How CAQA QMS hosts, secures and processes website data and client platform data.
This Data Processing and Security Notice explains how CAQA QMS, part of CAQA Groups and Career Calling International Pty Ltd (ABN 53 162 651 238), hosts, secures and processes information - both the limited personal information collected through this website and the quality management data that subscribing organisations store in the CAQA QMS platform. It supplements our Privacy Policy and the QMS Platform Terms.
We distinguish between website data and platform data. Website data is the information visitors submit through this public website. Platform data is the content that subscribing organisations - quality managers, compliance teams, education providers, businesses and government bodies - create and upload inside their CAQA QMS environment, such as controlled documents, audit records, nonconformance and CAPA records, risk registers, training records and uploaded evidence.
This website collects only what you choose to provide: contact form and demonstration request details (typically your name, organisation, role, email address, phone number and message) and newsletter subscription email addresses. Standard technical information such as browser type and pages visited may be collected through analytics as described in our Privacy Policy. No payments are taken through this website, so no payment card details are collected or stored here.
For platform data, the subscribing organisation remains responsible for what it collects and uploads. Your organisation must ensure that personal information contained in documents, records and evidence is collected lawfully, is accurate, and is uploaded with any consents required under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. CAQA QMS processes platform data to provide the service - storing, indexing, displaying and reporting it to authorised users - and does not use client platform data for unrelated purposes.
Platform environments are hosted with reputable cloud infrastructure providers using data centres selected for reliability and security, with Australian hosting used where agreed in your subscription documentation. Environments are logically separated so that one organisation's records are not visible to another.
Access to platform data is role-based and controlled by administrators nominated by the subscribing organisation. Our own staff access client environments only where needed to provide support, maintenance or implementation services, and that access is logged. Transport encryption protects data in transit, and administrative access to infrastructure is restricted to authorised personnel.
Platform data is backed up on a scheduled basis, and backups are retained on a rolling cycle so that data can be restored after an infrastructure failure. Backup restoration is tested periodically, and backups are protected with the same care as production data.
If we become aware of a security incident that affects your organisation's data, we will assess it promptly, contain it, and notify your nominated administrator without undue delay, providing the information reasonably needed for your own obligations - including any assessment your organisation must make under the Notifiable Data Breaches scheme. Suspected incidents can be reported to us at any time at info@caqa.com.au.
We use a small number of third-party providers - such as cloud hosting, email delivery and analytics services - to operate the website and platform. Providers are chosen with regard to their security practices and are engaged only for the purposes described in this notice and our Privacy Policy.
Website enquiry data is retained only as long as needed to respond to you and manage the relationship. Platform data is retained for the life of your subscription. On exit, your organisation may request an export of its data as described in our Subscription Terms, after which production data is securely deleted in line with our retention practices.
Questions about this notice, our security practices or a data request can be directed to info@caqa.com.au, by phone on 1800 266 160, or through our contact page.
To Receive Updates And Offers
