Privacy Policy

Latest reviewed/ Effective date: 7 September 2026

1. About this policy

PassAcrrm is operated by Aumyania Pty Ltd (ABN 86 665 313 977).

In this Privacy Policy, “PassAcrrm”, “we”, “us” and “our” refer to Aumyania Pty Ltd in connection with:

https://passacrrm.com.au;
associated learning portals, applications and account areas;
courses, mock examinations, question banks, webinars and educational resources; and
related customer-support, marketing and administrative services.

This Privacy Policy explains how we collect, hold, use and disclose personal information. We seek to comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable Australian laws.

“Personal information” means information or an opinion about an identified individual or an individual who is reasonably identifiable.

2. Information we may collect

Depending on how you interact with PassAcrrm, we may collect:

your name, email address, telephone number and contact details;
your billing address and transaction information;
account details, username and encrypted password credentials;
course enrolments, subscription status and access history;
examination pathway, training stage and learning preferences;
quiz responses, mock-examination results, written answers and progress information;
webinar registrations, attendance and participation;
support requests, survey responses, feedback and complaints;
testimonials, comments or other content you voluntarily submit;
your image, voice, display name or chat contributions where an online session is recorded after appropriate notice;
marketing preferences and communication history;
IP address, browser, device, operating-system and login information;
pages viewed, links selected, session activity and other website analytics;
suspected account sharing, unauthorised copying or security activity; and
other information you voluntarily provide to us.

We do not ordinarily need health information about you or identifiable information about patients. You must not submit identifiable patient information through the website, courses, webinars, mock examinations or support services.

If sensitive information is reasonably necessary for our functions, we will collect it with consent or as otherwise permitted by law.

3. How we collect personal information

We may collect personal information:

directly from you when you create an account, enrol, purchase a service or contact us;
through your use of our website, learning portal and educational services;
when you complete a quiz, mock examination, survey or feedback form;
when you attend or participate in a webinar, class or mentoring session;
through cookies, analytics and similar technologies;
through payment, hosting, communications and learning-platform providers;
from a person or organisation purchasing access on your behalf;
through social-media platforms when you interact with our pages;
from publicly available sources where lawful and reasonably necessary; or
from an authorised representative acting on your behalf.

If you provide personal information about another person, you must be authorised to do so and should make that person aware of this Privacy Policy where appropriate.

Where practicable, you may interact with us anonymously or using a pseudonym. This may not be possible where we need to verify your identity, process a payment, create an account, provide personalised feedback or deliver a purchased service.

4. Why we collect and use personal information

We may collect, hold, use and disclose personal information to:

create, verify and administer user accounts;
process enrolments, purchases, subscriptions and payments;
provide courses, question banks, mock examinations, webinars and educational resources;
track learning progress and display results or feedback;
provide technical assistance and customer support;
communicate access instructions, receipts, timetable changes and service notices;
personalise and improve our educational services;
maintain website functionality and analyse service performance;
protect accounts and detect fraud, account sharing, scraping or unauthorised access;
enforce our Terms and Conditions and protect our intellectual property;
investigate complaints, disputes and suspected misconduct;
obtain professional, technical, accounting or legal assistance;
comply with taxation, accounting, regulatory and legal obligations;
conduct surveys, research and service-quality reviews;
manage our business and undertake an authorised business restructure or sale;
send direct marketing where permitted by law; and
carry out another purpose explained when the information is collected or authorised by you.

We may use aggregated or de-identified information for research, statistical analysis and service improvement where individuals are not reasonably identifiable.

5. If you do not provide information

You are not required to provide personal information merely to browse publicly available parts of the website.

If you do not provide information reasonably required for registration, payment, identity verification or course delivery, we may be unable to create your account, process your purchase or provide the requested service.

6. Payment information

Payments may be processed by an independent payment provider.

We do not ordinarily receive or store complete payment-card credentials. We may receive limited transaction information, including the payer’s name, payment status, amount, date, payment method and transaction reference.

Payment providers handle information under their own terms and privacy policies.

7. Disclosure of personal information

We may disclose personal information to:

employees, educators, contractors and authorised administrators who require it for their work;
website, cloud-hosting and learning-management providers;
payment processors and fraud-prevention providers;
email, SMS, webinar, videoconferencing and customer-support providers;
analytics, security, authentication and information-technology providers;
accountants, auditors, insurers, banks, lawyers and professional advisers;
regulators, courts, tribunals, law-enforcement agencies or government authorities where authorised or required by law;
a purchaser, adviser or relevant party involved in a genuine proposed or completed business transaction; and
another person where you consent or direct us to make the disclosure.

We do not sell personal information.

Service providers may only use information for authorised purposes, subject to their legal and contractual obligations.

8. Overseas disclosures and storage

Some service providers may store or process personal information outside Australia. The relevant countries depend on the providers and technical services being used.

Where practicable, the likely countries will be identified here or in a collection notice provided when information is collected:

Likely overseas locations: [insert the countries used by your hosting, payment, email, webinar, analytics and support providers].

Before disclosing personal information to an overseas recipient, we will take reasonable steps required by Australian Privacy Principle 8. In some circumstances, an exception under the Privacy Act may apply.

Internet and cloud services can involve information passing through multiple jurisdictions even when its primary storage location is in Australia.

9. Cookies and analytics

PassAcrrm may use cookies, pixels, local storage and similar technologies.

These technologies may be used to:

keep you signed in;
maintain account and shopping-cart functions;
remember preferences;
protect the website against fraud or misuse;
measure website traffic and performance;
understand how educational resources are used; and
support advertising or campaign measurement where permitted.

