Privacy Policy
Last updated: 11 July 2026
1. Who we are and what this policy covers
1.1 In this Privacy Policy, "we", "us" and "our" mean Career Calling International Pty Ltd (ABN 53 162 651 238, ACN/ARBN 162 651 238), trading as CAQA Online, of 2/10 Lawn Court, Craigieburn VIC 3064, Australia.
1.2 This policy explains how we collect, hold, use and disclose personal information when you visit this website (https://caqa-online-preview.netlify.app), contact us, subscribe to our communications, or otherwise deal with us in connection with CAQA Online's services.
1.3 "Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable — for example your name, contact details, or online identifiers.
1.4 We handle personal information in accordance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs) and the Notifiable Data Breaches (NDB) scheme. Where you deal with us from the European Union, the United Kingdom or the United States, the additional protections in sections 8, 9 and 10 apply to you. We only collect personal information by lawful and fair means that is necessary for our functions and activities.
2. What we collect and why
2.1 Information you give us. We collect personal information you provide when you: submit an enquiry or contact form; email or phone us; subscribe to our newsletter; register for an event, offer or competition; request a quote or engage our services; or provide feedback or a complaint. This typically includes your name, organisation, email address, phone number, postal address and the content of your correspondence.
2.2 Information collected automatically. When you use this website (https://caqa-online-preview.netlify.app), limited technical information may be collected through cookies and similar technologies and our hosting infrastructure — such as IP address, browser type, device information, pages viewed and referring pages. See our Cookies Policy for details and choices.
2.3 Information from other sources. We generally collect personal information directly from you. We only collect it from third parties (for example, a publicly maintained record, your employer when they engage us, or an information services provider) where it is unreasonable or impracticable to collect it from you directly.
2.4 Why we collect it. We collect, hold and use personal information to: respond to enquiries and provide customer support; deliver and administer our products and services (including billing and account management); enter into and perform contracts; send you communications you have requested, including newsletters and service updates; improve our services, websites and user experience; conduct research and analysis; comply with our legal and regulatory obligations; and establish, exercise or defend legal claims.
2.5 If you do not provide the information we request, we may be unable to respond to your enquiry or provide the relevant service.
2.6 Sensitive information. We do not seek to collect sensitive information (such as health information, or racial, religious or political information) through this website. If you volunteer it, we will handle it in accordance with this policy and only use it for the purpose for which it was given, or with your consent.
3. How we meet the 13 Australian Privacy Principles
| APP | Principle | How we comply |
|---|---|---|
| APP 1 | Open and transparent management | This policy is published free of charge on every site we operate; a hard copy is available on request from our Privacy Officer. |
| APP 2 | Anonymity and pseudonymity | You may browse this website, and make general enquiries, anonymously or using a pseudonym, except where it is impracticable (e.g. contracting for services or fulfilling an order). |
| APP 3 | Collection of solicited personal information | We collect only what is reasonably necessary for our functions, by lawful and fair means, and directly from you wherever practicable. |
| APP 4 | Unsolicited personal information | If we receive personal information we did not ask for and could not have collected under APP 3, we destroy or de-identify it as soon as practicable, where lawful to do so. |
| APP 5 | Notification of collection | At or before the time of collection (or as soon as practicable after), we take reasonable steps to notify you of who we are, why we are collecting, and how to access this policy — typically via collection statements on our forms and this policy. |
| APP 6 | Use and disclosure | We use and disclose personal information only for the primary purpose of collection, a related secondary purpose you would reasonably expect, with your consent, or as required or authorised by law. |
| APP 7 | Direct marketing | We only send direct marketing where permitted, and every marketing communication contains a simple opt-out. Opt-out requests are actioned promptly and free of charge (see section 6). |
| APP 8 | Cross-border disclosure | Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs (see section 7). |
| APP 9 | Government related identifiers | We do not adopt, use or disclose government identifiers (such as tax file numbers or Medicare numbers) as our own identifiers of individuals. |
| APP 10 | Quality of personal information | We take reasonable steps to keep the personal information we collect, use and disclose accurate, up to date, complete and relevant. |
| APP 11 | Security | We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, and to destroy or de-identify it when no longer needed (see section 11 and our Data Retention Policy). |
| APP 12 | Access | You may request access to the personal information we hold about you (see section 12). |
| APP 13 | Correction | You may request correction of personal information that is inaccurate, out of date, incomplete, irrelevant or misleading (see section 12). |
4. Disclosure of personal information
4.1 We may disclose personal information to: our related brands and initiatives within the Career Calling International group, for the purposes described in section 2.4; service providers who help us operate (website hosting, email delivery, IT support, payment processing where applicable, professional advisers) under obligations of confidentiality; regulatory bodies where required — for example, the Australian Skills Quality Authority may request confirmation of the procurement of copyright-protected resources as mandated by applicable legislation; and courts, tribunals, regulators and law enforcement where required or authorised by law.
4.2 We do not sell personal information, and we do not disclose it to third parties for their own direct marketing without your consent.
5. Cookies and analytics
Our use of cookies and similar technologies is described in our Cookies Policy, available in the footer of this website (https://caqa-online-preview.netlify.app). You can control cookies through your browser settings and, where a consent banner is presented, through its preference controls.
6. Direct marketing and opting out
6.1 Where you have subscribed or would reasonably expect it, we may send you newsletters and information about our products, services and offers, in accordance with the Privacy Act and the Spam Act 2003 (Cth).
