Last updated: September 27, 2025
gpmate.com.au (“we”, “our”, “us”) respects your privacy and is committed to protecting the personal information you provide when accessing and using our website and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and other applicable laws governing data protection and cyber security in Australia.
By using our services and website, you agree to the terms of this Privacy Policy.

1. Scope and Purpose
   This Privacy Policy applies to all users of gpmate.com.au, including GP trainees purchasing mock exams for the RACGP AKT (Applied Knowledge Test) and KFP (Key Feature Problem) Exam.
   The purpose of this Privacy Policy is to:
   • Explain the types of personal information we collect and how it is used.
   • Ensure compliance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
   • Describe how your personal information is stored, secured, and disclosed.
   • Inform you of your rights to access, correct, or complain about how your information is handled.
2. Collection of Personal Information
   2.1 Types of Information Collected
   We may collect the following categories of personal information when you use our website or purchase services:
   • Identity Information: Name, email address, contact number, billing address.
   • Account Information: Login details, password (encrypted), purchase history.
   • Payment Information: Payment method, limited credit/debit card details (processed securely through third-party payment providers; we do not store full card details).
   • Performance Data: Exam completion time, performance summaries, test scores.
   • Technical Data: IP address, device type, browser version, operating system, geolocation (if enabled).
   • Usage Data: Pages visited, time spent on site, cookies, analytics tracking.
   We do not intentionally collect sensitive information (e.g., health records, ethnicity, religious beliefs) unless voluntarily provided and strictly necessary for our services.

2.2 Methods of Collection
We collect information through:
• Online forms (exam registration, purchase checkout, contact forms).
• Automated tracking tools (cookies, analytics, log files).
• Email correspondence between you and gpmate.com.au.
• System-generated reports of your exam performance.
All collection is done fairly, lawfully, and in compliance with APP 3 (Collection of Solicited Personal Information).

3. Use of Personal Information
   Your personal information may be used for the following purposes:
4. Service Delivery – to register you for mock exams, provide exam access, and deliver performance summaries.
5. Email Communication – to send performance reports, updates, reminders, and service-related notifications.
6. Payment Processing – to verify transactions and process payments securely.
7. Exam Integrity – to enforce rules (e.g., no screenshots, copying, or sharing of exam content).
8. Cohort Reporting – aggregated exam data may be used to generate comparative cohort-level reports (without identifying individuals).
9. Legal Compliance – to comply with applicable Australian laws and respond to lawful requests from authorities.
10. Website Improvement – to analyse usage data, improve website functionality, and enhance the exam simulation experience.
    We do not sell, rent, or trade your personal information for marketing purposes.
11. Disclosure of Personal Information
    Your information may be disclosed to:
    • Service Providers: Payment processors, IT support, email service providers, and data storage partners.
    • Legal Authorities: If required by law, court order, or regulatory bodies under Australian law.
    • Business Partners: Only where necessary for service delivery and under confidentiality agreements.
    We do not disclose your personal information outside Australia unless:
    • The recipient country has privacy protections substantially similar to the APPs.
    • You consent to the transfer.
    • We have taken reasonable steps to ensure your data will remain protected (APP 8 – Cross-border disclosure of personal information).
12. Storage and Security
    We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification, or disclosure as required by APP 11.
    Measures include:
    • Encryption of data during transmission (SSL/TLS).
    • Password Protection for accounts and databases.
    • Secure Servers hosted in Australia with reputable providers.
    • Access Controls limiting staff access to personal data.
    • Regular Cybersecurity Audits in line with Australian Cyber Security Centre (ACSC) guidelines.
    While we take all reasonable measures, no system is completely secure. You acknowledge that you provide your information at your own risk.
13. Cookies and Tracking
    We use cookies and similar technologies to:
    • Remember your login sessions.
    • Analyse website performance via analytics tools.
    • Customise user experience.
    You can disable cookies in your browser, but some website features may not function properly.
14. Data Retention
    • Exam-related performance data will be stored for 12 months for reporting and quality assurance purposes.
    • Account and billing data will be retained as required under Australian tax and accounting laws (generally 7 years).
    • After expiry, data will be securely destroyed or anonymised.
15. Your Rights
    Under the Privacy Act and APPs, you have the right to:
    • Access your personal information (APP 12).
    • Correct inaccurate, out-of-date, or incomplete information (APP 13).
    • Withdraw Consent for data processing (subject to contractual obligations).
    • Make a Complaint if you believe your privacy has been breached.
    Requests should be made by email (see Contact section). We will respond within a reasonable timeframe, usually within 30 days.
16. Refunds, Exam Use, and Related Privacy Considerations
    As per our Terms and Conditions:
    • Refunds are only available within 24 hours of purchase, provided the exam has not been started.
    • Once an exam is started or completed (even earlier than expected), no refunds will be given.
    • Performance summaries are emailed upon completion but no detailed question explanations are provided.
    • Exam results may be used in anonymous cohort-level reports.
17. Third-Party Services
    We may use third-party providers including:
    • Payment Gateways (e.g., Stripe, PayPal).
    • Analytics Tools (e.g., Google Analytics).
    • Email Providers
    These providers are bound by their own privacy policies. Where possible, we ensure they comply with Australian privacy standards.
18. Children’s Privacy
    Our services are intended for adult GP trainees. We do not knowingly collect personal data from children under 18. If such data is inadvertently collected, it will be deleted promptly.
19. Complaints Handling
    If you believe we have breached the Australian Privacy Principles, you may lodge a complaint:
20. Contact us directly at [Insert Contact Email] with details of your concern.
21. We will investigate and respond within 30 days.
22. Changes to This Privacy Policy
    We may update this Privacy Policy from time to time to reflect changes in law, technology, or business practices. Updates will be published on our website, and the date of the latest revision will be displayed at the top of this page.
23. Contact Us
    If you have any questions, requests, or complaints regarding this Privacy Policy, please contact us:
    Email: admin@gpmate.com.au
    Website: www.gpmate.com.au