Privacy policy

Information about user privacy, data collection, and security practices.

Privacy policy introduction

This privacy policy describes how the Company collects, uses, and protects personal information of users on this website. The policy explains user rights and the procedures in place to ensure data security and compliance.

By using the website, users consent to the collection and processing of personal data as described. Users are encouraged to review this policy periodically for updates or changes.

Personal data collected

The Company collects personal data that users voluntarily provide, as well as data gathered automatically through site interactions. Data is collected for legitimate business and operational purposes.

Directly provided information

  • Name and contact details submitted through web forms.
  • Information provided during registration or account creation.
  • Details submitted for newsletters or updates.
  • Data shared during event registrations or surveys.
  • Communications made directly to the Company.

Automatically collected information

  • Browser type and version used for site access.
  • Device information, such as operating system and hardware model.
  • IP address and approximate geographic location for security and analytics.
  • Date and time of site visits, including session duration.
  • Referral source, such as search engines or external links.

How data is used

Collected data is used to operate the website, communicate with users, maintain security, and comply with legal requirements. Data may also be used for analytics and service improvements.

  • Managing and improving website performance.
  • Providing user support and responding to requests.
  • Personalising user experience and settings.
  • Conducting internal analytics and research.
  • Ensuring site security and preventing misuse.
  • Complying with legal or regulatory obligations.
  • Notifying users of important updates or policy changes.

Data protection commitment: The Company is committed to protecting user privacy and handling personal information in accordance with applicable laws and industry standards. Measures are in place to safeguard data against unauthorised access and misuse.

Data sharing and disclosure

Personal data may be shared with trusted service providers for operational, technical, or analytical purposes. All third-party processors are required to protect data in accordance with relevant privacy standards.

Service providers and processors

Third-party service providers may assist with website hosting, analytics, communication, or technical support. Providers are contractually required to maintain data confidentiality and comply with privacy standards.

Legal and regulatory compliance

Data may be processed or retained to comply with legal, regulatory, or governmental obligations as required by applicable law.

Anonymous statistics

Anonymous statistics are collected to improve site performance and understand aggregate user trends. These statistics do not identify individual users or contain personal data.

User data rights

Users have rights regarding their personal data, including access, correction, deletion, restriction, objection, and portability. These rights may be subject to certain legal limitations or conditions.

  • Users may request access to their personal data held by the Company at any time.
  • Users may request correction of inaccurate or incomplete personal data.
  • Users may request the deletion of their personal data, subject to legal and operational limitations.
  • Users have the right to request a copy of their personal data in a portable, commonly used format.
  • Users may object to certain types of personal data processing for legitimate reasons.
  • Users may request that processing of their personal data be restricted in certain circumstances.

To exercise any data rights or submit a privacy request, users should contact the Company using the methods listed below. Verification of identity may be required before fulfilling requests.

Data security

The Company uses technical and organisational measures to safeguard personal data, including encryption, access controls, and staff training. Efforts are made to regularly review and enhance data protection measures.

Technical data protection measures

  • Encryption of data in transit and at rest.
  • Firewalls and network security monitoring tools.
  • Regular software updates and security patching.
  • Two-factor authentication for system access.

Organisational data protection measures

  • Regular privacy training for employees and contractors.
  • Defined roles and responsibilities for data protection.
  • Internal audits and policy reviews for compliance.
  • Controlled access to sensitive personal information.

Data retention period

Personal data is retained only for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, or resolve disputes.

  • Account-related information includes usernames, account preferences, and authentication details.
  • Learning data includes assessment results, progress tracking, and engagement records.
  • Data may include email content, support requests, and feedback submitted by users.
  • Financial data may include transaction records, payment details, and billing information where applicable.
  • Marketing data covers preferences for receiving updates and participation in promotional activities.

Retention periods depend on the type and purpose of data processed.

International data transfers

Where personal data is transferred outside Australia, safeguards are implemented to ensure the same level of protection required by Australian privacy law. Cross-border data transfers are minimised and subject to contractual protections.

  • Cross-border data transfers minimised and monitored.
  • Standard contractual clauses for international transfers.
  • Third parties required to meet equivalent privacy standards.
  • User consent obtained where required for transfers.

Cookies and tracking technologies

The website uses cookies to enhance user experience, analyse site usage, and provide relevant content. Cookies may store user preferences, session details, and anonymised analytical data.

Types of cookies used

  • Essential cookies enable basic site functionality, including secure login and navigation.
  • Performance cookies monitor site performance, usage, and technical issues.
  • Personalisation cookies remember user settings for tailored site experiences.
  • Functionality cookies store user preferences to enhance site usability.

Users can manage cookie preferences at any time through their browser settings.

Policy updates and changes

The Company may update this privacy policy to reflect changes in practices, legal requirements, or operational needs. Users are encouraged to review the policy regularly for the latest information.

  • Material changes to privacy practices or data processing.
  • Introduction of new purposes for personal data use.
  • Updates to contact details for privacy inquiries.
  • Changes in data sharing with third parties.

Significant updates will be communicated directly or highlighted on the website.

Contact for privacy matters

For any privacy-related questions or to exercise your data rights, please contact the Company using the details provided below. The Company aims to respond promptly to all privacy inquiries.

Gravionsel

Tower 2, 201 Sussex Street, Sydney, NSW 2000, Australia

Phone: +61.7.5381.2249

Email: content@gravionsel.com

We use cookies to improve your site experience, analyse traffic, and support core functionality. By continuing to use this website, you consent to our use of cookies as described in our Cookie Policy.