HMS Institute

1. Introduction

Healthy Mind Solutions Pty Ltd (ABN: 97 645 516 310, ACN: 645 516 310), trading as HMS Institute(“we”, “us”, or “our”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website (https://hmsinstitute.com.au) and use our Learning Management System (LMS) services.

We are bound by the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). By using our services, you consent to the data practices described in this policy.

2. Information We Collect

We collect personal information necessary to provide our educational and training services to B2B clients, professionals, and end-users. This includes:

• Identity Data: First name, last name, and job title (if applicable).
• Contact Data: Email address, billing address, and phone number.
• Account Data: Usernames, passwords, and professional registration numbers (if claiming CPD points).
• Course Data: Enrollment history, course progress, assessment scores, and completion certificates.
• Financial Data: Payment details. Note: We do not store full credit card numbers on our servers. All payment processing is securely handled by our third-party payment gateway.
• Technical Data: IP address, browser type, operating system, and usage data collected via cookies (see our Cookie Policy).

3. How We Use Your Information

We use the collected information for the following purposes:

• To create and manage your LMS account.
• To deliver educational content, track your progress, and issue certificates.
• To process payments, refunds, and issue tax invoices.
• To communicate with you regarding your account, course updates, and technical support.
• To comply with legal and regulatory obligations.
• For B2B clients, to provide organizational reporting on staff compliance and training completion.

4. Disclosure to Third Parties

We do not sell, rent, or trade your personal information. We may share your data with trusted third-party service providers who assist us in operating our platform, conducting our business, or servicing you. These include:

• DigitalOcean: For secure cloud hosting and data storage of our LMS platform.
• Stripe:For secure payment processing. Stripe’s use of your personal information is governed by their privacy policy.
• Resend: For delivering transactional and marketing emails securely.

These third parties are contractually obligated to keep your information confidential and secure, and are only permitted to use your data to provide the specified services to HMS Institute.

5. Data Storage and Security

Your personal information is stored securely on servers provided by DigitalOcean. We implement a variety of industry-standard security measures, including encryption and secure socket layer (SSL) technology, to maintain the safety of your personal information.

6. Your Rights and Access to Information

Under the Privacy Act 1988 (Cth), you have the right to access the personal information we hold about you and to request corrections if it is inaccurate, out of date, or incomplete. To exercise these rights, please contact us using the details below. We may require verification of your identity before fulfilling your request.

7. Contact Us

If you have any questions about this Privacy Policy, or if you wish to make a complaint about a potential breach of the Australian Privacy Principles, please contact our Privacy Officer at: