Privacy policy

• Account details: your name (as printed on your certificate), email address and password. Passwords are stored only as a one-way hash, so we cannot read them.
• Organisation details: if your employer enrols you, your organisation and your role in it (learner or team manager).
• Learning records: your enrolments, video progress, readings opened, workbook responses, quiz attempts and scores, the time you spend actively learning, completion dates and certificates.
• Purchase records: what you bought, the amount and the date. Card payments are processed by our payment provider, Stripe. We never see or store your card number.
• Enquiries: details you give us through the organisation enquiry form or by email, such as your name, organisation, email, phone and message.
• Technical information: a session cookie that keeps you signed in, and standard server logs (such as IP address, browser type and time of access) used for security and troubleshooting.

We do not ask for health information about you. Workbook activities use de-identified case scenarios. Please do not include names or other identifying details of claimants, patients or colleagues in your workbook responses.

We collect information directly from you when you create an account, learn, buy or contact us. If your employer enrols you, they give us your name and work email to set up your place. Our payment provider tells us when a payment succeeds.

• To provide courses, track your progress and unlock modules.
• To issue certificates and let others verify them.
• To keep records that support CPD claims and audits by professional bodies.
• To send emails about your learning, such as invitations, reminders, receipts and password resets.
• To process payments and organisation invoices.
• To respond to enquiries and support requests.
• To mark your written answers and give you feedback. Written answers are marked by an AI marker against the model answer, and some are checked by a pharmacist.
• To improve our courses, using aggregated results such as pass rates and question statistics.
• To meet our legal obligations.

We do not sell personal information, and we do not use it for advertising.

• Your organisation, if it enrolled you: your name, email, course, start date, modules passed, completion date and certificate ID. We do not share your workbook responses or individual quiz answers with your employer.
• Anyone checking a certificate: entering a certificate ID on our verification page shows the name on the certificate, the course and the completion date. Only share your certificate ID with people you want to be able to check it.
• Professional and accrediting bodies (for example ANZIIF, PIEF, AIHS or the Pharmaceutical Society of Australia), when they require evidence to audit a course or your CPD claim: your completion records and learning time.
• Service providers who help us run IMM Academy: website hosting, database hosting, email delivery, payment processing, and an AI service (Anthropic) that marks written answers against the model answer. Only the question, model answer and your response are sent for marking, not your name or email. The provider does not use this data to train its models. They may only use the information to provide their service to us.
• Others where the law requires or allows it.

We host IMM Academy in Australia where our providers allow it. Some service providers, such as our payment, email and AI marking providers, may store or process information in other countries, including the United States. We take reasonable steps to ensure they protect it consistently with the Australian Privacy Principles.

We use one essential cookie to keep you signed in. We do not use advertising or tracking cookies.

Information is sent over encrypted connections, stored in access-controlled systems and available only to authorised IMM staff. We keep learning and certificate records for seven years after you complete a course, so they are available for CPD audits and certificate verification. After that, or earlier on request where we are not required to keep them, we delete or de-identify them.

You can ask to see or correct the personal information we hold about you, or ask us to close your account, by emailing admin@imedmanagement.com.au. We respond within 30 days.

If you have a privacy concern or complaint, contact our Privacy Officer at the address below. We will acknowledge it within 2 business days and respond in writing within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Privacy Officer, Independent Med Management Pty Ltd
Robina QLD 4221
admin@imedmanagement.com.au

We may update this policy. The current version is always on this page, with its effective date.