Privacy Policy

Current as at: March 22, 2025

At trainSME, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our platform. This policy applies to all users, including Learning Providers and SME Businesses, and complies with applicable laws, including Australia’s Privacy Act 1988.

1. Information We Collect

We collect the following types of information to provide and improve our services:

  • Personal Information: Name, email address, and other details you provide during registration or account setup.
  • Usage Data: Information about your interactions with the platform, such as course progress, activity logs, and enrollment details. This data may be accessed by: (a) platform administrators, (b) the individual the data pertains to, or (c) authorized representatives of the SME or Learning Provider managing the account.
  • Payment Information: Billing details processed securely through our payment provider, Stripe, for subscriptions or purchases.
  • Technical Data: IP address, browser type, and device information collected automatically when you use our platform.

2. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our platform’s functionality and user experience.
  • Communicate with you about updates, support, or account-related matters.
  • Facilitate payments and subscriptions through Stripe.
  • Ensure compliance with legal, security, and regulatory requirements.
  • Analyze usage patterns to enhance our services (e.g., through aggregated, anonymized data).

We do not sell or share your personal data with third parties for marketing purposes. Data is only shared as described in this policy (e.g., with service providers like Stripe).

3. Data Security

We implement industry-standard security measures, including encryption and secure servers, to protect your data from unauthorized access, loss, or misuse. However, no system is completely secure, and we cannot guarantee absolute security.

4. Third-Party Services

We use third-party services to support our platform, including:

  • Heroku: For hosting our platform. Heroku may process data as part of providing hosting services, in accordance with its Privacy Policy.
  • Amazon S3: For storing assets such as files and media uploaded to the platform. Amazon S3 processes data according to its Privacy Policy.
  • Stripe: For secure payment processing. Stripe collects and processes payment data according to its Privacy Policy.
  • Analytics Tools: We may use tools like Google Analytics to analyze usage patterns. These tools collect data according to their respective privacy policies.

5. Your Rights & Choices

You have the right to:

  • Access, correct, or delete your personal data.
  • Opt out of non-essential communications (e.g., promotional emails).
  • Request a copy of your data in a portable format (where applicable).

To exercise these rights, contact us at admin@headstartsystems.com. We will respond to your request within 30 days, in accordance with applicable laws.

6. Children’s Privacy

trainSME is not intended for use by children under 13. We do not knowingly collect personal data from children under 13. If we become aware of such data, we will take steps to delete it. If you believe we have collected data from a child under 13, please contact us.

7. Policy Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Current as at” date. For significant changes, we will notify users via email or a notice on the platform.

8. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at admin@headstartsystems.com.