Last updated: July 2026

CreateOne Pty Ltd (ABN 64 108 635 249) ("CreateOne", "we", "us", "our") is committed to protecting the privacy of individuals who visit our website, purchase our products and services, or otherwise interact with us. This Privacy Policy explains how we collect, use, store, disclose and protect your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

We may collect the following types of personal information:

Identity information: name, email address, phone number, job title, and organisation name — provided when you submit a contact or inquiry form, create an account, or purchase a product.
Account information: email address and encrypted password when you register for an account to access our learning platform or manage your membership.
Payment information: billing details processed securely by our third-party payment processor, Stripe. We do not store your full credit card number, expiry date or CVV on our servers. We may retain a Stripe customer ID, the last four digits of your card, and transaction references for record-keeping purposes.
Subscription and purchase information: details of the products, courses, memberships or services you purchase, including subscription status, plan type, and billing cycle.
Usage data: pages visited, referral URLs, browser type, device information, and session duration — collected automatically through essential and analytics cookies.
Communications: the content of messages you send us via contact forms, email, or other channels.

2. How We Use Your Information

We use your personal information for the following purposes:

To provide, manage and improve our services — including processing purchases, managing memberships, provisioning access to online courses, and delivering customer support.
To process payments securely through Stripe and to maintain accurate billing records.
To communicate with you — responding to inquiries, sending order confirmations, subscription updates, and (where you have opted in) marketing communications.
To analyse website usage and improve user experience, including through aggregated and anonymised analytics.
To comply with legal obligations, enforce our Terms of Service, and protect against fraud or misuse.

We do not sell, rent or trade your personal information to third parties for marketing purposes.

3. Third-Party Service Providers

We share personal information only with trusted third-party providers who assist us in operating our business, and only to the extent necessary to perform their services:

Stripe — payment processing. Stripe's privacy policy: stripe.com/au/privacy.
Hosting and infrastructure providers — for website hosting, database management, and application delivery.
Learning management system (LMS) — to provision user accounts and deliver course content on our external learning platform.
Analytics tools — for understanding website usage in aggregate.

We require all third-party providers to handle your data in accordance with applicable privacy laws and to implement appropriate security measures.

4. Data Storage & Security

Your data is stored securely using industry-standard measures including:

Encryption in transit (TLS/SSL) and at rest.
Role-based access controls limiting data access to authorised personnel only.
Secure authentication mechanisms including hashed passwords and session management.
Regular security monitoring and updates.

Your data may be stored on servers located in Australia and/or overseas (including the United States) through our infrastructure and payment providers. Where data is transferred overseas, we take reasonable steps to ensure it is handled in accordance with Australian privacy standards.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Payment records are retained for a minimum of seven years to comply with Australian tax and record-keeping obligations.

5. Cookies

Our website uses:

Essential cookies: required for core functionality such as authentication, session management, and form submissions.
Analytics cookies: used to understand how visitors interact with our site. These cookies collect anonymised data and do not personally identify you.

You can manage or disable cookies through your browser settings. Disabling essential cookies may affect website functionality.

6. Your Rights

Under the Australian Privacy Principles, you have the right to:

Access the personal information we hold about you.
Request correction of any inaccurate, incomplete or out-of-date information.
Request deletion of your personal data, subject to our legal and operational retention obligations.
Withdraw consent for marketing communications at any time by clicking the unsubscribe link in any email or contacting us directly.
Lodge a complaint if you believe we have breached the Privacy Act, either with us directly or with the Office of the Australian Information Commissioner (OAIC).

To exercise any of these rights, please contact us using the details below.

7. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

9. Contact

If you have questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, please contact us at:

CreateOne
PO Box 9174, Brighton VIC 3186, Australia
Email: info@createone.com
Phone: +61 1300 885 703