This Privacy Policy applies to the EPADAAH website, as well as any services, products, courses and programs (or other output) created and/or provided by EPADAAH Pty Ltd  ('EPADAAH') (ABN 477 019 119 62) are set out in these Privacy Policy of use (‘Terms’).

This Privacy Policy, together with EPADAAH’s Terms of Use (Organisational Terms of Use) and EPADAAH's Purchase and Refund Policy (Organisational Purchase and Refund Policy), constitute the agreement between you and EPADAAH.

EPADAAH’s Commitment to Your Privacy
EPADAAH respects your privacy and is committed to handling personal information responsibly, transparently and securely.

This Privacy Policy explains how EPADAAH collects, holds, uses, discloses and protects personal information and how you can access or correct information we hold about you.

This Privacy Policy applies to information collected through:

• The EPADAAH website

• Purchases

• Digital products and/or services

• Programs and services

• Enquiries and communications

• Email and other electronic communications

• Any other interaction(s) with EPADAAH

Australian Privacy Law
EPADAAH will handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles, where those laws apply to EPADAAH.

Information We Collect
The type and amount of personal information EPADAAH collects depends on how you interact with us. However, we aim to keep this to the absolute minimum of what is required.

Website Visitors
When you visit EPADAAH’s website, we may collect information such as:

• IP address

• Browser and device information

• Operating system

• Pages visited

• Approximate location information derived from technical information

• Dates and times of visits

• Referring websites

• Interaction and usage information; and

• Other technical information generated through use of the website

Cookies and Similar Technologies
EPADAAH may use cookies and similar technologies to:

• Operate the website

• Remember preferences

• Maintain account functionality

• Understand website usage

• Improve website performance

• Analyse traffic

• Improve our services, and

• Support relevant communications or marketing where permitted

Where EPADAAH uses third-party analytics, advertising or other technologies, those providers may collect information in accordance with their own privacy policies.

Newsletter
If you register for the EPADAAH newsletter, we may collect and hold information such as:

• Your name

• Email address

Purchases
When you purchase e.g. a product or service from EPADAAH, we may collect information necessary to process and administer the transaction.

This may include:

• Legal entity name and ABN

• Billing and postal address

• Email address

• Telephone number

• Products or services purchased

• Order information

• Names and email addresses of participants 

• Transaction information

• Payment status

• Invoices and receipts, and

• Communications concerning your purchase

Payment-card information is collected and processed by a third-party payment provider rather than being stored directly by EPADAAH.

Why We Collect, Hold, Use and Disclose Personal Information
EPADAAH may collect, hold, use and disclose personal information for purposes including:

• Providing products and services

• Processing purchases and payments

• Administering customer accounts

• Providing customer support

• Responding to enquiries

• Providing access to purchased resources

• Communicating with customers

• Improving our products and service

• Administering contracts

• Conducting program evaluation

• Understanding website usage

• Maintaining website security

• Preventing fraud or misuse

• Complying with legal obligations

• Protecting our rights and property

• Maintaining appropriate business records, and

• Other purposes reasonably necessary for our business activities.

Where required by law, we will seek your consent before using or disclosing personal information for a particular purpose.

Direct Marketing
EPADAAH may use personal information to send you information concerning our products, services, courses and programs, or other activities where permitted by law. We will only send marketing information to you if you have provided your prior consent.

You can opt out of receiving marketing communications at any time by:

• Using the unsubscribe facility included in the communication, or

• Contacting us directly.

We will process opt-out requests within a reasonable period.

Opting out of marketing communications will not necessarily stop essential service communications, e.g. purchase confirmations, account notifications, security messages or important information about e.g, a product or service you have purchased.

Disclosure to Third Parties
EPADAAH may need to disclose personal information to third parties where reasonably necessary for our functions or activities or where otherwise permitted or required by law.

These third parties may include:

• Payment processors

• Website hosting provider

• Cloud storage providers

• Email and communications providers

• Technology and software providers

• Analytics providers

• Professional advisers

• Accountants

• Lawyers

• Insurers

• IT and cybersecurity providers

We seek to use service providers that are appropriate the services they provide and expect them to handle information consistently with applicable contractual and legal requirements.

