Information We Collect
At carithonevo, we understand the sensitivity around personal information in financial education. Our approach centers on collecting only what's necessary to deliver meaningful business finance education to Australian entrepreneurs and business owners.
Key Principle: We collect information transparently and only when it serves your educational journey or improves our services. Every piece of data has a clear purpose tied to your learning experience.
Contact & Account Information
Name, email address, phone number, and postal address. We collect this when you register for programs, download resources, or contact our support team. This information helps us customize your educational experience and send relevant program updates.
Business Profile Data
Industry type, business size, current challenges, and financial goals. This helps us recommend appropriate learning materials and connect you with relevant case studies from similar Australian businesses.
Learning Analytics
Course progress, completion rates, quiz results, and resource downloads. We use this data to improve our educational content and identify areas where students commonly need additional support.
Technical Information
IP address, browser type, device information, and website usage patterns. This technical data helps us optimize our platform performance and ensure compatibility across different devices and browsers.
Information Collection Methods
We gather information through various touchpoints during your educational journey. When you register for our programs, we collect essential contact details and business information to tailor your experience. Our learning platform automatically tracks your progress to help identify knowledge gaps and recommend additional resources.
Website analytics help us understand which resources are most valuable to Australian business owners. We also collect feedback through surveys and course evaluations to continuously improve our educational content and delivery methods.
How We Use Your Data
Your information serves specific purposes within our educational ecosystem. We don't use your data for unrelated commercial activities or share it with marketing companies. Every use connects directly to improving your learning experience or our educational services.
Primary Uses
Educational Delivery: We use your contact information to provide course access, send learning materials, and communicate important program updates. Your business profile helps us suggest relevant case studies and connect you with appropriate learning pathways.
Progress Tracking: Learning analytics help us identify when you might benefit from additional support or alternative explanations of complex financial concepts. This data also helps us improve our course content based on common learning patterns.
Platform Improvement: Technical data helps us optimize website performance, fix compatibility issues, and develop new features that enhance the learning experience. We analyze usage patterns to understand which resources are most valuable.
Communication Purposes
We send program-related communications including course announcements, resource updates, and educational newsletters. You can control which types of communications you receive through your account preferences. We don't send promotional emails for third-party services.
Australian Privacy Focus: Our data usage complies with the Australian Privacy Principles (APPs) under the Privacy Act 1988. We're particularly mindful of fair and lawful processing, especially given the sensitive nature of business financial education.
Data Sharing and Third Parties
We maintain strict control over your personal information. We don't sell your data to marketers or share it with companies unrelated to your educational experience. When we do share information, it's limited to specific circumstances that directly benefit your learning.
Authorized Sharing Circumstances
Educational Partners: We occasionally work with guest instructors or industry experts to deliver specialized content. In these cases, we may share relevant business profile information to help them customize their presentations for our Australian audience.
Technical Service Providers: Our learning platform uses carefully selected third-party services for functions like video hosting, email delivery, and payment processing. These providers are bound by strict confidentiality agreements and can only use your data for the specific services they provide to us.
Legal Requirements: We may disclose information when required by Australian law, court orders, or regulatory investigations. We'll notify you of such requests when legally permitted, except in cases involving fraud prevention or immediate safety concerns.
What We Never Share
We never sell your personal information to data brokers, marketing companies, or advertising networks. We don't share your learning progress or business information with competitors or unrelated businesses. Your financial goals and business challenges remain confidential within our educational system.
Your Privacy Rights
Under Australian privacy law, you have significant control over your personal information. We've designed our systems to make exercising these rights straightforward and responsive. You shouldn't have to navigate complex procedures to manage your own data.
Your Data Rights Under Australian Privacy Law
Access Your Information
Request a copy of all personal information we hold about you. We'll provide this in a readable format within 30 days, including details about how we've used your data.
Correct Inaccuracies
Update or fix any incorrect personal information in our systems. You can make many changes directly through your account dashboard or contact us for assistance.
Delete Your Data
Request deletion of your personal information, subject to legal retention requirements. We'll explain any information we must retain and why.
