Effective: 1 January 2026

1. Who we are

SkillComp is operated from Melbourne, Victoria, Australia. Throughout this policy, “we”, “us” and “our” refer to SkillComp; “you” and “your” refer to anyone who interacts with our platform — provider administrators, clinical educators, assessors, staff being assessed, and visitors to skillcomp.com.au.

2. What we collect

Account information (name, work email, role, employer); competency content authored by educators; assessment evidence (notes, attachments, scores) generated during runs; product telemetry (page views, errors, performance) used to improve the service; and standard server logs (IP, user agent) for security and abuse prevention.

3. How we use it

To deliver the service you signed up for; to authenticate users and enforce role-based access; to generate audit-ready evidence trails for your provider; to communicate about your account, billing and material product changes; and to comply with Australian law.

4. Lawful basis

We rely on contract performance (delivering the platform), legitimate interests (operating, securing and improving the platform), legal obligation (responding to lawful requests), and consent (for optional analytics and marketing communications).

5. Sharing

We share personal information only with sub-processors that help us run the service (hosting, email delivery, error monitoring), with your provider organisation as part of the service, and where required by law. We do not sell personal information.

6. Storage & residency

Production data is hosted in Australian cloud regions. Backups are encrypted and retained in Australia for thirty (30) days. We do not transfer clinical evidence offshore at rest.

7. Security

Encryption in transit (TLS 1.3) and at rest (AES-256). Role-based access. Full audit logs. See our /security page for the long form.

8. Your rights under the Australian Privacy Principles

You may request access to the personal information we hold about you, request correction of inaccurate information, request deletion (subject to legal retention obligations), withdraw consent for optional processing, and lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au) if you believe we have mishandled your information.

9. Retention

Account information is retained while your account is active and for up to 7 years after closure for evidence and compliance reasons. Telemetry is retained for 90 days. Server logs are retained for 30 days.

10. Children

SkillComp is not directed to anyone under 16. We do not knowingly collect information from minors.

11. Changes

If we make material changes to this policy we will notify account administrators by email and post a banner on the marketing site at least 14 days before the changes take effect.

12. Contact

Privacy questions: [email protected]. Security disclosure: [email protected].

Plain-English privacy, aligned to the Australian Privacy Act.