Privacy Policy

1. Overview

CARSI Pty Ltd (“CARSI”, “we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, password, IICRC certification number (optional)
• Payment information: processed securely by Stripe (we do not store card details)
• Course progress: quiz answers, completion status, certificates earned
• Communications: support requests, feedback, survey responses

2.2 Information Collected Automatically

• Device information: browser type, operating system, device identifiers
• Usage data: pages visited, time spent on courses, features used
• Log data: IP address, access times, error logs
• Cookies and similar technologies (see Section 7)

3. How We Use Your Information

We use your personal information to:

• Provide and maintain the Service
• Process payments and manage subscriptions
• Track and report IICRC Continuing Education Credits
• Send important notifications about your account and courses
• Respond to your enquiries and support requests
• Improve our Service based on usage patterns
• Comply with legal obligations

4. Disclosure of Information

We may share your personal information with:

• IICRC: We report CEC completions (name, certification number, course completed, date) to IICRC for credit recording purposes.
• Service providers: Payment processors (Stripe), hosting providers (Vercel, Fly.io), email services, and analytics tools.
• Legal requirements: When required by law, court order, or government authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal information to third parties for marketing purposes.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing (bcrypt)
• Access controls and authentication
• Regular security assessments

No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may retain certain information after account closure for:

• Compliance with legal obligations (e.g., tax records — 7 years)
• Resolution of disputes
• Enforcement of agreements
• Legitimate business purposes (e.g., fraud prevention)

CEC completion records are retained indefinitely as they form part of your professional certification history.

7. Cookies

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your preferences (e.g., theme settings)
• Understand how you use our Service
• Improve performance and functionality

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Service.

8. Your Rights

Under Australian privacy law, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information (subject to legal retention requirements).
• Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

To exercise these rights, contact us at [email protected].

9. International Transfers

Your information may be transferred to and processed in countries outside Australia, including the United States (for cloud hosting and payment processing). We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law.

10. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Service or by email. Your continued use of the Service after changes are posted constitutes acceptance of the updated Policy.

12. Contact Us

For privacy-related enquiries or to exercise your rights, contact our Privacy Officer: