2. Personal information we collect

“Personal information” has the meaning given in the Privacy Act 1988 (Cth): information or an opinion about an identified individual, or an individual who is reasonably identifiable.

The personal information we may collect and hold includes:

Identity and contact details — such as your name, email address, and organisation or department;
Account information — such as your login credentials and profile details;
Training and assessment data — such as modules you complete, assessment responses and results, and the credentials or badges you earn;
Communications — such as enquiries, feedback and correspondence you send us; and
Technical and usage data — such as device information, browser type, IP address and how you interact with the Service.

We do not generally collect sensitive information (as defined in the Privacy Act). Where sensitive information is required for a specific purpose, we will only collect it with your consent and where it is reasonably necessary for our functions or activities.

3. How we collect it

We collect personal information directly from you when you:

create an account or complete a form on our website;
use the Service, including completing training modules and assessments;
contact us or otherwise correspond with us; or
interact with our website, including through cookies and similar technologies.

We may also receive personal information from third parties, such as institutions, government bodies or training providers that use the Service, where you participate in their training. Where we collect personal information from a third party, we take reasonable steps to ensure you are aware of the collection in accordance with APP 5.

4. Why we collect, hold and use it

We collect, hold and use personal information for the following purposes:

to provide, operate and improve the Service;
to create and manage your account and profile;
to deliver training modules, administer assessments and issue credentials or badges;
to communicate with you, including responding to enquiries and providing support;
to send you information about CredentiaIQ, our features and offers (where you have consented);
to meet our legal and regulatory obligations; and
for any other purpose for which you have given your consent.

We will only use personal information for a purpose for which it was collected, or for a related purpose that you would reasonably expect, as permitted by the Privacy Act.

5. Use and disclosure

We may disclose personal information to:

our employees, contractors and related entities who need it to provide the Service;
third-party service providers who assist us (for example hosting, email delivery, analytics and payment providers), on a confidential basis and only to the extent necessary;
institutions, government bodies or training providers whose training you undertake, so they can administer their programs and record your credentials;
professional advisers and insurers; and
regulatory or government authorities where we are required or authorised by law to do so.

We do not sell your personal information. We will not otherwise disclose your personal information to third parties without your consent, except as required or authorised by law.

6. Overseas disclosure

We may store or process personal information using service providers located outside Australia. Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure the recipient does not breach the APPs, and we remain accountable for the handling of that information in accordance with the Privacy Act.

7. Direct marketing

With your consent, we may use your contact details to send you information about the Service, features, and offers that we think may be of interest to you.

Electronic marketing messages sent by us comply with the Spam Act 2003 (Cth). Every message will include a functional unsubscribe facility, and you can opt out of marketing communications at any time by using that link or by contacting us. Opting out will not affect communications that are necessary to provide the Service.

8. Cookies and analytics

We use cookies and similar technologies to remember your preferences, keep you signed in, and understand how the Service is used. We may also use third-party analytics services that collect aggregated, de-identified information about website traffic and usage.

You can control or disable cookies through your browser settings, although doing so may affect the functionality of the Service.

9. Storage and security

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include technical and organisational measures such as encryption, access controls and secure data storage.

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. Where we no longer need personal information for the purposes described in this policy, we take reasonable steps to destroy or de-identify it.

10. Access and correction

Under APP 12, you have a right to access the personal information we hold about you, and APP 13 gives you the right to ask us to correct it if it is inaccurate, incomplete or out of date.

To request access to, or correction of, your personal information, please contact us using the details below. We will respond within a reasonable period. In some circumstances the Privacy Act permits us to refuse access; if we do, we will tell you why.

11. Complaints

If you have a concern or complaint about how we have handled your personal information, please contact our Privacy Officer using the details below. We will acknowledge your complaint and endeavour to resolve it promptly.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or the Service. We will post the updated policy on this page and update the “last updated” date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

13. Contact us

If you have any questions about this Privacy Policy, or wish to access, correct, or complain about the handling of your personal information, please contact:

CredentiaIQ Pty Ltd
Privacy Officer
Email: privacy@credentiaiq.com