Privacy Policy¶
RTOpacks · Effective date: 19 March 2026 · Operated by UCCA Inc
Overview¶
RTOpacks is a curriculum infrastructure platform for registered training organisations (RTOs) in Australia. This policy explains what personal information we collect, why we collect it, how we use it, and your rights in relation to it.
We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Who we are¶
RTOpacks is operated by UCCA Inc (DBA: Universal Capability Certification Authority), a Delaware C-Corporation (EIN 84-4522608) with its principal place of business at 1207 Delaware Ave #1678, Wilmington DE 19806, USA.
For Australian privacy matters, our nominated contact is: privacy@ucca.online
What information we collect¶
Information you provide directly¶
- Account registration: name, email address, organisation name, RTO number
- Subscription and billing: contact details for invoicing (payment card data is handled by our payment processor, Stripe, and is never stored on our servers)
- Support enquiries: any information you include when contacting us
Information collected automatically¶
- Usage data: pages visited, features accessed, session duration — collected in aggregate for product improvement
- Device and connection data: browser type, operating system, IP address — used for security and to diagnose technical issues
- Cloudflare infrastructure data: Cloudflare processes network traffic on our behalf and may log connection metadata as part of DDoS protection and performance services. Refer to Cloudflare's Privacy Policy for details.
Information we do not collect¶
We do not collect sensitive information as defined under the Privacy Act (including health, racial or ethnic origin, political opinions, religious beliefs, criminal record, or biometric data) unless you voluntarily provide it in a support context, in which case it will be used only to resolve your enquiry.
How we use your information¶
| Purpose | Lawful basis |
|---|---|
| Providing and improving the RTOpacks platform | Contract performance |
| Sending transactional communications (receipts, account notices) | Contract performance |
| Responding to support enquiries | Legitimate interest |
| Security monitoring and fraud prevention | Legitimate interest |
| Aggregate usage analytics | Legitimate interest |
| Compliance with legal obligations | Legal obligation |
We do not sell, rent, or trade your personal information. We do not use your information for behavioural advertising.
Who we share information with¶
We share personal information only with:
- Stripe — payment processing. Stripe Privacy Policy
- Cloudflare — infrastructure, DDoS protection, DNS. Cloudflare Privacy Policy
- Transactional email provider — delivery of account-related emails only
- Law enforcement or regulators — where required by applicable law
We do not share data with data brokers, advertisers, or analytics platforms that build profiles on individuals.
Data storage and security¶
Data is stored in Cloudflare's global infrastructure with servers in the United States and, where applicable, Australia. We apply encryption in transit (TLS 1.2 minimum) and at rest. Access to production systems is restricted by role and protected by multi-factor authentication.
No system is perfectly secure. If we become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.
Data retention¶
We retain personal information for as long as your account is active and for a reasonable period thereafter to fulfil legal and contractual obligations. Account data is deleted upon written request, subject to any retention obligations required by law.
Your rights¶
Under the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or out-of-date information
- Request deletion of your information (subject to legal retention requirements)
- Complain to us if you believe your privacy has been breached
To exercise any of these rights, contact privacy@ucca.online. We will respond within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.
Cookies¶
See our Cookie Policy for details on how we use cookies and similar technologies.
Changes to this policy¶
We may update this policy from time to time. The effective date above reflects the most recent revision. We will notify registered users of material changes by email.
Contact¶
Privacy enquiries: privacy@ucca.online
RTOpacks is operated by UCCA Inc · 1207 Delaware Ave #1678, Wilmington DE 19806 · Delaware C-Corp · EIN 84-4522608