Privacy of the AML/CTF staff course

In your browser (sent to nobody)

Your progress: the lessons you have read and where you were.
Your role track: the track you chose for the test.
The test in progress: your answers while you take it, in this tab only.
Your last passed test: the questions and your answers, so you can ask for the certificate without retaking it.
Your study time: the minutes a lesson or the test is open and in use. If you buy the certificate, it is printed on its training record.
Your firm’s staff link, if you opened one, and the link to your certificate, if you got one.

All of this sits in your browser’s local storage, on this device. It is not a cookie and nobody else can see it.

The waiting list

We keep your email, the page language and, if you choose, your situation and your percentage for each lesson (never your answers). If you came from an ad, we also note the campaign name in the link. Our basis is your consent, which you can withdraw at any time. Opus Vault keeps the list in its own database at Cloudflare, which hosts this site and may store it outside Australia. The list does not record your IP address, and we do not sell or share it. We use it only to email you once when the certificate and firm plans open.

If you buy or claim a certificate

To issue it we keep: your name, the business you named, your role track, the sector you choose, the test score we re-check, the study time your browser measured, the time you ticked the box, the price and the payment references. No identity document is asked for.
We do not keep your card, email or address: Stripe, the company that takes the payment, collects and keeps them.
The public check: anyone with your certificate number or QR code sees your name, the business, the role track, the course and its lessons, the date and whether it is valid. Nothing else.
How long: an unpaid order is deleted after 48 hours. An issued certificate is kept while it needs to be checkable. If you ask us to delete it, we do, and it can no longer be checked.

If your firm has a plan

The firm’s register holds staff names, role tracks, sectors, dates, scores and certificate numbers. That is more personal data than a single certificate, so each person ticks a box before claiming, and the firm sees only those details.
The firm is responsible for what it does with its own register (for example its CSV download) under the Privacy Act, if it applies to it.
The firm never sees your answers, your email or your payment details. The firm can ask us to cancel a certificate it paid for.

Your rights

You can ask to see, correct or delete your data, or withdraw consent. Email hello@aptiaskills.com. Controller: Opus Vault, an Australian business, ABN 85 543 288 407. You can also complain to the Office of the Australian Information Commissioner.

No tracking, no AI marking