6.2 You can opt out at any time using the unsubscribe link in any message, or by contacting us at info@caqa.com.au. Once you opt out, we will stop the relevant communications and will not provide your details to any third party for marketing purposes, except where the law requires disclosure.
7. Overseas disclosure
7.1 Some of our service providers (for example, website hosting, email and analytics providers) store or process data outside Australia, including in the United States and the European Union.
7.2 Where we disclose personal information overseas, we take reasonable steps as required by APP 8 to ensure the overseas recipient does not breach the APPs — including contractual safeguards and selecting providers with recognised security and privacy certifications. For individuals in the EU/UK, transfers are protected as described in section 8.4.
8. Additional information for individuals in the EU and UK (GDPR)
If you are located in the European Economic Area or the United Kingdom, the EU General Data Protection Regulation or UK GDPR may apply to our handling of your personal data, and the following applies in addition to the rest of this policy.
8.1 Controller. Career Calling International Pty Ltd is the controller of your personal data. Contact our Privacy Officer using the details in section 13.
8.2 Lawful bases. We process personal data on the following bases: consent (e.g. newsletter subscriptions, non-essential cookies — you may withdraw consent at any time); contract (processing needed to provide services you request); legitimate interests (operating and securing our websites, responding to enquiries, improving our services — balanced against your rights); and legal obligation (record-keeping and regulatory compliance).
8.3 Your rights. You have the right to: access your personal data; rectification of inaccurate data; erasure ("right to be forgotten"); restriction of processing; data portability (receive your data in a structured, commonly used, machine-readable format); object to processing based on legitimate interests, and to direct marketing at any time; and withdraw consent at any time without affecting prior processing. We do not make decisions producing legal effects about you based solely on automated processing.
8.4 International transfers. Your data will be transferred to and processed in Australia (and by processors elsewhere). We rely on appropriate safeguards, including standard contractual clauses and equivalent contractual protections, together with the measures in section 11.
8.5 Exercising your rights and complaints. To exercise any right, contact our Privacy Officer (section 13). We will respond within one month. You also have the right to lodge a complaint with your local data protection supervisory authority (in the UK, the Information Commissioner's Office).
9. Additional information for California and other US residents (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) may give you the following rights, which we honour for all US residents as a matter of practice.
9.1 Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, purposes, and categories of third parties to whom it is disclosed.
9.2 Right to delete — request deletion of personal information we have collected from you, subject to lawful exceptions.
9.3 Right to correct — request correction of inaccurate personal information.
9.4 Right to opt out of sale or sharing — we do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding 12 months.
9.5 Right to non-discrimination — we will not discriminate against you for exercising any of these rights.
9.6 To exercise these rights, contact our Privacy Officer (section 13). We will verify your request using information you have previously provided and respond within 45 days (extendable by a further 45 days where reasonably necessary). You may use an authorised agent to submit a request on your behalf.
10. Notifiable data breaches
We maintain a Data Breach Response Policy consistent with the NDB scheme under Part IIIC of the Privacy Act 1988 (Cth). If a data breach occurs that is likely to result in serious harm to individuals, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as soon as practicable, and, where the GDPR applies, the relevant supervisory authority within 72 hours of becoming aware of the breach.
11. How we protect your information
We take reasonable steps to protect personal information, including: hosting with reputable providers using encryption in transit (TLS/HTTPS); access controls limiting personal information to personnel who need it; secure storage of hard-copy records at our head office; staff confidentiality obligations and privacy awareness; and vendor due diligence for service providers who handle personal information. No internet transmission is completely secure, and you provide information at your own risk to that extent; we will act in accordance with section 10 if a breach occurs.
12. Access, correction and deletion
12.1 You may request access to, correction of, or (subject to our legal retention obligations) deletion of the personal information we hold about you. Requests should be made in writing to our Privacy Officer at complaints@careercalling.com.au or by mail to 2/10 Lawn Court, Craigieburn VIC 3064.
12.2 There is no charge to make a request or to access your information; a reasonable charge may apply for copying voluminous hard-copy records, which we will tell you about before proceeding. We will acknowledge requests promptly and respond within a reasonable period (generally within 30 days; within one month for GDPR requests and 45 days for CCPA requests).
12.3 If we refuse a request (for example, where the law requires us to retain information), we will give you written reasons and information about how to complain.
13. Children
This website is intended for a general and professional audience. We do not knowingly collect personal information online from children under 16 without parental or guardian consent. If you believe a child has provided us personal information, contact our Privacy Officer and we will take reasonable steps to delete it.
14. Privacy Officer and complaints
14.1 Questions, requests and complaints about this policy or our handling of your personal information should be directed to our Privacy Officer:
- Email: complaints@careercalling.com.au
- Mail: Privacy Officer, Career Calling International Pty Ltd, 2/10 Lawn Court, Craigieburn VIC 3064, Australia
- Telephone: 1800 266 160
14.2 We will acknowledge your complaint within 2 business days and aim to resolve it within 10–15 business days, in accordance with our Complaints & Feedback Policy.
14.3 If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC): online at www.oaic.gov.au, by phone on 1300 363 992, or by mail to GPO Box 5288, Sydney NSW 2001.
14.4 If you are in the EU or UK, you may complain to your local data protection supervisory authority. If you are in the United States, you may contact your state Attorney General's office.
15. Changes to this policy
We may update this Privacy Policy from time to time. The current version will always be published on this website (https://caqa-online-preview.netlify.app) with its "Last updated" date. Material changes will be highlighted on this page or notified to subscribers where appropriate.