Skillworks Australia

Legal

Privacy Policy

Last updated: 2026-04-22

Skillworks Australia Pty Ltd (ABN 00 000 000 000) of Level 17, 31 Queen Street, Melbourne VIC 3000 (Skillworks, we, us) is committed to protecting the privacy of individuals who interact with our website, purchase our products, or correspond with us. This Privacy Policy explains how we handle personal information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

1. What information we collect

We collect personal information that is reasonably necessary for our functions and activities. Depending on how you interact with us, this may include:

  • Identity and contact information: name, email address, phone number, job title, and organisation details;
  • Organisation records: RTO name, RTO code, billing address, and authorised staff details;
  • Transaction data: order contents, purchase amount, invoice numbers, and a redacted payment reference (we do not store full card numbers);
  • Account data: hashed password, session identifiers, email verification status, and accepted licence versions;
  • Usage data: pages visited, features used, IP address, user agent, and approximate geolocation derived from IP;
  • Correspondence: the content of emails, contact-form submissions, and support tickets you send to us.

2. How we collect it

We collect personal information directly from you when you create an account, place an order, subscribe to our newsletter, submit a form, or correspond with us. We may also collect information automatically through cookies and server logs when you visit the Site, and from third-party identity providers (such as Google) if you choose to sign in through them.

3. Why we collect it

We use personal information to:

  • process orders and deliver purchased materials;
  • authenticate your account and protect it from unauthorised access;
  • watermark each download with buyer details so that any leaked material can be traced back to the licensed RTO;
  • issue tax invoices, keep financial records, and meet our obligations under Australian tax law;
  • respond to questions, provide product support, and process refund or rectification requests;
  • send transactional emails (order confirmations, licence copies, password resets) and, where you have opted in, newsletters;
  • improve the Site and our products, including aggregate analytics on how features are used; and
  • comply with our legal obligations and respond to lawful requests from regulators and law enforcement.

4. Who we share it with

We disclose personal information only as necessary to operate the Site and deliver our products. Our current service providers include:

  • Stripe Payments Australia Pty Ltd - payment processing and fraud screening;
  • Resend Inc. - transactional email delivery (order confirmations, licence copies, password resets);
  • Cloudflare, Inc. - hosting, content delivery, rate limiting, and DDoS protection. Our primary data-plane region is configured for Australia where supported, with global edge caching for non-sensitive assets;
  • Google LLC - only when you choose to sign in with Google OAuth, in which case we receive your name, email, and Google account identifier;
  • Sentry - error monitoring, where enabled. Sentry receives request metadata and stack traces; we avoid sending personal data in error payloads.

We do not sell personal information. We may also disclose information where required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of Skillworks, our users, or the public.

5. International transfers

Some of our service providers store or process data outside Australia, including in the United States, Ireland, and other regions where Cloudflare and Stripe operate. By using the Site you consent to your personal information being handled in those jurisdictions. We take reasonable steps to ensure overseas recipients handle personal information in a manner consistent with the APPs.

6. How long we keep it

We retain personal information only as long as we have a lawful basis to do so:

  • Order and tax records: seven (7) years, as required by Australian tax law;
  • Account data: while your account is active, and for a reasonable period afterwards to support reinstatement and dispute resolution;
  • Audit logs: the download and administrative audit trail is retained indefinitely for security and investigation purposes;
  • Marketing data: until you unsubscribe, and for a short window afterwards to honour the unsubscribe.

7. How we protect it

We take reasonable technical and organisational measures to protect personal information, including:

  • encryption in transit via HTTPS;
  • passwords stored only as bcrypt hashes - plaintext passwords are never stored or logged;
  • least-privilege access to production systems, with administrative actions written to an immutable audit log;
  • session cookies set HttpOnly, Secure, and SameSite=Lax;
  • regular review of dependencies, platform configuration, and access controls.

No system is perfectly secure. If a data breach likely to cause serious harm occurs, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme.

8. Cookies

We use a small number of strictly necessary cookies to operate the Site, including a session cookie to keep you logged in and a cart identifier to remember items before checkout. We do not currently set advertising or cross-site tracking cookies. You can clear cookies through your browser settings, but doing so may prevent parts of the Site from working.

9. Your rights

Under the APPs you have the right to:

  • request access to the personal information we hold about you;
  • request correction of information that is inaccurate, out of date, incomplete, irrelevant, or misleading;
  • withdraw your consent to marketing communications at any time, using the unsubscribe link in any email or by contacting us; and
  • lodge a complaint about our handling of your personal information.

To exercise these rights, email privacy@skillworksaustralia.com.au. We will acknowledge your request within five (5) business days and respond substantively within thirty (30) days.

10. Making a complaint

If you are not satisfied with how we have handled your personal information, you can refer your complaint to the Office of the Australian Information Commissioner:

Office of the Australian Information Commissioner
GPO Box 5218, Sydney NSW 2001
1300 363 992 · oaic.gov.au

11. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top of the page will change and, where the update is material, we will notify registered users by email.

12. Contact

Questions or concerns about your privacy can be sent to:

Privacy Officer, Skillworks Australia Pty Ltd
Level 17, 31 Queen Street
Melbourne VIC 3000
privacy@skillworksaustralia.com.au

Questions? Contact legal@skillworksaustralia.com.au.