Last updated: May 2026
Privacy Policy
This policy explains how Audit Workshop collects, uses, stores, and protects your personal information when you use our website (auditworkshop.com) and learning platform. By creating an account or enrolling in a course, you accept the practices described here. Changes will be posted on this page and apply to activity going forward, not retroactively.
1. Commitment to Data Security
We apply appropriate technical and organisational measures to protect your information from unauthorised access, alteration, disclosure, or destruction. Access to personal information is restricted to authorised personnel with a legitimate need, bound by confidentiality obligations.
2. What We Collect
When you register, we collect your name, email address, and password (stored in encrypted form). You may optionally provide your profession, bio, country, city, postal code, and address.
When you enrol, we record enrolment details, payment reference, and your course activity including modules completed, quiz results, exam attempts, task submissions, and certificate issuance.
Files you upload for assessment (PDF, Word, Excel) are stored securely and used solely for assessment purposes. Accessible only to you and Audit Workshop training staff.
We collect limited technical information including IP address, device type, and browser information to maintain platform security and performance.
3. How We Use Your Information
Create and manage your account
Process enrolments and payments
Deliver course content, track progress, and issue certificates
Send transactional communications (enrolment confirmation, password reset, course updates)
Respond to support enquiries
Meet legal and accreditation obligations
Improve the platform and training experience
We do not sell your personal information or use it for cross-context behavioural advertising.
4. Payment Information
Payments are processed securely by Stripe, a PCI-DSS compliant payment provider. Audit Workshop does not store credit or debit card details. Payment reference data is retained solely for verification and legal compliance.
5. Sharing Your Information
For participants enrolled in accredited courses, your first name, surname, and email address are shared with Exemplar Global (our accreditation body) for enrolment registration and certificate issuance. Participants provide explicit consent to this sharing via acceptance of our Terms and Conditions at registration. Without this consent we cannot issue an accredited certificate.
We engage trusted third-party providers for cloud hosting, email delivery, payment processing, and file storage. These providers act on our behalf under data processing arrangements and are not permitted to use your information for their own purposes.
Course videos are delivered via a third-party video hosting provider. That provider may collect limited technical data (such as IP address and playback diagnostics) in accordance with its own privacy policy.
We may disclose personal information where required by law, court order, or a government or regulatory authority.
Where an employer has paid for a participant's enrolment, we may confirm enrolment and completion status upon written request. Assessment results or certificate documents will not be shared without the participant's consent.
6. Cookies
Our website uses:
Essential cookies required for login sessions, security, and core platform functionality. Always active.
Analytics cookies that help us understand how the site is used so we can improve it. Only set where consent is obtained.
You can manage cookie preferences through your browser settings. Non-essential cookies are not activated without your consent.
7. Data Storage and Security
Your data is stored on secure cloud infrastructure, primarily within Australia. Where third-party providers store or process data outside Australia, we take steps to ensure appropriate data protection standards consistent with the Australian Privacy Principles.
8. Data Retention
Account and enrolment records are retained for a minimum of 7 years following course completion or withdrawal, in line with Australian record-keeping requirements. Data is deleted or anonymised once retention obligations are met.
9. Your Rights
You have the right to:
Access the personal information we hold about you
Correct inaccurate or incomplete information
Request deletion of your personal information, subject to legal retention requirements
Receive a copy of your data in a portable format
Verified requests are processed within 30 days. We may verify your identity before acting on a request.
10. Australian Privacy Act Compliance
Audit Workshop handles personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you are unsatisfied with our response to a privacy concern, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
11. Children
Our platform is intended for working professionals. We do not knowingly collect personal information from individuals under 18 years of age.
For privacy questions or to exercise your rights, contact us here.