Privacy Policy

Introduction and Scope
This Privacy Policy governs the collection, storage, handling, use, and disclosure of personal information by the operators of this digital educational platform (“we”, “us”, or “our”). We are committed to safeguarding the privacy of our website visitors, registered students, and customers in compliance with the Australian Privacy Principles (APPs) contained within the Privacy Act 1988 (Cth) and, where applicable, the Spam Act 2003 (Cth).

This Policy applies to all personal information collected via our website, course enrolment portals, learning management infrastructure, customer service communications, and digital marketing activities.

By accessing our website, purchasing our courses or study bundles, or creating a student account, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

The Information We Collect
To provision student accounts, deliver course content, administer mock assessments, process payments, and provide customer support, we collect several categories of personal data.

A. Information You Provide Directly
Identity and Contact Information: Your first and last name, email address, phone number, and physical billing address provided during checkout or account registration.

Account Credentials: Username, encrypted password hashes, and user ID assigned within our learning platform.

Customer Support Inquiries: Information provided when you contact our administrative or technical support team, including support tickets, feedback, and email correspondence.

B. Educational and Platform Progress Data
Course Progression: Lesson completion records, time spent per module, login timestamps, and interactive module interaction data.

Assessment Results: Multiple-choice quiz attempts, raw scores, diagnostic Section A and Section B performance metrics, completion certificates, and test timestamps.

C. Financial and Transactional Information
Transaction Records: Records of purchases, order numbers, transaction dates, amounts billed, currency, and bundle selections.

Payment Card Security: All payment card details (credit card number, expiration date, CVV) are collected and processed directly by our third-party merchant processor (Stripe) via secure, encrypted tokenisation. We do not store, process, or have access to your full credit card numbers or banking credentials on our local servers.

D. Automatically Collected Device and Analytical Data
Technical Information: IP address, browser type and version, operating system, screen resolution, referring website URLs, and access timestamps.

Tracking Technologies: Cookies, tracking pixels, and session tags used to maintain your logged-in session, track cart progression, prevent concurrent unauthorised account sharing, and evaluate site performance.

How We Collect Personal Information
We collect personal information through lawful and fair means, primarily directly from you when you:

Submit an inquiry via our contact form or support email;

Interact with our promotional advertisements, opt-in forms, or social channels.

We may also automatically collect technical log data and cookie identifiers as you browse our web pages and interactive learning player.

Purpose of Data Collection and Processing
We collect, hold, and use your personal information solely for legitimate operational, educational, and legal purposes, including:

Service Delivery: Provisioning immediate access to digital course materials, verifying user identity, saving course progression, and compiling practice quiz results.

Financial Transactions: Processing payments, managing billing records, issuing tax invoices, and addressing chargeback investigations or billing disputes.

Account Security and Anti-Fraud: Monitoring concurrent session logins, geographic IP anomalies, and credential misuse to protect our proprietary intellectual property and prevent unauthorised platform sharing.

Customer Support: Diagnosing technical faults, answering curriculum questions, and resolving account access issues.

Regulatory and Tax Compliance: Maintaining required business, corporate, and taxation records under Australian Commonwealth and State law.

Marketing Communications: Delivering service updates, course announcements, or promotional campaigns where you have provided consent, with opt-out mechanisms provided on every promotional message in accordance with the Spam Act 2003.

Disclosure to Third-Party Service Providers
We do not sell, rent, trade, or commercialise your personal data to any external parties under any circumstances.

We disclose personal information strictly on a need-to-know basis to trusted third-party service providers that assist us in operating our business and delivering our educational services:

Merchant and Financial Providers: Stripe, Inc., for PCI-DSS compliant credit card processing, fraud prevention, and transaction verification.

Hosting and Infrastructure Providers: Cloud web hosts, database providers, and content delivery networks (CDNs) that house our WordPress and Masteriyo LMS installation.

Transactional Email Systems: Third-party transactional email delivery engines (such as SMTP relay services) used to reliably send order confirmations, password reset links, and critical support updates.

