PRIVACY POLICY
Last updated 4 October 2026 | Version 2.3
This Privacy Policy describes how Australian Standard Typing Tests™ ("Company", "we", "us", or "our") collects, uses and discloses your personal data when you use our website, our testing platform and our services (collectively, the "Service"). It also explains your privacy rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles and how the law protects you. By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
Important: we do not sell or rent your personal data for monetary consideration. Your data is collected and used to administer and verify your typing assessment, to maintain your account, and for the limited analytics and advertising measurement described in this policy, which may involve sharing limited identifiers with advertising partners.
1. INTERPRETATION AND DEFINITIONS
Capitalised terms have the meanings defined below and apply whether they appear in singular or plural form.
Account: a unique account created for you to access our Service.
Company: refers to Australian Standard Typing Tests™.
Cookies: small files placed on your device by a website, containing browsing history details.
Device: any device that can access the Service, such as a computer, mobile phone or tablet.
Main Test: a certified typing assessment completed on our platform that consumes a test subscription, is designed to be completed under webcam proctoring and produces a certificate.
Personal Data: any information or opinion about an identified individual, or an individual who is reasonably identifiable, which the Privacy Act 1988 (Cth) refers to as personal information.
Practice Test: a practice typing exercise on our platform that involves no webcam capture, produces no certificate and whose results are not saved.
Proctoring Images: still images captured by your webcam during a Main Test, with your consent, for assessment integrity purposes.
Sensitive Information: a subset of personal information defined under the Privacy Act 1988 (Cth), which includes health information, certain biometric information and information about racial or ethnic origin.
Service: the Website, the testing platform and any related services offered by the Company.
Service Provider: any person or entity that processes data on behalf of the Company.
Usage Data: data collected automatically, generated by the use of the Service or from Service infrastructure.
Website: the Australian Standard Typing Tests website, accessible at www.australianstandardtypingtests.com.au.
You: the individual accessing or using the Service.
2. PERSONAL DATA WE COLLECT
Personal Data. In accordance with APP 3, we collect only the personal information that is reasonably necessary for our functions and activities. When you purchase, register for or use our Service, we collect the following personally identifiable information:
Email address
First name and last name
Consent Records: When you first sign in to the platform, we record your acceptance of this Privacy Policy and our Terms and Conditions. The consent record includes the version number of each document you accepted and the date and time of acceptance, and forms part of your account data.
Assessment Data: When you complete tests on our platform, we collect and generate your test results and performance data, including words per minute, accuracy, test date and test metadata, together with the text you typed during Main Tests, which appears on the transcript page of your certificate.
Proctoring Images: When you sit a Main Test, up to three still images are captured by your webcam during the session, with your consent requested before each Main Test begins. Where consent is declined or no camera is available, the Main Test proceeds without Proctoring Images and no images are captured or stored for that attempt. The images are captured at the start of the test, at the midpoint and at the end of the test, to record your presence and your completion of the assessment. Proctoring Images are used solely to support assessment integrity. They appear only on the Virtual Proctoring Summary page of your certificate PDF and in internal administrative review, and they are never displayed on the public certificate verification page. We do not use facial recognition, face matching or any other automated analysis on Proctoring Images. When your certificate is ready, we email you a copy of the certificate PDF, including the Virtual Proctoring Summary page, through our email provider. Access to Proctoring Images is restricted to you and authorised administrators through secure, time limited access. If your webcam is unavailable or is interrupted during a Main Test, the test continues, no further images are attempted for that capture point, and any missing image is represented on the proctoring summary by a placeholder noting that the webcam snapshot was unavailable at that capture point. Practice Tests involve no webcam capture of any kind.
Passwordless sign in: Our platform uses secure magic link sign in delivered to your email address. We do not create or store passwords for your account.
Note regarding payment information: payment transactions are processed directly by our third party payment processors. These processors may collect additional information such as billing address and phone number as required for payment processing. We do not store payment card details, billing addresses or phone numbers in our own systems. Please refer to the privacy policies of the payment processors identified at checkout for information on how they handle your payment data.
We do not collect Sensitive Information as defined under the Privacy Act 1988 (Cth), such as health information or information about racial or ethnic origin, and we do not collect government issued identification numbers.
Usage Data: Usage Data is collected automatically when you use the Service. It may include your device's IP address, browser type and version, pages visited, time and date of your visit, time spent on pages and other diagnostic data.
Tracking Technologies and Cookies: We use cookies and similar technologies to monitor activity on our Service and store certain information:
Necessary and Essential Cookies: essential to provide the core functionality of the Website and platform, including secure sign in sessions.
Functionality Cookies: allow us to remember choices you make, such as display preferences.
Analytics and Advertising Cookies: used by third party services such as Google Analytics and the Meta Pixel to understand how visitors use our Website and to measure and improve the effectiveness of our advertising. These cookies may collect information about your visit and, in the case of the Meta Pixel, may share hashed identifiers with Meta Platforms, Inc. to help us reach relevant audiences. You can opt out of personalised advertising through your Meta account settings and via your browser or device controls.
