What we collect
We collect the information you give us directly — name, email, licence details, and state — to create your account, track your CPD standing, and issue certificates. We collect payment information through our payment processor; we do not store your full card details ourselves. If you manage a company account, we also hold the email addresses of staff you invite or assign seats to, for the purpose of granting and tracking their access.
How we use it
We use your information to run your account and deliver the service: creating and securing your account, granting access to courses, tracking your progress, calculating your CPD standing against your state’s requirement (including any carry-forward), issuing certificates, and sending you receipts, service notices and renewal reminders. If you manage a company account, staff email addresses are used to send seat invitations and to link their eventual account back to the seats you have assigned them.
We also use information about how the platform is used to operate and improve it: to understand which courses and modules work, to develop and prioritise new courses, to improve the assessment and learning experience, to diagnose faults, to protect against misuse, and to measure and improve our own marketing. Where information is used for these purposes we work with it in aggregate or de-identified form wherever doing so still answers the question.
We may contact you about courses, features and offers relevant to your CPD obligations. You can opt out of that at any time, and doing so does not affect the service messages and reminders tied to your account. We do not sell your personal information to anyone.
What we don’t do
We don’t sell, rent, or otherwise trade your personal information to third parties for their own marketing purposes. We don’t scrape or purchase email lists from external sources (including licensing or regulator websites) to send unsolicited marketing — any marketing communication you receive from us is because you gave us your details directly, through an account, a purchase, or an explicit opt-in.
Company seat accounts and staff data
If you’re added to a company’s roster as a staff member (because your employer assigned you a CPD seat), we hold your email address and, once you register, your account and progress data the same as any individual learner. Your CPD records, certificates, and points remain yours and are not visible to your company’s manager beyond a summary of your overall standing shown on their Team Dashboard — managers do not see your assessment answers or module progress in detail, only your points-earned-versus-requirement standing.
Your rights
You can request a copy of the personal information we hold about you, or ask us to correct or delete it, by contacting us directly. We’ll respond to genuine requests promptly, though note that certain records — particularly the immutable points and certificate ledger required for regulatory audit purposes — may need to be retained even after an account is otherwise closed, since that record may need to substantiate a real licence renewal that already occurred.
Data storage and security
Your data is stored on our hosting provider’s infrastructure with standard access controls. Points and certificate records are treated as an immutable audit trail once created — they are never edited or deleted as a matter of routine, since their integrity is exactly what makes them useful as evidence for a licence renewal or audit.
Cookies and analytics
We use standard session cookies necessary for the site and your account to function correctly. Where we use analytics to understand how the platform is used, we aim to do so in a way that doesn’t identify you personally beyond what’s needed to improve the product.
Retention of immutable records
Because your points and certificate ledger exists to substantiate real CPD compliance, we retain those specific records even if you later close your account, since a licensing body, employer, or auditor may need to verify a completion that occurred while your account was active. This is narrower than general account retention — it applies specifically to the completion records themselves, not to unrelated personal data we no longer have a reason to hold.
Renewal reminders
If you hold a PointCPD account, we send you reminders as your licence renewal date approaches and when your points fall short of your state’s requirement. Keeping track of your CPD standing is the service the account exists to provide, so these reminders are part of that service rather than separate marketing.
You can turn reminders off at any time using the link in any reminder email. It takes one click and does not require you to log in, and it does not affect your access to courses you have purchased. Transactional messages such as receipts, certificates and account notices continue regardless, because they relate to your purchases and your CPD record.
Marketing communications
Any marketing email you receive from us is sent because you gave us your details directly, through an account or a purchase, and never from a purchased or scraped contact list. Renewal reminders are covered above. You can opt out of non-essential marketing communications at any time; transactional emails (certificates, receipts, account notices) will continue regardless, since they relate to your actual account and CPD records rather than marketing.
Third-party services
We use third-party services for specific functions, including payment processing, transactional email delivery, website hosting and analytics, artificial-intelligence language services, and speech generation. Each handles only the information its function requires, and each has its own privacy practices governing what it processes on our behalf. We choose providers with reasonable security and privacy standards, though we cannot control their practices beyond the terms of our arrangement with them.
Information disclosed overseas
Some of the services that power the platform are provided by organisations located outside Australia, principally in the United States. This includes providers of artificial-intelligence language services, which process text you enter into in-course assistant and reflection features, and speech services, which process course text to generate narration.
Information sent to these providers is limited to what the feature needs to function. We take reasonable steps to ensure it is handled appropriately, but by using those features you acknowledge that the information is processed outside Australia and may be subject to the laws of the country where it is processed.
Children’s data
PointCPD is a professional platform for licensed builders and is not directed at or intended for use by children.
Changes to this policy
We may update this policy as our practices evolve, particularly as company seat accounts and other features develop. We’ll aim to make any material change clear rather than updating this page silently.
Contact
Questions about this policy or your data can be sent via our contact page.