Privacy of the SMSF auditor CPD course

In your browser (sent to nobody)

Your progress: the lessons you have read and where you were, so you can carry on.
The test in progress: your answers while you take it, in this tab only, in case you reload.
Your last passed test: the questions and your answers, so you can ask for the certificate without retaking it.
Your study time: the minutes a lesson or the test is open and in use. If you buy the certificate, it is printed on it.
The link to your certificate, if you buy one.

All of this sits in your browser’s local storage, on this device. It is not a cookie and nobody else can see it.

Your answers and AI

Your test answers are marked in your browser. They are not sent to any AI service. We used AI to help write the course; we do not use it on your data.

The waiting list

We keep your email, the page language and, if you choose, how you are registered and your percentage for each lesson (never your answers). If you came from an ad, we also note the campaign name that was in the link. Our basis is your consent, which you can withdraw at any time. Opus Vault keeps the list in its own database at Cloudflare, the company that hosts this site; Cloudflare may store it outside Australia. The list does not record your IP address, and we do not sell or share it. We use it only to email you once when the certificate opens, and we delete it a year after you join if the certificate has not opened.

If you buy the certificate

To issue it we keep: your name, how you are registered, your SMSF auditor number (SAN) in its partly hidden form if you gave one (the full number never leaves your browser), the test score we re-check, the study time your browser measured, the time you ticked the two boxes, the price and the payment references. No identity document is asked for. We use this to carry out the contract with you.
We do not keep your card, email or address: Stripe, the company that takes the payment, collects and keeps them to charge you and send your receipt.
The public check: anyone with your certificate number or QR code sees your name, the course and its topics, the date, the partly hidden registration number if you gave one, and whether it is valid. Nothing else.
Where: in Opus Vault’s database at Cloudflare, which may be outside Australia.
How long: an unpaid order is deleted after 48 hours. An issued certificate is kept while it needs to be checkable. If you ask us to delete it, we do, and it can no longer be checked.

Your rights

You can ask to see, correct or delete your data, or withdraw consent. Email hello@aptiaskills.com. We are Opus Vault, an Australian business, ABN 85 543 288 407. If we do not resolve a complaint, you can take it to the Office of the Australian Information Commissioner.

Most small businesses (annual turnover of $3 million or less) are not covered by the Privacy Act 1988, but some are. A small business can opt in to the Act. [S91]

No tracking