Our testing platform and certificate verification pages use only the cookies and similar browser storage needed to run them, such as keeping you signed in and secure. They do not use analytics or advertising cookies, which are used on our Website only.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. Refusing cookies may affect your ability to use some parts of our Service.
3. HOW WE USE YOUR PERSONAL DATA
In accordance with APP 6, we use your personal information only for the following purposes, which are consistent with the primary purpose of collection:
To provide and maintain our Service, including monitoring usage for performance and security purposes.
To manage your Account and provide access to features available to registered users, including secure sign in links sent to your email and the recording of your acceptance of our legal documents at first sign in.
To deliver the contracted service: processing your typing tests, capturing Proctoring Images during Main Tests where you have consented, generating your three page certificate and enabling certificate verification by third parties you share your certificate with.
To maintain assessment integrity: authorised administrators may review the Proctoring Images associated with a test attempt solely for assessment integrity purposes. This access forms part of an internal administrative review record.
To detect and prevent fraud, cheating and unauthorised access to our systems.
To contact you by email regarding service updates, security notices or information directly related to your contracted services.
To manage requests you submit to us, including support and data access requests.
Automated Scoring: Your Main Test results, including words per minute and accuracy, are calculated automatically by our platform from the text you type, and your certificate is generated automatically from those results. Integrity reviews of Proctoring Images are carried out by authorised administrators.
We explicitly confirm that we do not sell your Personal Data for monetary consideration. We use third party advertising and analytics tools, including the Meta Pixel, to measure website performance and to promote our Service to relevant audiences. This may involve sharing hashed identifiers with these providers for advertising measurement and audience building purposes. Aside from this limited advertising and analytics activity, your Personal Data is used solely for administering and verifying your typing assessments and managing your account.
4. THIRD PARTY SERVICE PROVIDERS
Purchases are made through our regional online store, with payment processed by the regional payment processors identified at checkout. We engage the following third party service providers who may process personal data on our behalf in order to deliver our Service. Each operates under its own privacy policy:
Stripe: payment processing. stripe.com/privacy
PayPal: payment processing, where offered at checkout. paypal.com/privacy
Vercel: platform hosting and delivery. vercel.com/legal/privacy-policy
Supabase: database and secure file storage, located in Sydney, Australia. supabase.com/privacy
Contabo: certificate generation on a dedicated server located in Sydney, Australia. Candidate data passes through this server in memory only while a certificate is generated. contabo.com/en/legal/privacy
Resend: transactional email delivery, including sign in links and your certificate PDF with its Virtual Proctoring Summary page. Our emails are sent from Tokyo, Japan, and Resend stores its email records in the United States. resend.com/legal/privacy-policy
Squarespace: marketing website and online store hosting. squarespace.com/privacy
Google Analytics: website analytics and usage tracking. policies.google.com/privacy
Meta Platforms, Inc.: advertising measurement and audience tools through the Meta Pixel. facebook.com/privacy/policy
We engage these providers only to the extent necessary to deliver and promote our Service. Our hosting, storage, certificate generation and email providers process personal data only on our instructions. Payment processors and analytics and advertising providers may also handle data for their own purposes under their own privacy policies, linked above.
5. INTERNATIONAL TRANSFER AND STORAGE OF YOUR PERSONAL DATA
Your Personal Data, including your assessment records and Proctoring Images, is stored on secure infrastructure located in Sydney, Australia, and your certificates are generated on a server in Sydney. In addition, some of our service providers operate internationally and may process personal data in other jurisdictions, including the United States, Japan and the European Union.
Where personal data is transferred outside Australia, we take steps to ensure it receives a comparable level of protection to that required under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, including through contractual arrangements with our service providers. This section is our notice to you that your personal data is stored in Australia and may be processed in the other countries described above. Personal data processed in another jurisdiction may be subject to lawful access requests by authorities in that jurisdiction.
Australian Privacy Principle 8. Before we disclose personal information to an overseas recipient, we take reasonable steps to ensure that the recipient does not breach the Australian Privacy Principles in relation to that information, including through contractual arrangements with our service providers. We remain accountable for how our overseas service providers handle your personal information.
6. RETENTION OF YOUR PERSONAL DATA
We retain different categories of data for different periods, based on the purpose for which they were collected:
Test results and performance data, including words per minute, accuracy, date, test metadata and typed transcripts: retained for 5 years from the date of test completion.
Proctoring Images: automatically deleted 12 months after the date each image was captured. The copy of each image shown on the Virtual Proctoring Summary page of your certificate PDF is kept with that PDF for as long as the PDF is retained.
Certificate PDFs: retained with your test results for 5 years from the date of test completion.
Certificate verification records, comprising name, scores, test date, test type, certificate ID and snapshot proctoring status: retained while your account remains active so that issued certificates can be verified by third parties such as employers.
First login consent records: retained while your account remains active.
Account and registration data: retained for 5 years following the date of last account activity.
