Privacy Policy

1. What We Collect

When you purchase

Full name, email address, country of residence
Transaction details (product, price, date, licence tier, Licence Keys)
Payment card details are collected by Stripe directly — MXM Institute does not receive or store card details

When you visit the website

Device and browser type, pages visited, navigation path
IP address (aggregate analytics only — not linked to identity)
Information submitted through contact forms

MXM Institute does not intentionally collect sensitive information (health, racial origin, religious beliefs, etc.). We do not collect personal information from individuals under 18.

2. How We Use It

Purpose	Information Used
Process purchase and deliver product	Name, email, transaction details, Licence Keys
Customer support and enquiries	Name, email, message content
Notify of material product updates (e.g. significant WHS legislative changes)	Email address
Maintain licence records for audit and dispute resolution	Name, email, transaction details, Licence Keys
Website improvement via aggregate analytics	Usage data (not linked to identity)
Comply with legal obligations	As required by law

Direct marketing: MXM Institute separates transactional communications (product delivery, legislative update notifications) from marketing communications (new products, offers). Marketing emails include a functional unsubscribe link. Unsubscribing from marketing does not affect transactional communications. Contact mxminstitute@outlook.com to unsubscribe.

3. Who We Share It With

Provider	Purpose	Location
Gumroad Inc.	Payment processing, product delivery, Licence Keys	United States
Stripe Inc.	Payment card processing (via Gumroad)	United States
[Website host]	Website hosting	[Location]
[Analytics provider]	Aggregate, anonymised website analytics	[Location]

By purchasing from MXM Institute, you acknowledge that your personal information will be transmitted to and processed in the United States by Gumroad and Stripe. MXM Institute takes reasonable steps to ensure these overseas recipients handle personal information consistently with the Australian Privacy Principles and remains accountable under APP 8.1.

MXM Institute does not sell personal information or disclose it for third-party marketing.

4. Automated Decision-Making

MXM Institute does not use automated decision-making systems to make decisions that have a legal or similarly significant effect on individuals.

5. Security and Retention

Purchase records are retained for the duration of your licence and 7 years thereafter for legal and tax compliance. Contact communications are retained for 3 years. MXM Institute takes reasonable steps to protect personal information using reputable third-party platforms and access controls. In the event of a data breach likely to cause serious harm, MXM Institute will comply with the Notifiable Data Breaches scheme (Privacy Act 1988, Part IIIC).

6. Your Rights

Access and correction: Contact mxminstitute@outlook.com with your name, email, and a description of the information requested. We will ask for the minimum information necessary to verify your identity. We respond within 30 days.

Complaints: Contact MXM Institute first. If unresolved within 30 days, contact the OAIC at oaic.gov.au or 1300 363 992.

7. Cookies

Essential cookies are required for the website to function. Analytics cookies collect aggregate, anonymised data and can be disabled via browser settings. Third-party cookies set by Gumroad during checkout are governed by Gumroad's privacy policy.

8. Changes

Material changes will be notified by email at least 14 days before taking effect. Current version always available at this URL.

Contact

mxminstitute@outlook.com • Response within 5 business days

Other legal documents