Privacy Policy

Privacy Policy

Law & Cyber Pty Ltd (ABN 68 629 258 377)

This Privacy Policy explains how Law & Cyber Pty Ltd (ABN 68 629 258 377) (Law & Cyber, we, us, our) collects, holds, uses and discloses personal information in connection with the Platform and the Products (Modules and Compliance Packs) we make available, as those terms are defined in our Terms of Use. This Privacy Policy should be read together with our Terms of Use, which also govern your access to and use of the Platform and our Products.

Law & Cyber is a small business operator within the meaning of the Privacy Act 1988 (Cth) and is generally not required to comply with that Act, including the Australian Privacy Principles (APPs). We endeavour to align our privacy practices with the APPs as far as reasonably practicable, and this Policy is written with that alignment in mind, however in doing so we have not formally opted in to the requirements of the Privacy Act.

1. Information we collect

When you create an Account, purchase or access a Product, or otherwise interact with the Platform, we may collect:

your name, business email address and company you work for;
records of the Products you access, complete, or purchase, including completion status and any certificate issued;
any survey responses, feedback, or other information you choose to provide to us;
if you access a Product through an Authorised Party, information shared with us by that Authorised Party as described in section 4 below; and
limited technical information about your device and browser, collected automatically through the Platform to support its operation.

Payments made through the Platform are processed by a third-party payment processor. See section 6 for further details about how payment information is handled.

2. How we use your information

We use your personal information to:

create and administer your Account and provide you with access to Products;
communicate with you about your Account, your access to and completion of Products, and any queries you raise;
verify and report on completion of Products where you have accessed them through an Authorised Party;
improve our Products and the Platform; and
other reasonable internal business purposes connected with operating Law & Cyber.

3. Marketing communications

Separately from creating an Account and accepting our Terms of Use and this Privacy Policy, you may choose to opt in to marketing and promotional communications from us about our Products, services and offers, via an invitation in the Module or Compliance Pack in which you enrol. We send these communications only where you have accepted that invitation; your consent is not given by accepting our Terms of Use or this Privacy Policy. These communications may be sent by email or other electronic means and will include a functional unsubscribe facility.

You may withdraw your consent to marketing at any time by using the unsubscribe facility in any marketing communication, or by contacting us at [email protected]. Declining or withdrawing marketing consent does not affect your access to or use of any Product.

4. Authorised Parties

From time to time, we make Products available through Authorised Parties, being organisations that have a separate written agreement with us to provide or refer their members, insureds, employees or affiliated persons to a Product. If you access a Product through an Authorised Party, we and that Authorised Party may share your name, email address, and details of whether you have completed the relevant Product, and any survey results or feedback you provide in connection with that Product, for the purpose of administering, verifying, and reporting on that access, and for other reasonable business purposes connected with that arrangement.

5. Disclosure to third parties

We may disclose your personal information to:

Thinkific Labs Inc., which hosts the Platform;
Stripe, which processes payments made through the Platform;
our email marketing service provider, where you have consented to receive marketing communications;
an Authorised Party, in the circumstances described in section 4; and
a prospective or actual purchaser, assignee, or successor of Law & Cyber's business, in connection with a sale, merger, or reorganisation, subject to appropriate confidentiality protections. We will take reasonable steps to notify you if your personal information is transferred to a new entity as a result of such a transaction.

We may also disclose personal information where required by law, including in response to a court order, subpoena, or lawful request from a regulator or law enforcement body.

6. Payment information

Payments made through the Platform are currently processed by Stripe. Full card details are entered directly with Stripe and are not visible to us. If our payment arrangements change, we will update this Policy accordingly. Stripe's own privacy and security practices govern how it handles your payment information, and we recommend you review Stripe's privacy policy if you wish to understand this further.

7. Overseas disclosure

Some of our service providers may store or process personal information on servers located outside Australia, including in the United States and Canada. Where this occurs, we take reasonable steps to ensure that any overseas recipient handles your personal information in a manner consistent with the APPs, including through the service provider's own contractual and security commitments.

8. Security

We take reasonable technical and organisational precautions consistent with an organisation of our size to protect the personal information we hold from misuse, loss, unauthorised access, modification, or disclosure. In the event we become aware of a data breach that we reasonably believe may cause serious harm to affected individuals, we will take reasonable steps to notify those individuals. No method of electronic storage or transmission is completely secure, and we cannot guarantee the absolute security of information transmitted to or stored on the Platform.

9. Access and correction

You may ask us to provide you with access to, or to correct, any personal information we hold about you by contacting us at [email protected]. We will respond to your request within 30 days.

10. Complaints

If you have a concern about how we have handled your personal information, please contact us at [email protected] so we can look into it. As Law & Cyber is not currently required to comply with the Privacy Act 1988 (Cth), the complaint handling mechanisms available under that Act, including the Office of the Australian Information Commissioner, do not apply to Law & Cyber. We will nonetheless take any complaint seriously and respond to you directly.

11. Changes to this Policy

We may update this Privacy Policy from time to time by posting a revised version on the Platform. We will take reasonable steps to notify you of any material changes, including by email where practicable. Your continued use of the Platform or a Product after a change is posted and notified to you constitutes your acceptance of the updated Policy.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at:

Law & Cyber Pty Ltd

ABN 68 629 258 377

[email protected]

Effective date: 7 July 2026