How data collected through this website and handled in our projects is stored and secured.
This Data and Security Notice explains how CAQA Digital handles the data collected through this website and the client data we work with while delivering web, application and automation projects. CAQA Digital is part of CAQA Groups and is operated by Career Calling International Pty Ltd (ABN 53 162 651 238). This notice should be read together with our Privacy Policy, which sets out your privacy rights in full.
This website is an information and enquiry site for education providers, businesses, government bodies and community organisations. The data it collects is limited to what you choose to submit and standard technical information: contact and enquiry form details (name, organisation, email address, phone number and your project description), your email address if you subscribe to The VET Sector newsletter, and analytics and log data such as pages visited, approximate location, device and browser type.
No payments are taken through this website. There is no cart, checkout or payment form, and we will never ask you to enter card or bank details on this site. Any invoice payments occur outside this website under the terms of your proposal or agreement.
During an engagement we may handle client data such as system credentials, website content, databases, brand assets, staff or user account details, and data inside the systems we build, migrate or integrate. We access this data only as needed to perform the agreed work, treat it as confidential, and do not use it for any other purpose.
Enquiry and newsletter submissions are processed by this website's hosting and form infrastructure. Project files and communications are stored on managed business systems used by CAQA Groups. Client products are hosted on the platforms selected during the project; the storage location and certifications depend on the provider chosen and are confirmed during discovery.
We apply least-privilege access, so credentials and client data are available only to team members working on the relevant engagement. We use unique accounts, strong authentication (including multi-factor authentication where the platform supports it) and secure credential storage rather than sharing passwords over email.
Where backups form part of a project or maintenance plan, their frequency, retention and restore testing are stated in the plan. Clients remain responsible for backups of systems we do not manage.
If we become aware of a security incident affecting this website or data we hold for a client, we assess and contain the incident, notify affected clients without undue delay, and cooperate on remediation. Where the Notifiable Data Breaches scheme under the Privacy Act 1988 applies, notification obligations are met by the responsible entity. Suspected incidents can be reported to info@caqa.com.au.
Clients remain responsible for the lawful collection of data inside their own systems, the accuracy of records they manage, the conduct of their own users and administrators, the security of credentials we hand over, and the third-party subscriptions registered in their name. We advise on good practice, but governance of client systems rests with the client.
We retain project data for as long as needed to deliver and support the engagement and to meet legal and accounting obligations. At the end of an engagement, client credentials and materials are returned or securely deleted on request, except where retention is required by law or for defect-period support.
Requests to access or correct personal information, privacy questions and security concerns can be sent to info@caqa.com.au, raised by phone on 1800 266 160, or lodged through our contact page. Our Privacy Policy explains the complaint pathway in detail.
To Receive Updates And Offers
