Privacy Policy

Certe.net.au (“Certe”, “we”, “our”, “us”) respects your privacy and is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you use our subscription services.

1. Information We Collect

We may collect personal information (“PII”) including but not limited to:

  • Name, email address, contact details, and organisation
  • Billing and payment information
  • User account information and system usage data
  • Any information you upload or provide when using our platform

2. How We Use Your Information

We use your personal information to:

  • Provide you with access to the Certe.net.au platform and services
  • Manage subscriptions, payments, and support requests
  • Improve and develop our services
  • Meet our legal and regulatory obligations

We will not sell, rent, or trade your personal information to third parties.

3. Data Hosting and Security

  • Australian Hosting: All personal information collected is hosted and stored within an Australian certified hosting framework. Our infrastructure is hosted within the Amazon Web Services (AWS) Sydney region and Vultr’s Sydney data centre, which is certified for ISO 27001 (Information Security Management) and SOC 2 Type 2 compliance.
  • No Automatic Overseas Transfer: Your personal information will not be transferred, stored, or accessed outside of Australia unless you provide your express and informed consent or unless required by law.
  • Security Measures: We employ industry-standard technical, organisational, and security safeguards to protect your data from unauthorised access, misuse, loss, or disclosure.

4. Cross-Border Disclosure & Consent

  • Explicit Consent Required: In accordance with the Australian Privacy Principles (APP 8), we will not transfer or disclose your personal information outside Australia without first obtaining your explicit, written consent.
  • Informed Consent: Where overseas disclosure is proposed, we will clearly inform you of:
    • The reason for the transfer;
    • The countries in which your information may be stored or accessed;
    • The risks associated with cross-border disclosure;
    • Your right to decline consent.
  • Withholding Consent: If you do not consent, your personal information will remain within Australia and will not be transferred overseas.
  • Third-Party Safeguards: Where you do consent, we will take all reasonable steps to ensure that overseas recipients comply with privacy protections equivalent to the Australian Privacy Principles.

5. Disclosure of Information

We may disclose your information only in the following limited circumstances:

  • To Australian-based service providers or partners necessary to deliver our services (bound by strict confidentiality and data handling standards);
  • Where required by law, court order, or regulatory authority;
  • Where you have expressly consented to such disclosure (including cross-border disclosure, as detailed above).

6. Access and Correction

You have the right to access and request correction of the personal information we hold about you. Requests should be made in writing to the contact details below.

7. Your Rights

You may:

  • Request access or corrections to your personal information;
  • Withdraw consent to certain uses of your data, including overseas transfers;
  • Lodge a complaint if you believe we have breached the Australian Privacy Principles.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be published on our website with the ‘Last Updated’ date amended.

9. Contact Us

If you have any questions, concerns, or complaints about how your personal information is handled, please contact us at:

Certe.net.au – Privacy Officer P O’Callaghan
Email: support@certe.net.au
Address: P.O. Box 1191, Sanctuary Cove Queensland 4212 Australia