How information handled through this website and the CAQA CMS platform is hosted, protected and managed.
This Data and Security Notice explains how CAQA CMS, part of CAQA Groups and Career Calling International Pty Ltd (ABN 53 162 651 238), hosts, protects and manages information handled through this website and through the CAQA CMS content management platform. It is designed to give education providers, businesses and government bodies a clear picture of how their content and data are looked after, and which responsibilities remain with the client.
This notice is for visitors who submit information through this website, for prospective clients assessing the platform, and for existing clients and their administrators who store website content, media and user records in a CAQA CMS environment.
When you make an enquiry, subscribe to our newsletter or contact us through this website, we collect your name, organisation, email address, phone number and message so that we can respond. We also use cookies and analytics to understand how the website is used and to improve it. No platform log-in occurs on this website, and this personal information is handled in accordance with our Privacy Policy.
Client platform environments typically hold website pages and content, media assets and documents, user account details such as names, email addresses and roles, version histories, and workflow and approval records. The client remains responsible for the personal information it chooses to collect through its own website forms and pages, including having a lawful basis for that collection and an appropriate privacy notice on its own site.
Platform environments are hosted with reputable hosting providers. Access to client environments is restricted to authorised personnel on a need-to-know basis, protected by individual credentials and role-based permissions, and administrative activity within the platform is logged through the platform’s versioning and audit features so that changes can be traced to an account.
Website content and configuration are backed up on a scheduled basis as part of hosting arrangements. Where content is lost or corrupted, we restore from the most recent available backup. Backup frequency and retention for a specific client are those recorded in the client’s agreement, and clients should tell us promptly if their recovery needs change.
We apply platform updates and security patches as part of managed hosting and support, monitor availability, and review the platform for vulnerabilities on an ongoing basis. Urgent patches may be applied at short notice where a credible risk exists. Details of what is included for your organisation are set out in our Website Hosting and Support Terms and your agreement.
If we become aware of a security incident affecting a client environment, we assess it, contain it and remediate it, and we notify affected clients without undue delay, giving them the information they reasonably need for their own obligations. Where the Privacy Act 1988 (Cth) and the Notifiable Data Breaches scheme apply to an incident, we comply with our obligations and assist clients with theirs.
Security is shared. Clients are responsible for managing their own administrators and user accounts, removing access for departed staff, keeping credentials secure, configuring the forms on their own websites responsibly, collecting personal information through their sites lawfully, and telling us promptly about suspected compromise or unusual account activity.
Website enquiry records are retained only as long as needed for the purposes described in our Privacy Policy. Client platform content is retained for the life of the engagement; on termination, clients may request an export of their content, and environments and backups are deleted in line with the agreement and our backup cycle once the engagement ends.
No payments are taken through this website, and no payment-card details are collected or stored through it. Platform, hosting and support fees are invoiced under separate written agreements, which also record any cancellation and refund position for those paid services.
This notice is general information. Security measures reduce risk but no provider can guarantee that every incident, outage or attack will be prevented. This notice is not legal advice and does not replace the terms of a written agreement; if this notice and an agreement are inconsistent, the agreement prevails.
If you have questions about this page, contact us by email at info@caqa.com.au, by phone on 1800 266 160, or through our contact page. We aim to respond to enquiries within a reasonable time during business hours, Monday to Friday, 9 am to 5 pm (Melbourne time).
To Receive Updates And Offers
