Privacy, records & reporting

Vyapar Pty Ltd trading as Manthan handles personal information in accordance with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth).

What we collect

• Your name, email, phone, firm, practitioner type, and MARN, when you enrol, create an account, download a resource or contact us.
• Attendance and participation data: registration and identity checks, Zoom join and leave times, the times you opened your join page on our website, poll responses and chat logs (online), or signed sign-in and sign-out registers (face-to-face).
• Evaluation responses; certificates issued.
• Payment is processed by Stripe. We do not see or store card numbers.
• Website visits: we count which pages are visited and how far visitors get through booking, to improve the site. This uses no cookies and stores no personal details: each visitor is an anonymous code that changes daily, and visit data is deleted after about a year.
• If you contact us by WhatsApp or Facebook Messenger, your message and contact details are also handled by Meta under its own privacy terms. Please don't send client documents or sensitive personal information by chat; use email or phone instead.

Why we collect it

• To deliver CPD activities, verify identity and attendance, issue certificates, and notify the Office of the Migration Agents Registration Authority (OMARA) of your completion through the OMARA Portal within 14 days of the workshop, as an approved CPD provider must.
• To send you booking and session communications. If you opt in, we also send CPD reminders and news of new workshops and resources; every such email has an unsubscribe link and you can unsubscribe at any time (Spam Act 2003).

Session recordings

Online sessions may be recorded for quality assurance and facilitator review only. We tell participants at the start. Recordings are never used to award CPD points and are deleted after 90 days.

Overseas disclosure (APP 8)

Some of our service providers — including Zoom (video conferencing), our learning management system, Stripe (payments), Meta (WhatsApp and Facebook Messenger, if you choose to contact us that way), our email provider and our cloud hosting — may store or process personal information outside Australia, including in the United States. We take reasonable steps to ensure those recipients handle it consistently with the APPs.

Security

Administrator accounts on Zoom, the learning portal and our document store use multi-factor authentication, and access is role-based and reviewed quarterly. Case studies are fictional or de-identified; please don't disclose identifiable client information in discussions.

Records we keep

We keep the following for at least 2 years from the date of the activity, and our policy is 5 years: registration and enrolment data; attendance registers, Zoom reports, poll and chat logs; certificates and OMARA notifications; evaluations; the learning materials used and the dates they were used; and the presenters and facilitators for each activity.

Access, correction and complaints

Contact cpd@manthan.com.au to access or correct your information or to make a privacy complaint. We respond within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (oaic.gov.au).