Privacy Policy

PointFive ("PointFive", "we", "us", "our") respects your privacy and is committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, store, disclose and protect your personal information when you visit our website, use our platform, or otherwise interact with us. By using our services, you agree to the practices described in this Policy.

1. Who we are

PointFive is an education technology business operated by [LEGAL ENTITY NAME] (ABN [ABN]), with its registered office at [REGISTERED ADDRESS].

For any privacy enquiries, you can contact our Privacy Officer at:

• Email: privacy@pointfive.com.au
• Postal: [ADDRESS]

2. What personal information we collect

We collect personal information that is reasonably necessary for our functions and activities. This includes:

Account & identity information

• Name
• Email address
• Password (stored in hashed form)
• Country and (where provided) city

Educational and usage data

• Quiz answers and responses
• Case study progress, attempts, scores, and completion data
• Learning analytics, including time spent, frequency of access, and feature usage
• Feedback, ratings, and survey responses
• User-generated content you submit to the platform

Transaction information

• Subscription tier and status
• Purchase history and refund requests
• Limited billing details (note: full payment card details are collected and stored by our payment processor, Stripe — we do not store full card numbers)

Technical information

• IP address, device identifiers, browser type and version, operating system
• Referring URLs, pages visited, session duration
• Cookie identifiers (see Section 8)

Communications

• Records of your correspondence with us, including support tickets and email exchanges

We may also collect information from third parties (for example, single sign-on providers if you choose to log in via Google or similar) and from publicly available sources where relevant.

If you provide personal information about another person, you confirm that you have their authority to do so and have informed them of this Policy.

3. How we collect personal information

We collect personal information:

• Directly from you when you register, complete a quiz, attempt a case, make a purchase, contact support, or otherwise use the platform
• Automatically through cookies, server logs, and analytics tools as you navigate the platform
• From third-party service providers who assist us in operating our business (for example, authentication or payment partners)

Where it is reasonable and practicable to do so, we will collect personal information directly from you.

4. Why we collect, hold and use your personal information

We use your personal information only for the following purposes:

• To provide, operate, maintain and improve the PointFive platform
• To create and manage your account and authenticate access
• To deliver content, track your progress, and personalise your learning experience
• To process payments, refunds, and manage subscriptions
• To communicate with you about your account, transactions, product updates, and support requests
• To send you marketing communications about our own products and services, where you have consented or as otherwise permitted by law (you can opt out at any time)
• To produce aggregated and de-identified data and insights for internal analytics, research, product improvement, and reporting (this data does not identify you and is not treated as personal information)
• To detect, prevent, and respond to fraud, security incidents, and misuse
• To comply with our legal and regulatory obligations
• For any other purpose disclosed to you at the time of collection or to which you have consented

We will not use your personal information for any purpose that is not set out in this Policy, or for any unrelated secondary purpose, unless you have consented or we are permitted or required to do so by law.

5. Disclosure of your personal information

5.1 Service providers

We disclose personal information to trusted third-party service providers who help us operate the platform. These providers are bound by contract and applicable law to use your information only for the purposes for which we engage them and to protect it appropriately. They include:

• Supabase — database, authentication and storage infrastructure. See: supabase.com/privacy
• Stripe — payment processing. Stripe collects and processes payment card data directly under its own privacy policy. See: stripe.com/au/privacy
• [Email/communication provider] — transactional and marketing email delivery
• [Analytics provider] — usage analytics
• Netlify — application hosting
• Professional advisers (lawyers, accountants, auditors) where reasonably required

5.2 We do not sell your personal information

We do not sell, rent or trade your personal information to third parties for their own marketing or commercial purposes.

5.3 Other disclosures

We may also disclose personal information:

• To comply with a legal obligation, court order, subpoena, or lawful request from a regulator or law enforcement agency
• To enforce our Terms of Service or protect the rights, property or safety of PointFive, our users, or others
• In connection with a corporate transaction such as a merger, acquisition, financing, restructure, or sale of all or part of our business — in which case we will require the recipient to handle your information consistently with this Policy and applicable law
• With your consent, or as otherwise permitted or required by law

5.4 Overseas disclosure

Some of our service providers may store or process personal information outside Australia, including in the United States, the European Union, and other countries. By using the platform, you acknowledge that your information may be transferred to and stored in these locations. We take reasonable steps to ensure that overseas recipients handle your information in a manner consistent with the APPs.

6. How we store and protect your information

We take reasonable technical and organisational measures to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These measures include:

• Encryption in transit (TLS) and at rest where appropriate
• Access controls and authentication for staff and contractors, on a need-to-know basis
• Logging and monitoring of system access
• Regular review of our security practices

No system is completely secure. While we work to protect your information, we cannot guarantee absolute security. If we become aware of an eligible data breach affecting your personal information, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve disputes and enforce our agreements. When information is no longer needed, we will take reasonable steps to delete or de-identify it.

7. Your rights

Under the Privacy Act, you have the right to:

• Access the personal information we hold about you
• Correct any information that is inaccurate, out-of-date, incomplete, irrelevant or misleading
• Withdraw consent to optional uses of your information (such as marketing) at any time
• Opt out of direct marketing at any time, including by using the unsubscribe link in our emails
• Request deletion of your account and associated personal information, subject to any records we are required to retain by law
• Make a complaint if you believe we have breached the APPs

To exercise any of these rights, please contact our Privacy Officer at privacy@pointfive.com.au. We will respond within a reasonable time, generally within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner:

• Website: www.oaic.gov.au
• Phone: 1300 363 992

8. Cookies and similar technologies

We use cookies and similar tracking technologies on our website and platform. Cookies are small text files placed on your device when you visit a website. They help the site recognise you, remember your preferences, and understand how you use the service.

The cookies we use include:

• Strictly necessary cookies — required for the platform to function (e.g., authentication, security, load balancing)
• Functional cookies — remember your preferences and settings
• Analytics cookies — help us understand how the platform is used so we can improve it
• Marketing cookies — used to deliver relevant advertising for our own products and to measure campaign performance

When you first visit our site, you will be presented with a cookie notice that allows you to accept or reject non-essential cookies. You can change your preferences at any time via your browser settings. Blocking strictly necessary cookies may prevent parts of the platform from working correctly.

9. Children and minors

Our platform is intended for users aged 18 and over. We do not knowingly collect personal information from children under that age. If you believe we have collected information from a child without appropriate consent, please contact us at privacy@pointfive.com.au and we will take steps to delete it promptly.

10. Changes to this Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website with the "Last updated" date shown above. Where the changes are material, we will notify you by email or through the platform before they take effect.

11. Contact us

If you have questions, concerns or complaints about this Privacy Policy or how we handle your personal information, please contact:

[LEGAL ENTITY NAME] — Privacy Officer
Email: privacy@pointfive.com.au
Postal: [ADDRESS]