Analytics and Performance Tools: Web analytics platforms (such as Google Analytics) using anonymised or pseudonymous traffic data to evaluate site functionality and user journey flows.

Legal and Regulatory Authorities: Where mandated by law, court order, subpoena, or lawful warrant, or where reasonably necessary to enforce our Terms of Sale, defend against legal claims, or investigate suspected fraud or intellectual property theft.

Independence from Government and Licensing Authorities
Our service operates as an independent private preparatory resource. We do not transmit, report, or share your identity, quiz results, study hours, or logbook completion data with Transport for NSW, Service NSW, Maritime Safety NSW, the NSW Police Force, or any government department or registered training organisation.

Your progress on our site remains strictly confidential between you and this platform, unless disclosure is formally ordered by an Australian court or law enforcement agency possessing legal jurisdiction.

Data Storage, Retention, and Security Measures
We implement industry-standard technical, organisational, and administrative safeguards to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure:

Data Encryption: All data transmitted between your browser and our platform is encrypted using 256-bit Secure Sockets Layer (SSL) / Transport Layer Security (TLS) certificates.

Access Controls: Administrative access to our database and user records is strictly restricted to authorised personnel via multi-factor authentication.

Retention Timeframes: We retain your account information, course completion records, and test histories for the duration of your active subscription or access licence (typically twelve months from enrolment). Financial transaction records, invoices, and audit logs are retained for seven (7) years to satisfy mandatory Australian tax law requirements under the Australian Taxation Office (ATO).

Secure Destruction: When personal data is no longer required for its original purpose or regulatory recordkeeping, it is irreversibly de-identified or securely purged from our production databases.

Cookies, Tracking Pixels, and Analytics
Our platform uses session and persistent cookies to ensure proper website operation:

You can disable or block cookies through your individual browser settings; however, disabling essential session cookies will prevent the Masteriyo LMS lesson player and checkout system from functioning correctly.

Privacy Regarding Minors (Young Adult Licences)
Under NSW maritime law, individuals aged between twelve (12) and fifteen (15) are eligible to obtain a Young Adult Boat Licence. Consequently, our study platform may be accessed by minors.

Where a student is under the age of eighteen (18), we collect only the personal information strictly necessary to provision their course profile, track lesson progress, and record quiz results.

Enrolment and card payment must be executed by, or with the express consent and supervision of, a parent or legal guardian.

Parents or legal guardians maintain the right to review, update, or request the deletion of their child’s personal information by submitting a formal request to our privacy team.

Direct Marketing and Your Right to Opt Out
We may occasionally send you relevant updates regarding maritime rule changes, new study modules, or licence prep discounts. Every marketing communication we send via email includes an automated, functional Unsubscribe link at the bottom of the message.

Opting out of promotional messages does not unsubscribe you from critical transactional communications, such as payment receipts, password reset notifications, or critical platform maintenance alerts.

Your Rights: Access, Correction, and Data Control
Under Australian Privacy Principles 12 and 13, you have clear statutory rights regarding the personal information we hold about you:

Right of Access: You may request a copy of the personal information we hold about you in our systems.

Right of Correction: If you believe any personal detail (such as your name or email address) is inaccurate, out of date, incomplete, or misleading, you may update it directly in your student profile or request that we update it for you.

Right to Account Deletion: Subject to mandatory legal and financial retention requirements, you may request the full closure and deletion of your student account and progress history.

Requests to access, correct, or delete information must be submitted in writing to our designated Privacy Officer using the contact details in Section 13 below. We will respond to all verified requests within thirty (30) calendar days.

Updates and Changes to This Policy
We review and update this Privacy Policy periodically to reflect enhancements to our technical stack, changes to maritime study materials, updates to merchant gateways, or revisions to Australian privacy legislation. Any changes will be posted on this page with an updated “Last Updated” revision date. Continued use of the platform after the publication of revisions constitutes acceptance of the updated terms.