We respect your privacy and handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For visitors in the UK and EU/EEA we also describe your rights under the GDPR. This policy covers the Lean 6 Sigma Hub website, courses and related services.
1. Who is responsible
The controller of your personal information is Lean 6 Sigma Hub (ABN 83 117 876 899), New South Wales, Australia. Privacy contact: Privacy Officer, info@lean6sigmahub.com.
2. What we collect
- Account details: name, email address and a password (stored securely by our authentication provider, not readable by us). If you use Google sign-in we receive your name and email from Google.
- Purchases: items bought, amount, currency, order number, billing name and email, and a payment reference. Card details go directly to Stripe and are not stored by us.
- Learning records: enrolments, lesson progress, quiz and final-exam attempts and scores, and certificates (name, course, code, issue date).
- Messages: anything you send via our contact form or email.
- Technical data: device and browser type, IP address and basic usage logs needed to run and secure the site, plus the essential cookies and storage in our Cookie Policy.
- Migrated records: if you studied with us on our previous website, we carried across your name, email, course history and certificates so you keep access.
We do not knowingly collect sensitive information (such as health or political information). Please do not send it to us.
3. How we collect it
Directly from you (registration, checkout, forms, emails), automatically as you use the site (progress, exam results, technical data), and from Stripe and Google when you pay or sign in with them.
4. Why we use it
| Purpose | GDPR legal basis |
|---|---|
| Create and run your account, deliver purchased courses and downloads, record progress and exam results, issue and verify certificates | Contract |
| Process payments, keep tax and accounting records, prevent fraud | Contract; legal obligation; legitimate interests |
| Respond to enquiries and support requests; send service emails (access, receipts, password resets) | Contract; legitimate interests |
| Keep the site secure, fix problems and improve courses | Legitimate interests |
| Marketing emails about courses or offers, if we send them (you can opt out any time) | Consent / legitimate interests |
| Analytics cookies, only if enabled | Consent |
6. Overseas transfers
Some providers store or process data outside Australia, for example in the United States. Data is hosted in: the United States, by our hosting provider (Base44) and Stripe. Where we disclose information overseas we take reasonable steps under APP 8 to make sure it is handled consistently with the APPs, and for UK/EU residents we rely on appropriate safeguards such as standard contractual clauses where required.
8. Marketing and email
We send service emails when needed. If we send marketing emails, they are sent only in line with the Spam Act 2003 (Cth), will identify us, and include an unsubscribe option. You can also opt out at any time by emailing info@lean6sigmahub.com.
9. How long we keep it
- Account and learning records: up to 3 years after your last activity, so you can return to your courses.
- Order and payment records: at least 5 years, as required by Australian tax and corporate law.
- Certificates: kept while the certificate remains valid so it can be verified.
- Support emails: as long as needed to deal with your enquiry and any follow-up.
When information is no longer needed we delete or de-identify it, although backups can take some time to clear.
10. Security
We use reasonable technical and organisational measures: encrypted connections (HTTPS), access limited to authorised people, role-based admin access and an audit log of administrator actions on student records. No online service is completely secure. If a data breach is likely to cause serious harm we will notify affected people and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
11. Your rights
Under the APPs you can ask to access the personal information we hold about you and to correct it (APPs 12 and 13). If the GDPR applies to you, you also have the rights to erasure, restriction, objection, data portability and to withdraw consent at any time, and to complain to your local data protection authority.
To make a request, email info@lean6sigmahub.com. We may need to verify your identity, and will respond within 30 days. Some information (such as tax records and issued certificates) may need to be kept despite a deletion request.
12. Children
The Services are not directed at people under 18, and we do not knowingly collect their personal information. If you think a child has given us information, contact us and we will delete it.
13. Complaints
If you have a privacy concern, contact us first at info@lean6sigmahub.com and we will investigate and reply in writing. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.
14. Changes and contact
We may update this policy and will post the new version here with a new "last updated" date; we will notify you of material changes. Contact: info@lean6sigmahub.com.