Privacy Policy

What Information We Collect

When you use our services or engage with our educational content, we gather certain details to provide you with a better experience. Here's what that includes:

Information You Provide Directly

• Contact details: Your name, email address, phone number, and postal address when you sign up or contact us
• Account information: Username, password, and preferences you set up in your profile
• Financial data: Budget information and financial records you upload for analysis purposes
• Communication records: Messages you send through our platform, feedback forms, or customer support interactions
• Learning activity: Progress through educational modules, quiz responses, and completion records

Information We Collect Automatically

When you visit our website or use our platform, we automatically receive some technical details:

• Device information like IP address, browser type, and operating system
• Usage patterns including pages visited, time spent, and click activity
• Referral sources that show how you found us
• Session data and cookies that help the platform function properly

How We Use Your Information

We don't collect information just to have it. Everything we gather serves a specific purpose in delivering our services and improving your experience.

• Service delivery: Processing your budget data, generating deviation reports, and providing personalized insights
• Account management: Maintaining your profile, managing subscriptions, and handling authentication
• Educational support: Tracking learning progress, recommending relevant content, and issuing completion certificates
• Communication: Sending service updates, responding to inquiries, and sharing relevant educational resources
• Platform improvement: Analyzing usage patterns to enhance features and user experience
• Security: Detecting fraud, preventing unauthorized access, and protecting platform integrity
• Compliance: Meeting legal obligations and responding to lawful requests from authorities

Data Storage and Security

Your information is stored on secure servers located within Australia. We use industry-standard encryption and access controls to protect your data from unauthorized access, alteration, or disclosure.

Security Measures We've Implemented

• SSL/TLS encryption for all data transmission
• Encrypted storage for sensitive financial information
• Regular security audits and vulnerability assessments
• Restricted employee access based on job requirements
• Multi-factor authentication for administrative accounts
• Regular backups stored in separate secure locations

That said, no system is completely immune to security risks. While we take reasonable precautions, we can't guarantee absolute security. If you notice anything suspicious with your account, let us know immediately.

Who We Share Information With

We don't sell your personal information. Period. But we do work with certain trusted partners to deliver our services effectively.

Service Providers

We share information with companies that help us operate the platform:

• Cloud hosting providers for data storage and server management
• Email service providers for sending communications
• Payment processors for handling subscription transactions
• Analytics tools to understand platform usage
• Customer support software to manage inquiries efficiently

These providers are contractually obligated to protect your information and can only use it for the specific services they provide to us.

Legal Requirements

Sometimes we're legally required to share information with government authorities or regulatory bodies. This might happen if there's a valid subpoena, court order, or investigation into suspected illegal activity. We'll notify you about such requests unless prohibited by law.

Business Transfers

If kirvalentoph is acquired by or merges with another company, your information would likely be transferred as part of that transaction. We'd notify you before this happens and explain any changes to how your data is handled.

Your Rights Under Australian Privacy Law

The Privacy Act gives you several rights regarding your personal information. Here's what you can do and how to exercise these rights.

Access Your Information

You can request a copy of the personal information we hold about you. We'll provide this within 30 days of your request, though complex requests might take a bit longer. There's generally no charge for this, but we might apply a reasonable fee if requests are excessive or repetitive.

Correct Inaccurate Information

If details we have are wrong or outdated, you can ask us to correct them. You can update most information directly through your account settings. For other corrections, contact our privacy team and we'll update records within 30 days.

Delete Your Data

You can request deletion of your personal information, subject to certain exceptions. We might need to keep some records for legal compliance, dispute resolution, or legitimate business purposes. When you request deletion:

• We'll delete your account and associated personal data within 60 days
• Backups containing your data will be purged during the next scheduled backup cycle
• Some anonymized usage data might be retained for statistical purposes
• Financial records may be kept for seven years to comply with tax legislation

Object to Processing

If you believe we're processing your information inappropriately, you can object. We'll review your concerns and either stop the processing or explain why we need to continue.

Data Portability

Want to take your data elsewhere? You can request a copy of your information in a structured, commonly used format. This makes it easier to transfer to another service provider if you choose.

How Long We Keep Your Information

We don't keep information longer than necessary. Retention periods vary based on the type of data and legal requirements:

• Active account data: Retained while your account remains active and for 12 months after closure
• Financial records: Kept for seven years to comply with Australian tax law
• Communication records: Maintained for three years or until the matter is resolved
• Learning records: Stored for five years to support credential verification
• Marketing preferences: Retained until you unsubscribe or request deletion
• Server logs: Automatically deleted after 90 days unless needed for security investigations

After these periods, we securely delete or anonymize the information so it can no longer identify you.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to make things work properly and improve your experience. Here's what we use and why:

Essential Cookies

These are necessary for basic platform functionality. They handle things like keeping you logged in, remembering your preferences, and processing transactions. You can't opt out of these because the platform won't work without them.

Analytics Cookies

We use these to understand how people interact with our platform. This helps us identify confusing features, popular content, and areas for improvement. The data is aggregated and doesn't personally identify you.

Managing Cookie Preferences

You can control cookie settings through your browser. Keep in mind that blocking certain cookies might affect how the platform works. Most browsers allow you to refuse cookies entirely, delete existing ones, or get notified before they're stored.

International Data Transfers

Your data is primarily stored and processed within Australia. Occasionally, information might be transferred to service providers located overseas (such as cloud infrastructure providers with global operations). When this happens, we ensure:

• The recipient country has adequate privacy protections recognized by Australian law
• Contractual agreements are in place requiring the provider to protect your information
• Data is encrypted during transmission and storage
• You retain all rights under Australian privacy law regardless of where data is processed

Currently, some data processing occurs through providers with servers in the United States and Singapore, both of which have frameworks recognized under Australian law.

Children's Privacy

Our services are designed for adults and businesses. We don't knowingly collect information from anyone under 18 years of age. If you're under 18, please don't register for an account or provide personal information.

If we discover that we've inadvertently collected information from someone under 18, we'll delete it promptly. Parents or guardians who believe their child has provided information to us should contact our privacy team immediately.

Changes to This Policy

We update this policy occasionally to reflect changes in our practices, legal requirements, or service offerings. When we make significant changes, we'll notify you by email and display a notice on the platform.

The "Effective Date" at the top shows when the current version came into effect. We encourage you to review this policy periodically. Continued use of our services after changes take effect means you accept the updated terms.

Previous versions of this policy are archived and available upon request if you'd like to see what changed.

Making a Complaint

If you believe we've mishandled your personal information or violated your privacy rights, we want to know about it. Here's the process:

• Contact our privacy team: Email info@kirvalentoph.com with details about your concern
• We'll acknowledge receipt: Within five business days, you'll hear from us confirming we received your complaint
• Investigation: We'll review the matter thoroughly and may contact you for additional information
• Resolution: Within 30 days, we'll provide a written response explaining our findings and any actions taken

If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC). They're the federal regulator for privacy matters in Australia.