Privacy Policy
Last Updated: March 2025
At kiryostavion, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you use our financial planning education services. We're committed to transparency and giving you control over your data.
Who We Are
kiryostavion operates from Western View Dr, Albury NSW 2640, Australia, providing financial planning education services to individuals across Australia. We're bound by the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth), which governs how we handle your personal information.
When we talk about "personal information," we mean any data that identifies you or could reasonably identify you. This includes obvious things like your name and email, but also IP addresses, device identifiers, and browsing patterns on our site.
Information We Collect
We collect different types of information depending on how you interact with our services. Here's what we gather and why:
Information You Give Us Directly
- Contact details: Name, email address, phone number, and mailing address when you register for programs or contact us
- Account information: Username, password, and preferences when you create an account on our platform
- Payment data: Billing information and transaction details (processed securely through third-party payment processors)
- Program participation: Course selections, progress tracking, assignment submissions, and assessment results
- Communication records: Messages you send us, feedback forms, survey responses, and support ticket details
Information We Collect Automatically
When you visit our website or use our services, we automatically gather certain technical information:
- Device information: Browser type, operating system, device model, and unique device identifiers
- Usage data: Pages visited, time spent on pages, links clicked, and navigation patterns
- Location data: General geographic location based on IP address (we don't track precise GPS coordinates)
- Cookies and tracking: Small data files stored on your device to remember preferences and analyze site performance
Information from Third Parties
Occasionally, we receive information about you from other sources, such as:
- Social media platforms if you choose to connect your accounts
- Analytics providers who help us understand website traffic patterns
- Payment processors who confirm transaction details
- Referral partners who recommend our programs to you
How We Use Your Information
We use your personal information for specific, legitimate purposes. We don't sell your data to third parties or use it in ways you wouldn't reasonably expect.
Core Service Delivery: Most importantly, we use your information to provide the education services you've signed up for — managing your enrollment, delivering course materials, tracking your progress, and issuing certificates.
Beyond that core purpose, we use your data to:
- Communicate with you: Send course updates, respond to inquiries, share relevant educational content, and notify you about changes to our services
- Improve our offerings: Analyze how people use our platform to identify areas for improvement and develop new educational content
- Ensure security: Detect and prevent fraud, protect against security threats, and maintain the integrity of our systems
- Meet legal obligations: Comply with Australian laws, respond to legal requests, and enforce our terms of service
- Marketing communications: Send information about new programs or services (you can opt out of these anytime)
Legal Basis for Processing
Under Australian privacy law, we process your information based on:
- Your consent when you sign up for our services or opt into communications
- Contract performance to deliver the education services you've purchased
- Legitimate interests in operating and improving our business
- Legal compliance when required by Australian law
How We Share Your Information
We don't sell or rent your personal information. However, we do share data with specific third parties who help us operate our services:
Service Providers
We work with trusted companies that help us run our business. These include:
- Cloud hosting providers: Store our platform data and content securely
- Payment processors: Handle transactions safely (they don't share full card details with us)
- Email service providers: Deliver course communications and updates
- Analytics companies: Help us understand how people use our website
- Customer support tools: Manage inquiries and technical assistance
All service providers are bound by confidentiality agreements and can only use your data for the specific purposes we authorize.
Legal Requirements
We may disclose your information if required by law, court order, or government request. We'll only share what's legally necessary and will notify you when possible, unless prohibited by law.
Business Transfers
If kiryostavion merges with another company or sells assets, your information may be transferred. You'll be notified of any such change and how it affects your data.
Data Security Measures
We implement reasonable security measures to protect your information from unauthorized access, alteration, or destruction. Our security practices include:
Encryption: We use industry-standard SSL/TLS encryption for data transmission. Sensitive information is encrypted both in transit and at rest on our servers.
Access controls: Only authorized staff members can access personal information, and only when necessary for their role. We use multi-factor authentication and regular access reviews.
Regular security audits: We conduct periodic reviews of our security practices and update our systems to address emerging threats.
However, no method of transmission over the internet is completely secure. While we work hard to protect your data, we can't guarantee absolute security. You're responsible for keeping your account credentials confidential and notifying us immediately if you suspect unauthorized access.
Data Retention and Deletion
We keep your personal information only as long as necessary for the purposes outlined in this policy.
Retention Periods
Data Type | Retention Period |
---|---|
Account information | Duration of active account plus 2 years after closure |
Course enrollment records | 7 years (for certificate verification purposes) |
Payment transaction data | 7 years (required by Australian tax law) |
Marketing communications preferences | Until you unsubscribe or request deletion |
Website analytics data | 26 months from collection date |
Support ticket records | 3 years after resolution |
After these periods, we securely delete or anonymize your information. Some data may be retained longer if required by law or for legitimate business purposes like resolving disputes.
