1 Information We Collect

Look, we only collect what we need to provide our services properly. Here's what that actually means in practice:

What We Don't Collect

We don't track your social media activity. We don't purchase data about you from third parties. And we're not interested in knowing more about you than we need to deliver solid financial education services.

2 How We Use Your Information

Everything we collect serves a purpose. We're not hoarding data for the sake of it.

• Delivering the learning programs and financial interpretation tools you've signed up for
• Sending you updates about your account, upcoming courses, or important changes to our services
• Improving our platform based on how people actually use it (not how we think they use it)
• Responding to your questions and support requests—usually within 24 hours on business days
• Meeting our legal obligations under Australian financial and data protection regulations
• Preventing fraud and maintaining security across our systems

3 Data Storage and Security

Your data lives on secure servers within Australia. We use encryption both when data moves between your device and our servers, and when it sits in storage.

Our Security Measures Include:

• SSL/TLS encryption for all data transmission
• Regular security audits and vulnerability assessments conducted quarterly
• Multi-factor authentication requirements for our staff accessing sensitive systems
• Automated backup systems with encrypted storage
• Access controls limiting who within our organization can view what information
• Regular staff training on data protection and security protocols

But let's be honest—no system is 100% bulletproof. We do our absolute best to protect your information, but if a breach ever happened, we'd notify you within 72 hours as required by Australian law.

4 Your Rights Under Australian Law

Australian privacy law gives you specific rights over your personal information. Here's what you can actually do:

To exercise any of these rights, just email us at support@holverinaq.com. We verify your identity first (for obvious security reasons), then process your request.

5 Sharing Your Information

We keep your information within our organization whenever possible. The few exceptions:

Service Providers

We work with carefully selected companies that help us deliver our services—cloud hosting providers, email delivery services, payment processors. These providers can only use your data for the specific services they provide to us, and they're bound by confidentiality agreements.

Legal Requirements

If Australian law enforcement or regulatory bodies request information through proper legal channels, we comply. We've received three such requests since 2023, all related to fraud investigations.

Business Transfers

If holverinaq were ever acquired or merged with another company, your information would transfer as part of that transaction. You'd be notified beforehand and given options.

6 Cookies and Tracking

We use cookies to keep you logged in and remember your preferences. That's about it for the essential ones.

We also use analytics cookies to understand how people use our platform—which pages get visited most, where users spend time, what features cause confusion. This helps us make improvements based on actual behavior rather than guesswork.

You can disable cookies in your browser settings, though some features might not work properly if you do. The login system definitely needs them.

7 Data Retention

We don't keep information longer than necessary. Here are our retention periods:

• Active account data: Retained while your account is active
• Financial records and transaction history: Seven years (Australian tax law requirement)
• Learning progress and course completion records: Five years after program completion
• Support correspondence: Three years from last contact
• Marketing communications records: Until you unsubscribe, then deleted within 30 days
• System logs and technical data: 90 days unless needed for security investigations

When we delete data, it's gone from our active systems within 30 days and completely removed from backups within 90 days.

8 International Data Transfers

Your information stays in Australia. We don't transfer data overseas unless absolutely necessary, and when we do (like using certain cloud services with international infrastructure), we ensure those providers meet Australian privacy standards.

If you're accessing our services from outside Australia, your data still gets processed under Australian privacy law.

9 Children's Privacy

Our services are designed for adults in professional or business contexts. We don't knowingly collect information from anyone under 18. If we discover we've accidentally collected such information, we delete it immediately.

Parents or guardians who believe their child has provided us with information should contact us right away.

10 Changes to This Policy

We update this policy when our practices change or when regulations evolve. The last update was March 2025. When we make significant changes, we'll email active users at least 30 days before the changes take effect.

Minor clarifications or additions might happen without notification, but we always update the date at the top.