1. About this policy
Cyber Hub Pty Ltd ABN 81 636 564 193, trading as Cyber Revolution (we, us, our), is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains how we collect, hold, use and disclose personal information, and how you can access it, correct it or complain.
It applies to everyone we deal with: prospective students, students, former students, employer and industry contacts, people who contact us, and visitors to our website.
This policy forms part of our student Terms and Conditions. Where a student is concerned, the Terms govern the contract between us and this policy governs how we handle personal information.
Effective 29 October 2026. It replaces the policy effective 1 December 2025.
2. What personal information we collect
We collect only what we need for the purposes set out in section 5.
| Who you are | What we collect |
| Prospective student | Name, email, phone, postcode, employment and education background, your goals and circumstances as you describe them on a call or in a form, and the record of our communications with you |
| Student | The above, plus your date of birth, identity and enrolment details, your Package and Order details, payment and billing information, your course progress and platform activity, your examination registrations and results, your CV and career-services records, and the record of our communications with you |
| Former student | Your contact details, certifications achieved, and placement and employment outcomes |
| Employer or industry contact | Name, role, organisation, business contact details, and the record of our communications with you |
| Website visitor | IP address, device and browser information, pages viewed, and information collected by cookies and analytics (see section 13) |
Examination results. We receive your examination results from the certification body and the examination provider as the party that purchased your examination voucher. We use them to administer your Package, release further vouchers and determine when career services begin.
Payment information. Card and bank details are collected and held by our payment and finance providers, not by us. We hold the transaction record.
You do not have to identify yourself for general enquiries, though we usually cannot enrol or support you if you do not.
3. Sensitive and optional information
We ask some students for information about their background so that we can measure and report the impact of our programs and meet the reporting obligations attached to funding and industry partnerships.
This covers cultural background, Aboriginal or Torres Strait Islander status, residency or migration status, and income band.
Four things apply to all of it.
- It is optional. You may decline any or all of it. Declining does not affect your enrolment, your Course Fee, the support you receive, or your access to career services.
- We collect it only with your consent. Cultural background and Aboriginal or Torres Strait Islander status are sensitive information under the Privacy Act, and we collect them only where you have consented and the information is reasonably necessary for our functions.
- We use it in aggregate only. We collect it for impact reporting and funding purposes. Where we use it, we use it only in de-identified, aggregated form.
- It is never used in an individual decision. It plays no part in whether you are enrolled, how you are supported, which employers you are introduced to, or any other decision we make about you. It is held separately from the records used for placement.
You can withdraw your consent at any time under section 11. If you do, we will stop using the information and delete it from our records.
4. How we collect it
From you. Web forms and enquiry forms, phone and video calls, email and messages, your onboarding session, documents you send us, and your activity on the online learning platform.
From others, where you have authorised it or the law allows. Examination results from the certification body and the examination provider; payment and account status from our payment and finance providers; feedback from an employer we have introduced you to; and referral details from a person or organisation that refers you to us.
Automatically. Cookies and analytics on our website (section 13), and activity logs on the learning platform.
Unsolicited information. If we receive personal information we did not ask for and could not have collected ourselves, we will destroy or de-identify it where the law permits.
5. Why we collect, hold, use and disclose it
We use personal information to:
- answer your enquiry and assess whether our Packages suit you;
- enrol you, onboard you and give you access to the online learning platform;
- deliver your training and mentoring, and track your progress;
- register you for examinations, issue examination vouchers and record your results;
- collect the Course Fee and administer payment plans and finance arrangements;
- deliver career services and, with your consent, introduce you to employers;
- communicate with you about your enrolment and, where you have not opted out, about our other services (section 8);
- improve our courses, our materials and our service;
- report program impact and outcomes in de-identified, aggregated form; and
- meet our legal, regulatory and insurance obligations and resolve disputes.
We do not sell personal information, and we do not disclose it for another organisation’s marketing.
6. Who we disclose it to
| Recipient | What we disclose | Why | Where |
| Our online learning platform and content provider | Name, email and enrolment details needed to create and maintain your account | So you can access your course materials | United States |
| The certification body that awards your Certifications | Name, identifier and voucher details | To register you for certification examinations | United States |
| The examination provider that delivers and proctors your examinations | Name, identifier and booking details | To schedule and proctor your examination | United States |
| Our payment provider and third party finance providers | Name, contact details and the information needed to process payment or assess an application you make | To collect the Course Fee and administer payment plans and finance | Australia |
| Employers and recruiters | Your name and contact details, the certifications you have achieved, and your CV | To introduce you to employment opportunities, with your consent under clause 23.2 of the Terms | Australia, unless you agree otherwise |
| Our service providers: email, customer relationship management, scheduling, video meetings, call and meeting recording, workflow automation, file storage and analytics | Only what the provider needs to perform its function | To run our business | United States |
| Our professional advisers, insurers and auditors | What is necessary for the engagement | Legal, insurance and audit purposes | Australia |
| Regulators, courts and law enforcement | What is required or authorised | Where the law requires or permits it | Australia |
We require our service providers to handle personal information in accordance with this policy and to use it only for the purpose we engaged them for.
