Privacy Policy

MetaRisk Education, part of Tedesen Pty Ltd
Tedesen Pty Ltd ACN 150 657 891
MetaRisk Education ABN 24 150 657 891

Effective date: 23 June 2026

1. About this Privacy Policy

This Privacy Policy explains how Tedesen Pty Ltd, including MetaRisk Education and related business names, brands and services, collects, holds, uses and discloses personal information.

In this policy, “we”, “us” and “our” means Tedesen Pty Ltd and MetaRisk Education. “You” and “your” means visitors, customers, learners, course participants, organisation clients, prospective clients, subscribers and other people who interact with us.

This policy applies to personal information collected through:

  • the MetaRisk Education website;
  • the MetaRisk Education Academy and learning platform;
  • our contact forms, course enrolments, learning activities, surveys, assessments, questionnaires and feedback tools;
  • our email, telephone, social media and business communications;
  • our newsletters and marketing communications; and
  • our services, consulting, education and training activities.

We handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles, the Notifiable Data Breaches scheme, the Spam Act 2003 (Cth) where applicable, and other applicable privacy and data protection laws.

We may update this Privacy Policy from time to time. The current version will be made available on our website. If we make material changes, we will take reasonable steps to bring those changes to your attention.

2. What personal information we collect

The personal information we collect depends on how you interact with us.

We may collect:

  • your name;
  • email address;
  • phone number;
  • organisation, role, profession, seniority or business contact details;
  • account registration details for the Academy or learning platform;
  • course enrolment information;
  • learning progress, quiz responses, assessment responses, certificates, completion records and training history;
  • survey, questionnaire and feedback responses;
  • contact form enquiries and message content;
  • newsletter subscription preferences;
  • payment, billing or transaction information where paid services or courses are offered;
  • technical information such as IP address, browser type, device information, pages visited, referring pages and approximate location;
  • security, fraud prevention and anti-spam information, including information generated by Cloudflare, Turnstile or similar security services;
  • correspondence with us, including email, telephone, online meeting and support records; and
  • any other information you choose to provide to us.

Where an organisation arranges access to our courses, services or learning platform for its employees, contractors, members or participants, we may collect information from that organisation about authorised users, enrolments, learning needs, completion status and reporting requirements.

3. Sensitive information

We do not intentionally collect sensitive information unless it is reasonably necessary for a particular activity and we have your consent, or we are otherwise permitted or required by law to collect it.

Sensitive information may include information about health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal record, biometric information, union membership or other information treated as sensitive under privacy law.

Please do not include sensitive information in contact forms, free-text survey responses, course activities or emails unless we have specifically asked for it and you are comfortable providing it.

If you provide unsolicited sensitive information that we do not need, we may delete, de-identify or securely destroy it where lawful and reasonable to do so.

4. How we collect personal information

We collect personal information directly from you when you:

  • complete a contact form;
  • create an account or enrol in a course;
  • use the Academy or learning platform;
  • complete training, quizzes, surveys, assessments or questionnaires;
  • subscribe to a newsletter;
  • request information, support or services from us;
  • attend a webinar, event, meeting or training session;
  • communicate with us by email, phone, social media or online meeting;
  • purchase a course or service; or
  • otherwise provide information to us.

We may collect personal information from third parties, including:

  • your employer, organisation, membership body or sponsor where they arrange training or services for you;
  • clients and business partners where we provide services involving their employees, contractors, members or stakeholders;
  • learning platform, payment, analytics, email, marketing, security and technology providers;
  • publicly available sources, such as professional websites or business directories; and
  • social media platforms where you interact with us through those platforms.

We may also collect technical and usage information automatically through cookies, analytics tools, server logs, security tools and similar technologies.

5. Why we collect, hold, use and disclose personal information

We collect, hold, use and disclose personal information where reasonably necessary for our business, education and service activities.

This may include using personal information to:

  • provide and manage access to courses, learning content and the Academy;
  • administer learner accounts, enrolments, certificates and completion records;
  • respond to enquiries and provide customer support;
  • deliver education, training, consulting, advisory and related services;
  • provide reports to organisation clients where they have arranged training or services for their people;
  • personalise or improve learning, content, website functionality and user experience;
  • develop and improve our services, tools, courses and resources;
  • manage subscriptions, newsletters and marketing preferences;
  • send service, administrative and security communications;
  • detect, prevent and respond to spam, fraud, security threats, misuse or unauthorised access;
  • maintain website, platform and business security;
  • comply with legal, regulatory, accounting, tax, insurance and contractual obligations;
  • manage complaints, disputes and investigations;
  • respond to data incidents and eligible data breaches;
  • protect our rights, property, systems, users and business interests; and
  • conduct de-identified or aggregated research, reporting, analytics, thought leadership and service improvement.