Restrict Processing
Limit how we use your information while maintaining your account access. Useful when you're disputing data accuracy or reviewing your privacy preferences.
Data Portability
Receive your personal information in a standard format for transfer to another service provider. We'll provide commonly used file formats when possible.
Object to Processing
Challenge our use of your information for specific purposes. We'll stop processing unless we can demonstrate compelling legitimate grounds for continued use.
How to Exercise Your Rights
Contact our privacy team at support@carithonevo.com with your request. Include your full name and account email address for verification. We typically respond within 5 business days with next steps or the requested information.
For complex requests, we may need additional time to gather information or verify your identity. We'll keep you informed throughout the process and explain any delays or limitations we encounter.
Security Measures and Data Protection
Protecting your information is fundamental to our operation. We've implemented multiple layers of security that address both technical vulnerabilities and human factors. Our approach combines industry-standard practices with additional measures specific to educational data protection.
Technical Security Controls
Encryption: All data transmissions use TLS 1.3 encryption, and sensitive information is encrypted at rest using AES-256 standards. Your personal information remains encrypted throughout our systems, from initial collection through long-term storage.
Access Controls: Staff access to personal information is strictly limited based on job function. Our team uses multi-factor authentication, and we regularly audit access logs to detect any unusual activity. Only employees directly involved in your educational support can view your profile information.
Infrastructure Security: Our servers are hosted in Australian data centers with physical security controls including biometric access, 24/7 monitoring, and redundant backup systems. We maintain separate environments for development and production data.
Operational Security Practices
We conduct regular security training for all staff members who handle personal information. Our team follows strict protocols for data handling, and we perform quarterly security assessments to identify and address potential vulnerabilities.
Incident response procedures are tested annually, ensuring we can quickly contain and address any security issues. We maintain detailed logs of data access and processing activities for security monitoring and compliance purposes.
Breach Notification: If a data breach affects your personal information, we'll notify you within 72 hours when possible, along with details about what information was involved and steps we're taking to address the situation.
Data Retention and Deletion
We don't keep your information indefinitely. Our retention periods are based on the specific type of information, legal requirements, and the purposes for which we collected the data. This approach minimizes privacy risk while ensuring we can continue providing educational support.
Data Retention Timeline
Active Learning Data
Course progress, quiz results, and learning analytics retained while you're actively engaged in programs plus one year.
Account Information
Contact details and business profile information retained for three years after account closure for support purposes.
Financial Records
Payment information and transaction records retained for seven years to comply with Australian business record requirements.
Deletion Procedures
When retention periods expire, we permanently delete personal information from our active systems. This includes removing data from backups and archives within 90 days of the deletion date. Some aggregated, anonymized analytics may be retained for educational research purposes.
You can request early deletion of your information at any time, subject to legal retention requirements. We'll explain any information we must retain and provide estimated deletion dates for data that can be removed early.
International Data Transfers
Your personal information is primarily stored and processed within Australia. However, some educational content and technical services may involve limited international data transfers. We ensure these transfers maintain the same level of privacy protection you expect.
When and Why We Transfer Data
Educational Content: Guest instructors or international business case studies may involve sharing relevant profile information with presenters located outside Australia. These transfers are limited to information necessary for educational customization.
Technical Services: Some platform functions use international service providers for capabilities like video conferencing or content delivery networks. These providers are bound by strict data protection agreements equivalent to Australian privacy standards.
Transfer Safeguards
All international transfers are protected by contractual safeguards that ensure privacy protection equivalent to Australian standards. We use Standard Contractual Clauses approved by privacy regulators and conduct due diligence on the privacy practices of international partners.
We avoid transferring data to countries with inadequate privacy protections unless absolutely necessary for educational delivery, and only with additional safeguards in place.
Privacy Questions and Concerns
We're committed to transparent communication about our privacy practices. If you have questions about how we handle your information, concerns about our practices, or need assistance with your privacy rights, our team is ready to help.
Our privacy team includes staff members who understand both the technical aspects of data protection and the practical concerns of business owners learning about financial management. We aim to provide clear, helpful responses rather than legal jargon.