We name our service providers by the function they perform rather than by company name, because providers change.
If our business is sold or restructured, we may disclose personal information to the acquirer. We will tell you if that happens and the acquirer will be bound by this policy or one no less protective.
7. Disclosure outside Australia
Your personal information is disclosed outside Australia. It is a necessary part of how the program works: the learning platform, the certification body and the examination provider are all overseas.
The country in which overseas recipients are likely to be located is the United States. Our online learning platform provider, the certification body and the examination provider are based there, as are the providers of our email, customer relationship management, scheduling, video meeting, call and meeting recording, workflow automation, file storage and analytics services.
Several of these providers operate global infrastructure and may store or process personal information in other countries. Where that is the case we take the steps described below.
Before disclosing your personal information to an overseas recipient we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles, including by imposing contractual obligations on how the information is handled. Those steps do not give you the protection of Australian law in the recipient’s country, and you may not be able to enforce this policy against an overseas recipient directly. If you have a concern about how an overseas recipient has handled your information, raise it with us under section 12 and we will deal with it.
You cannot be enrolled without this disclosure. If you do not consent to it, we cannot deliver the Package.
8. Marketing and how to opt out
We may send you information about our courses, events and services by email, SMS and phone, where you would reasonably expect it or you have consented.
Every marketing email and SMS carries an unsubscribe link. You can also opt out at any time by contacting us under section 15, and we will action it promptly.
Opting out of marketing does not stop messages we need to send you about your enrolment, your payments, your examinations or your account. Those are service messages, not marketing.
We do not provide your personal information to other organisations for their own marketing.
9. How we hold it, and for how long
We hold personal information in secure cloud systems operated by us and by our service providers. We protect it with access controls based on role, multi-factor authentication, encryption in transit, logging, and internal policies on how staff handle student information. Staff are given access only to what their role requires.
We keep personal information only as long as we need it for the purposes in section 5 or as the law requires, and then destroy or de-identify it.
| Information | Retention |
| Student enrolment, course and examination records | 7 years from the end of your Enrolment Period |
| Financial and payment records | 7 years, as the tax law requires |
| CV, career services and placement records | 7 years from the end of career services, then de-identified |
| Enquiry records where you did not enrol | Up to 7 years from last contact |
| Call recordings | Up to 7 years |
| Aggregated impact reporting data | Indefinitely, de-identified |
Where a complaint, claim or investigation is on foot, we keep the records it concerns until the matter is resolved.
10. Data breaches
We are covered by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth).
If we suspect a data breach, we contain it and assess it within 30 days. Where we conclude that a breach is likely to result in serious harm to you and we cannot prevent that harm through remedial action, we will notify you and the Office of the Australian Information Commissioner as soon as practicable. Our notice will describe the breach, the information involved, and what we recommend you do.
If you believe your information held by us has been compromised, tell us immediately using the details in section 15.
11. Access, correction and withdrawing consent
Access. You can ask us for a copy of the personal information we hold about you. Ask under section 15. We will respond within 30 days and will not charge you for making the request, though we may charge a reasonable amount for the cost of providing access. We may refuse access in the limited circumstances the Privacy Act allows, and if we do we will tell you why in writing and how to complain.
Correction. If information we hold is inaccurate, out of date, incomplete, irrelevant or misleading, tell us and we will correct it. If we decide not to, we will tell you why in writing, and you can ask us to attach a statement to the record noting that you disagree.
Withdrawing consent. You can withdraw a consent you have given us at any time by telling us. Three apply most often:
- the consent in clause 23.2 of the Terms to disclose your details to employers and recruiters, after which we will stop making introductions but your enrolment and the rest of your support are unaffected;
- the consent to collect the background information in section 3, after which we will stop using it and delete it; and
- consent to marketing, which you can withdraw under section 8.
We cannot deliver the Package without the disclosures in section 6 that are necessary to deliver it, so those are not consents you can withdraw while remaining enrolled.
12. Complaints
If you think we have breached the Australian Privacy Principles or mishandled your personal information, tell our Privacy Officer using the details in section 15. Set out what happened and what you would like us to do.
We will acknowledge your complaint within 5 business days and respond within 30 days. If we need longer we will tell you why and when you can expect a response.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
13. Our website, cookies and analytics
Our website uses cookies and similar technologies to make the site work, remember your preferences, and measure how the site is used. Some are set by third party analytics and advertising providers.
You can block or delete cookies in your browser settings. Parts of the site may not work properly if you do.
Our website may link to other sites. We are not responsible for how those sites handle your personal information, and their own privacy policies apply.
14. Changes to this policy
We may update this policy. The current version is always available on our website and carries its effective date.
Where a change materially affects how we handle your personal information, we will tell you before it takes effect.
15. Contact us
Privacy Officer, Cyber Revolution
Email: info@cyberrevolution.com.au
We will respond to a privacy enquiry within 30 days.