De-Identified and Aggregated Information
EPADAAH may use information in de-identified or aggregated form for purposes such as:

• Evaluating and improving upon courses and/or programs etc

• Understanding needs

• Improving resources

• Conducting research or analysis

• Preparing reports

• Understanding community needs

Where information has been appropriately de-identified, it may no longer constitute personal information under applicable privacy law. EPADAAH will take reasonable steps to ensure that information presented as de-identified cannot reasonably be used to identify an individual.

Data Storage and Security
EPADAAH takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

Depending on the information and systems involved, security measures may include:

• Access controls

• Password protection

• Multi-factor authentication where available

• Secure systems and platforms

• Encryption where appropriate

• Staff and contractor access controls

• System monitoring

• Secure backups, and

• Procedures for responding to suspected privacy incidents.

No method of transmitting or storing information electronically is completely secure. Accordingly, while we take reasonable steps to protect personal information, we cannot guarantee absolute security.

Use of AI for data processing by EPADAAH
EPADAAH does not use AI or automated processing for handing of personal information.

Selling of personal information
EPADAAH explicitly does not sell personal information.

Children and Privacy
EPADAAH’s products and services are only available to those over 18 years of age.

Retention and Destruction
EPADAAH retains personal information only for as long as reasonably necessary for the purposes for which it was collected, for legitimate business purposes, or where retention is required or permitted by law.

The period for which information is retained may depend on:

• The nature of the information

• The purpose for which it was collected

• Contractual requirements

• Accounting and tax requirements

• Legal obligations

• Dispute resolution

• Security requirements, and

• Other legitimate business considerations.

When personal information is no longer required, EPADAAH will take reasonable steps to securely destroy, delete or de-identify it, subject to applicable retention obligations.

Overseas Disclosure and Service Providers
EPADAAH may use technology, cloud, payment, communications, analytics or other service providers that operate in Australia or overseas. As a result, personal information may be stored, processed or accessed outside Australia depending on the providers and technologies used by EPADAAH.

We seek to use service providers that are appropriate the services they provide and expect them to handle information consistently with applicable contractual and legal requirements.

Third-Party Websites
The EPADAAH website, services, products, courses and programs (or other output) may contain links to external websites. Once you leave the EPADAAH website, the privacy practices of the external website will apply. EPADAAH is not responsible for the privacy practices, security or content of third-party websites. You should review the relevant third party's privacy policy before providing personal information.

Data Breaches
EPADAAH maintains procedures for responding to suspected or actual data breaches involving personal information. Where a data breach occurs that is subject to the Notifiable Data Breaches scheme, EPADAAH will assess the incident and take any notification steps required by applicable law. Where required, affected individuals and the OAIC will be notified. EPADAAH will also take reasonable steps to contain, investigate and address privacy or security incidents.

Use of Information for Security and Fraud Prevention
EPADAAH may use personal information and technical information to:

• Protect website and account security

• Detect and prevent fraud

• Investigate suspicious activity

• Protect users and EPADAAH

• Enforce our terms

• Investigate misuse, and

• Comply with legal obligations

Where required by law, we will handle personal information used for these purposes in accordance with applicable privacy requirements. EPADAAH does not use automated decision making practices for handling of personal data.

Correction of Personal Information
We aim to ensure that personal information we hold is accurate, complete and up to date. If you believe information we hold about you is inaccurate, incomplete, misleading or out of date, you can request that we correct it via using our general contact form. We will take reasonable steps to correct information where appropriate.

Access to Your Personal Information
You may request access to personal information EPADAAH holds about you. To make an access request, please contact us using our general contact form. We may ask you to provide sufficient information to verify your identity and locate the relevant information. We will generally respond to an access request within a reasonable period. In some circumstances, access may be refused or limited where permitted or required by law. If we refuse access, we will generally explain the reason for the refusal and any available avenues for review or complaint.

Privacy Complaints
If you believe EPADAAH has handled your personal information in a way that breaches applicable privacy laws or this Privacy Policy, you may make a privacy complaint. Please contact us directly regard via our general contact form so that we can resolve your concern.

Review
EPADAAH will periodically review and update this Privacy Policy to ensure that it remains accurate and reflects our actual information handling practices.

Updated: November 2026