We do not sell personal information.

6. Learning records, surveys and organisation reporting

If you access our courses or services through an organisation, that organisation may ask us to report on enrolment, participation, completion, certification, assessment outcomes or engagement.

Where we provide reporting to an organisation, we will seek to limit the information to what is reasonably necessary for the relevant education, compliance, governance, assurance or service purpose.

Depending on the arrangement with the organisation, this may include:

  • whether you have enrolled in or completed a course;
  • completion dates;
  • assessment or quiz outcomes;
  • attendance or participation information;
  • certificate or credential information;
  • role or business unit information; and
  • aggregated or de-identified insights about training needs, learning outcomes or risk capability.

We do not provide organisation clients with unnecessary personal information where aggregated or de-identified information is sufficient.

7. Cookies, analytics and online technologies

We use cookies and similar technologies to operate, secure and improve our website and learning platform.

These technologies may be used to:

  • remember preferences;
  • support login and session management;
  • operate forms and course functionality;
  • secure the site and detect suspicious activity;
  • protect forms and login pages from spam or automated abuse;
  • understand how visitors use our website;
  • measure website performance and content engagement; and
  • support analytics, reporting and service improvement.

We may use services such as Google Analytics, Google Site Kit, Cloudflare, Cloudflare Turnstile, Fluent Forms, LearnWorlds, LiteSpeed and other website, learning, security, analytics or hosting technologies.

Some cookies are necessary for the website or learning platform to function. Others support analytics, security, personalisation or marketing. You can manage cookies through your browser settings, although disabling some cookies may affect website, form, login or learning platform functionality.

8. Cloudflare, Turnstile and security services

We use security and infrastructure services, including Cloudflare and Cloudflare Turnstile, to help protect our website, login pages, forms and users.

These services may process technical information such as:

  • IP address;
  • browser and device information;
  • request headers;
  • pages or paths requested;
  • security challenge outcomes;
  • bot or spam signals;
  • timestamps and logs; and
  • other information needed to distinguish legitimate users from automated or malicious activity.

We use this information for security, fraud prevention, spam prevention, website availability, performance and abuse detection.

9. AI-assisted features and automated processing

We may use AI-assisted, algorithmic, rules-based or automated tools to support our services and operations.

This may include using software tools to:

  • help develop or improve course content, templates, guidance and learning materials;
  • generate draft summaries, reports, learning prompts or suggested focus areas;
  • analyse survey, assessment or questionnaire inputs where relevant to a service;
  • improve workflows, content, user experience and service delivery;
  • detect spam, fraud, suspicious activity or security risks;
  • support customer service, administration, quality assurance and internal operations; and
  • provide optional tools or features that users may choose to use.

Unless we specifically tell you otherwise, we do not use AI-assisted tools or automated processing as the sole basis for decisions that produce legal effects, or similarly significant effects, about an individual.

Where we use AI-assisted tools, we aim to use only the information reasonably necessary for the relevant purpose and to apply appropriate contractual, security and governance controls.

From 10 December 2026, where we arrange for a computer program to use personal information to make, or substantially assist in making, decisions that could reasonably be expected to significantly affect an individual’s rights or interests, we will provide information about the kinds of personal information used and the kinds of decisions made or supported by that processing.

10. Marketing communications

We may send you marketing communications where you have consented, where we are otherwise permitted by law, or where you would reasonably expect to receive communications from us in connection with your relationship with us.

Marketing communications may include information about:

  • courses;
  • training programs;
  • learning resources;
  • events;
  • newsletters;
  • risk, governance and compliance insights;
  • service updates; and
  • related products or services.

We will identify ourselves in marketing communications and provide a clear way to unsubscribe or opt out.

You can unsubscribe at any time by using the unsubscribe function in our communications or by contacting us directly.

We will not use address-harvesting software or knowingly use lists generated by address-harvesting software.

11. When we disclose personal information

We may disclose personal information to:

  • learning platform providers, including providers that host or support the Academy;
  • website hosting, security, content delivery and performance providers;
  • form, email, analytics, customer relationship management and marketing service providers;
  • payment processors and billing providers, where payments are enabled;
  • IT, data storage, backup, support and professional service providers;
  • organisation clients where they have arranged training or services and reporting is part of the arrangement;
  • business partners involved in delivering courses, events, training or services;
  • professional advisers, insurers, auditors, lawyers and accountants;
  • regulators, law enforcement bodies, courts, tribunals and government agencies where required or permitted by law;
  • parties involved in a business transfer, restructure, merger, sale or due diligence process; and
  • other parties where you have consented or would reasonably expect us to disclose the information.

We require service providers to handle personal information consistently with applicable privacy laws and to use personal information only for the purpose of providing services to us, unless otherwise permitted by law.