Deletion Requests
You can request deletion of your personal information at any time. We'll comply unless we have a legal obligation to retain certain data. Note that deleting your account will remove access to purchased courses and certificates.
Your Privacy Rights
Under Australian privacy law, you have several rights regarding your personal information. Here's what you can do and how to exercise these rights:
Access Your Information
You can request a copy of the personal information we hold about you. We'll provide this in a commonly used electronic format within 30 days. There's no charge for a reasonable number of requests.
Correct Your Information
If your personal information is inaccurate, outdated, or incomplete, you can ask us to correct it. You can update most information directly through your account settings, or contact us for assistance.
Opt Out of Marketing
You can unsubscribe from marketing emails anytime by clicking the unsubscribe link in any promotional email, or by adjusting your preferences in your account settings. You'll still receive essential service-related communications.
Restrict Processing
You can ask us to limit how we use your information in certain circumstances, such as while we verify data accuracy or investigate a complaint.
Data Portability
You can request that we provide your information in a structured, machine-readable format, or transfer it directly to another service provider where technically feasible.
Object to Processing
You can object to our use of your information for direct marketing or when we process data based on legitimate interests. We'll stop processing unless we have compelling legitimate grounds.
Withdraw Consent
When we process your information based on consent, you can withdraw that consent anytime. This won't affect the lawfulness of processing before withdrawal.
How to Exercise Your Rights: Email us at help@kiryostavion.com with your request. Include your full name, email address, and specific details about what you'd like us to do. We'll verify your identity before processing requests and respond within 30 days.
Cookies and Tracking Technologies
We use cookies and similar technologies to improve your experience on our website and understand how people use our services.
Types of Cookies We Use
- Essential cookies: Necessary for the website to function properly. These enable basic features like page navigation and access to secure areas. The site won't work properly without these.
- Functionality cookies: Remember your preferences and choices (like language settings or login information) to provide enhanced features.
- Analytics cookies: Help us understand how visitors use our site by collecting anonymous information about pages visited, time spent, and navigation patterns.
- Marketing cookies: Track your activity across websites to show relevant content and measure the effectiveness of our advertising campaigns.
Managing Cookies
Most browsers automatically accept cookies, but you can modify your browser settings to decline them. Be aware that disabling cookies may affect your ability to use certain features of our website. You can delete cookies already stored on your device at any time through your browser settings.
Children's Privacy
Our services are designed for adults aged 18 and over. We don't knowingly collect personal information from children under 18. If you're under 18, please don't use our services or provide any personal information to us.
If we discover we've inadvertently collected information from someone under 18, we'll delete it promptly. Parents or guardians who believe we may have information about someone under 18 should contact us immediately.
International Data Transfers
Your information is primarily stored and processed in Australia. However, some of our service providers operate servers in other countries, which means your data may be transferred outside Australia.
When we transfer data internationally, we ensure adequate protection through:
- Working only with providers in countries recognized as having adequate privacy protections
- Using standard contractual clauses approved by relevant authorities
- Ensuring service providers implement appropriate security measures
We remain responsible for personal information transferred to third parties for processing on our behalf.
Changes to This Policy
We review and update this privacy policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we'll notify you by:
- Posting the updated policy on our website with a new "Last Updated" date
- Sending an email to your registered email address
- Displaying a prominent notice on our platform
Significant changes will take effect 30 days after notification, giving you time to review them. Continued use of our services after changes take effect means you accept the updated policy.
We encourage you to review this policy regularly to stay informed about how we protect your information.
Third-Party Links and Services
Our website may contain links to third-party websites, applications, or services that we don't control. This privacy policy doesn't apply to those external sites.
We're not responsible for the privacy practices or content of third-party sites. Before providing personal information to any third party, we recommend reviewing their privacy policies. We don't endorse or make representations about third-party practices.
Making a Complaint
If you have concerns about how we handle your personal information, we want to hear from you. Here's how to make a complaint:
- Email us at help@kiryostavion.com with details of your concern
- We'll acknowledge your complaint within 7 days
- We'll investigate and respond within 30 days
- If you're not satisfied with our response, you can escalate to our Privacy Officer
If we can't resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Email: enquiries@oaic.gov.au
Contact Us About Privacy
If you have questions about this privacy policy or how we handle your personal information, we're here to help.
We aim to respond to all privacy inquiries within 5 business days. For urgent matters, please call us directly during business hours (Monday to Friday, 9am to 5pm AEST).