Usage Data: retained for 12 months.
Upon expiry of the applicable retention period, data is permanently deleted from our systems in accordance with APP 11.2. Where you request deletion of your account, we will action a full deletion within 30 days. This deletion is total. It permanently removes all of your account data, attempt history, results, transcripts, certificate files and stored PDFs, Proctoring Images and the certificate verification record. Once the deletion is processed, the verification link for any certificate previously issued to you will return a not found response. We do not retain a minimum record to preserve the validity of an issued certificate. The only information we may retain is information we are specifically required to keep by law, and we will inform you of any such requirement at the time of your request. Residual copies of deleted data may remain in our secure backups for a limited period until they are overwritten in the normal backup cycle.
7. DISCLOSURE OF YOUR PERSONAL DATA
Certificate Verification. When you share your certificate with a third party, that party may use the QR code or verification link on the certificate to view your public verification record, comprising your name, scores, test date, test type, certificate ID and snapshot proctoring status, which shows how many webcam snapshots were captured. The verification page is accessible to anyone who holds the verification link or scans the QR code, so this disclosure occurs through the verification mechanism you choose to share. Proctoring Images are never displayed on the public verification page.
Business Transactions. If the Company is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different privacy policy. Any successor entity will be required to honour the terms of this Privacy Policy or obtain fresh consent from affected individuals.
Legal Requirements. We may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities. We may also disclose Personal Data in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend the rights or property of the Company, prevent or investigate possible wrongdoing in connection with the Service, protect the personal safety of users of the Service or the public, or protect against legal liability.
8. SECURITY OF YOUR PERSONAL DATA
In accordance with APP 11, we implement appropriate technical and organisational security measures to protect your Personal Data from misuse, interference, loss and unauthorised access, modification or disclosure. These measures include HTTPS and TLS encryption for all data in transit, encryption at rest for stored personal data and assessment records, role based access controls limiting data access to authorised personnel only, secure and reputable cloud hosting infrastructure, and regular monitoring and review of our security practices.
No method of transmission over the internet or method of electronic storage is completely secure. While we implement commercially appropriate measures to protect your Personal Data, we cannot guarantee absolute security.
9. AGE RESTRICTION
Our Service is intended for individuals who are 18 years of age or older. We do not knowingly collect Personal Data from anyone under the age of 18. By using our Service, you represent that you are at least 18 years of age. If we become aware that we have inadvertently collected Personal Data from a person under 18, we will take steps to delete that information as promptly as possible.
10. YOUR PRIVACY RIGHTS
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and depending on your circumstances, you may have the following rights regarding your Personal Data. To exercise any of these rights, contact us using the details in the final section of this policy.
Right to Access: you may request a copy of the Personal Data we hold about you.
Right to Correction: you may request that inaccurate or incomplete Personal Data be corrected.
Right to Deletion: you may request that we delete your Personal Data. We will action a full and total deletion, including the certificate verification record, after which the verification link for any certificate issued to you will return a not found response. We will only retain information where specifically required by law.
Right to Withdraw Consent: you may withdraw consent to the collection, use or disclosure of your Personal Data at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide the Service to you. You may decline webcam consent before any Main Test without affecting your ability to sit it. Declining does not remove Proctoring Images already captured, which are deleted on the schedule in the Retention section or as part of a full account deletion.
Right to Object or Restrict: you may object to or request restriction of the processing of your Personal Data in certain circumstances.
Access (APP 12): You may request access to the personal information we hold about you by contacting us. We will respond within 30 days. We will not charge you for making a request, and if a reasonable fee applies to providing access, we will tell you in advance. We may decline access only where the Australian Privacy Principles permit, for example where access would unreasonably affect the privacy of others or would be unlawful, and we will give you written reasons.
Correction (APP 13): If you believe personal information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, you may ask us to correct it. We will respond within 30 days. If we correct information we previously disclosed to a third party, we will take reasonable steps to notify that third party.
If you are not satisfied with how we handle an access or correction request, you may complain to the OAIC, as set out in the Contact Us section.
11. DO NOT TRACK SIGNALS
Our Service does not currently respond to Do Not Track signals. As there is no industry wide standard for these signals, we will continue to monitor developments and update this policy accordingly.
12. LINKS TO OTHER WEBSITES
Our Service may contain links to websites not operated by us. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites. We encourage you to review the privacy policy of every website you visit.
13. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy is version controlled. Each published version carries a version number, shown at the top of this page, and the same version is published on our website and presented on our platform. Your acceptance of the current version is recorded when you first sign in to the platform. We may update this Privacy Policy from time to time. When we make material changes, we will update the Last Updated date and the version number at the top of this page, and you will be asked to review and accept the updated version when you next sign in to the platform. Your continued use of the Service following the posting of non material changes constitutes your acceptance of the revised Privacy Policy.
14. CONTACT US
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or wish to make a complaint about our data handling practices, please contact us:
Company: Australian Standard Typing Tests
We will endeavour to respond to all privacy related requests within 30 days of receipt. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.