Privacy Policy

1. What we collect

We collect only what we need to run the programme and issue certificates:

• ·Account details — your name, email address and password (stored only as a secure hash by our authentication provider).
• ·Professional details — licence or registration number, issuing body and jurisdiction, where you provide them.
• ·Agreement records — the version of each document you agreed to or signed, your typed name, your drawn signature image, the date and time, and your browser's user agent.
• ·Learning records — lessons completed, knowledge check scores, course progress and certificates issued.
• ·Enrolment records — your request, approval decision, referral code used, and the amount, receipt reference and date of a bank transfer.

2. What we do not collect

We do not collect card or bank account numbers — payment is made by transfer directly to the Academy's bank, and we record only the amount and reference. We do not collect information about your clients or patients, and you must not enter client or patient information anywhere on the platform.

3. Why we use it

Your information is used to:

• ·Create and secure your account and give you access to the courses you are enrolled in.
• ·Record your agreement to the terms and disclaimers, which we are required to keep as evidence.
• ·Track your progress and issue and verify Certificates of Completion.
• ·Process and confirm enrolment requests and payments.
• ·Send service messages about your account, enrolment and certificates.
• ·Understand programme use in aggregate so we can improve the material.

4. Marketing

We do not sell your information and we do not use it for third-party advertising. If we ever send programme news you can unsubscribe from any message, and service messages about your account will continue.

5. Who we share it with

We share personal information only with the service providers who host and operate the platform on our behalf — our cloud hosting, database, authentication and email delivery providers — under contracts that require them to protect it. We may also disclose information where the law requires it, or to establish or defend a legal claim.

When you use the public certificate verification page, only the certificate identifier, the learner name and the course as printed on the certificate are shown, so a third party can confirm a certificate is genuine.

6. Storage, security and location

Information is stored on managed cloud infrastructure with encryption in transit and at rest, and access is restricted to Academy administrators who need it. Some providers store or process data outside Australia; where they do, we take reasonable steps to ensure comparable protection applies.

No system is perfectly secure. If a data breach likely to cause serious harm occurs, we will notify affected learners and the Office of the Australian Information Commissioner as required.

7. How long we keep it

Account, learning and enrolment records are kept while your account is open. Signed agreement records, certificates issued and payment references are retained for at least seven years after your last activity, because they are the evidence that an agreement was made and a certificate earned. Anything we no longer need is deleted or de-identified.

8. Access, correction and complaints

You can view and correct your name and professional details in your account at any time. To request a copy of the information we hold, ask us to correct or delete it, or make a privacy complaint, contact support@compoundskinacademy.com. We respond within 30 days. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner.

9. Cookies and local storage

We use only the cookies and browser storage needed to keep you signed in, to remember a referral code between sign-up and enrolment, and to keep the site working. We do not use advertising or cross-site tracking cookies.

10. Children

The platform is intended for professionals and students aged 18 and over. We do not knowingly collect information from children.

11. Changes to this policy

Each version of this policy carries a version number, and the version you agreed to is recorded against your account. If we make a material change we will ask you to agree to the new version.