12. Overseas disclosure

Some of our technology, cloud, security, analytics, learning, email, payment and support providers may store or process personal information outside Australia.

Countries where personal information may be processed or accessed may include Australia, the United States, the United Kingdom, countries in the European Economic Area, Singapore, New Zealand and other locations where our service providers or their infrastructure operate.

Where we disclose personal information to overseas recipients, we take reasonable steps to ensure the information is handled in a way that is consistent with Australian privacy requirements, unless an exception applies.

13. Third-party websites and platforms

Our website and communications may contain links to third-party websites, platforms and services, including social media platforms and external learning, payment or content services.

We are not responsible for the privacy practices, security or content of third-party websites or platforms that we do not control. You should review the privacy policy and terms of use of any third-party service you choose to use.

Where the MetaRisk Education Academy is delivered through a third-party learning platform, that platform may also collect and process personal information in accordance with its own privacy policy and terms.

14. How we protect personal information

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

Our security measures may include:

  • access controls;
  • password and authentication controls;
  • multi-factor authentication for administrative access;
  • website firewall and security monitoring;
  • spam and bot protection;
  • encryption in transit where available;
  • secure hosting and cloud service arrangements;
  • role-based access to systems;
  • backup, logging and monitoring controls;
  • staff and contractor confidentiality obligations;
  • data minimisation and retention controls; and
  • incident response processes.

No method of transmission or storage is completely secure. If you believe your interaction with us is no longer secure, please contact us immediately.

15. How long we keep personal information

We keep personal information for as long as reasonably necessary for the purposes for which it was collected, including to provide services, maintain learning records, meet legal obligations, resolve disputes, manage business records and protect our legitimate interests.

Retention periods vary depending on the type of information. For example:

  • contact form enquiries may be retained for business, service and record-keeping purposes;
  • learning records may be retained to evidence completion, certification, compliance or training history;
  • account records may be retained while an account remains active and for a reasonable period afterwards;
  • billing and transaction records may be retained for tax, accounting and audit purposes;
  • marketing records may be retained while you remain subscribed, and suppression records may be kept to ensure we honour opt-out requests;
  • security logs may be retained for security, investigation and compliance purposes; and
  • de-identified or aggregated information may be retained for analytics, research and service improvement.

When personal information is no longer required, we will take reasonable steps to destroy it or de-identify it, unless we are required or permitted by law to retain it.

16. Anonymity and pseudonymity

Where lawful and practicable, you may interact with us anonymously or using a pseudonym.

However, it may not be practical to deal with you anonymously where we need to provide a course, account, certificate, support, paid service, organisation reporting, complaint response or other service that requires us to identify you.

17. Accessing and correcting your personal information

You may request access to the personal information we hold about you.

You may also ask us to correct personal information if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading.

We will respond to access and correction requests within a reasonable period. We may need to verify your identity before responding. In some cases, we may refuse access or correction where permitted by law. If we refuse a request, we will explain the reason where it is reasonable to do so.

If you have an Academy account, you may also be able to update some account details directly through the learning platform.

18. Complaints and privacy enquiries

If you have a question, concern or complaint about how we handle personal information, please contact our Privacy Officer.

We will acknowledge your complaint and aim to respond within a reasonable period, usually within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

19. Data breaches

We maintain processes for identifying, assessing and responding to data incidents.

If we suspect that an eligible data breach has occurred, we will assess the incident as required by law.

Where a data breach is likely to result in serious harm and we have not been able to prevent that risk through remedial action, we will notify affected individuals and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.

20. Children and young people

Our services are generally intended for organisations, professionals, adult learners and business users. They are not directed to children.

If a child or young person accesses our services through an organisation, parent, guardian or educational arrangement, the person arranging that access should ensure that appropriate consent and supervision are in place.

We do not knowingly collect personal information from children where we are not permitted to do so.

21. European Union, United Kingdom and other overseas users

If you are located outside Australia, additional privacy rights may apply under local laws, including the European Union General Data Protection Regulation or the United Kingdom General Data Protection Regulation.

Where those laws apply, our legal basis for processing personal information may include:

  • your consent;
  • performance of a contract;
  • compliance with legal obligations;
  • our legitimate interests in providing, securing and improving our services; and
  • the legitimate interests of our clients or users, where those interests are not overridden by your rights and freedoms.

Depending on the laws that apply, you may have rights to access, correct, erase, restrict, object to processing of, or receive a copy of your personal information. You may also have the right to complain to a relevant data protection authority.

To exercise any applicable rights, contact us using the details below.

22. Contact us

Privacy Officer
Tedesen Pty Ltd
MetaRisk Education

Email: [email protected]
Phone: +61 402 809 065