We may use:

necessary cookies, required for security and website operation;
functional cookies, which remember settings and preferences;
analytics cookies, which help us understand website use; and
advertising cookies, which may measure or personalise promotions.

Where a consent-management tool is provided, you can use it to manage non-essential cookies. You may also control cookies through your browser. Blocking necessary cookies may prevent account, payment or learning functions from operating correctly.

Third-party services may collect information under their own privacy policies. The website’s cookie notice should identify the particular analytics, advertising and embedded-media services actually in use.

10. Embedded content and external links

The website may contain embedded videos, social-media content or links to third-party services. Those providers may collect information, use cookies or monitor interactions as if you had visited their platforms directly.

We do not control third-party privacy practices. You should review the relevant provider’s privacy policy before supplying personal information.

11. Recorded sessions

We will provide appropriate notice if a webinar, class, mock examination, mentoring session or feedback session will be recorded.

A recording may contain your display name, image, voice, chat messages or contributions. Where required, we will obtain consent or provide reasonable participation alternatives.

Participants must not disclose identifiable patient information during a session. PassAcrrm will obtain separate permission before using an identifiable participant recording or testimonial in public advertising, unless another lawful basis clearly applies.

12. Direct marketing

We may send information about PassAcrrm courses, resources, webinars and promotions where we have consent or another lawful basis.

Commercial electronic messages will identify the sender and include a functional unsubscribe method as required by the Spam Act 2003 (Cth).

You may unsubscribe by:

selecting the unsubscribe link in an email;
following the opt-out instructions in an SMS; or
contacting us using the details below.

We will action valid electronic unsubscribe requests within the period required by law. Unsubscribing from marketing does not prevent us from sending non-commercial communications required to administer your account, purchase or course access.

We will not sell your contact information to third parties for their independent marketing.

13. Security

We take reasonable technical and organisational steps to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure.

These steps may include:

access controls and authentication;
encrypted transmission where appropriate;
secure hosting and payment providers;
account and login monitoring;
staff and contractor access restrictions;
backups, software maintenance and security updates; and
procedures for investigating suspected security incidents.

No internet platform or storage system can be guaranteed to be completely secure. You are responsible for keeping your password confidential and promptly notifying us if you suspect unauthorised access to your account.

14. Data breaches

We maintain processes for responding to suspected data breaches.

Where the Notifiable Data Breaches scheme applies and an eligible data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

15. Retention and deletion

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or for a permitted legal, accounting, security, dispute-resolution or business purpose.

Retention periods may differ according to the type of information. For example:

account and learning information may be retained while access remains active and for a reasonable period afterwards;
transaction and taxation records may be retained for the legally required period;
security logs may be retained for fraud prevention and investigation;
recordings may be retained for the period disclosed when the session is recorded; and
backup copies may remain temporarily until they are securely overwritten.

When personal information is no longer required, we will take reasonable steps to destroy it or ensure that it is de-identified, unless retention is required or permitted by law.

Closing an account does not necessarily require the immediate deletion of every record. Australian privacy law does not provide an unlimited right to erasure in all circumstances.

16. Access and correction

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

You may be able to update some information through your account. Otherwise, submit a written request using the contact details below.

We may need to verify your identity before processing a request. We will respond within a reasonable period and provide access in the manner requested where reasonable and practicable.

In circumstances permitted by law, we may refuse access or correction. If we do so, we will generally provide written reasons and explain available complaint mechanisms.

We will not charge you for making a request. A reasonable charge may apply to providing access where permitted by law, but not to correcting information.

17. Account closure

You may request closure of your PassAcrrm account by contacting us from the email address registered to the account.

We may verify your identity before acting. Account closure will end access to purchased content, subject to any rights that cannot lawfully be excluded.

Following closure, personal information will be retained, deleted or de-identified in accordance with section 15 of this policy.

18. Children

PassAcrrm provides professional education and is not directed to children under 16.

A person under 18 should use the service only with the involvement and consent of a parent or legal guardian and where the service is appropriate for that person.

If we discover that personal information has been collected from a child without appropriate authority, we will take reasonable steps to delete or otherwise appropriately manage it.

19. Privacy complaints

If you believe we have mishandled your personal information or breached an applicable privacy obligation, please contact us and include:

your name and contact details;
a description of the concern;
relevant dates or transactions; and
the outcome you are seeking.

We will acknowledge the complaint, investigate it fairly and respond within a reasonable period. We aim to provide an initial substantive response within 30 days, although complex matters may require additional time. If more time is needed, we will explain the delay where practicable.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner:

Website: https://www.oaic.gov.au/privacy/privacy-complaints
Telephone: 1300 363 992

The OAIC may require you to raise the matter with us before it investigates.

20. Contact details

Privacy Officer
Aumyania Pty Ltd trading as PassAcrrm
ABN: 86 665 313 977
Website: https://passacrrm.com.au
Email: admin@passacrrm.com.au

Please use the subject line “Privacy Request” when contacting us about access, correction, account closure or a privacy complaint.

21. Changes to this policy

We may update this Privacy Policy to reflect changes to our services, technology, providers or legal obligations.

The current version will be published on the PassAcrrm website with its effective date. If a change materially affects how we handle existing personal information, we will provide additional notice where appropriate or required by law.

22. Governing law

This Privacy Policy is governed by the laws of New South Wales and applicable Commonwealth laws of Australia.

Nothing in this policy excludes or restricts any privacy, consumer or other legal right that cannot lawfully be excluded.