Vital Pulp Dental Education ("Vital Pulp", "we", "us", "our") operates the online continuing professional development (CPD) platform at vitalpulp.com.au. We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This policy explains what personal information we collect, why we collect it, how it is stored, and what rights you have over it. By using our platform you agree to the practices described here.
1. Information we collect
We collect only the minimum information necessary to provide our services.
When you create an account, we collect:
- First name
- Last name
- Email address
That is all. We do not collect your date of birth, phone number, home address, registration number, or any other identifiers unless you choose to provide them when contacting support.
We never collect or store payment card details. All payment information is entered directly into Stripe's secure payment form and processed entirely by Stripe. See section 4 for more detail.
2. How we use it
We use your personal information only for the following purposes:
- Account management — creating and maintaining your login account.
- Course access — granting you access to courses you have purchased and tracking your lesson progress.
- CPD records — recording your completed CPD hours and generating your certificates of completion for professional development purposes.
- Transactional emails — sending purchase confirmations, access links, and CPD certificates to your email address.
- Support — responding to enquiries or issues you raise with us.
- Platform improvements — understanding how the platform is used in aggregate (no individual tracking).
We will not use your information for unsolicited marketing without your explicit consent. If we ever introduce a newsletter or promotional emails, you will be asked to opt in separately.
3. How it is stored
Your personal information is stored in a secured database hosted on servers located in Australia. We take the following measures to protect your data:
- Passwords are never stored in plain text. They are hashed using bcrypt with a high work factor before being saved to the database.
- HTTPS is enforced for all connections to the platform.
- Session tokens are stored server-side and transmitted via
HttpOnlycookies, which cannot be accessed by browser JavaScript. - Access controls limit database access to authorised systems only.
While we take all reasonable precautions, no system is completely immune to security risks. In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.
4. Payments & Stripe
All course purchases on Vital Pulp are processed by Stripe, a globally trusted third-party payment processor. When you check out, you are entering your card details directly into a Stripe-hosted payment form.
Vital Pulp never sees, receives, or stores your credit card number, expiry date, CVV, or any other payment card data. This information goes directly to Stripe and never touches our servers.
Stripe may collect and process personal information (including payment data and billing details) in accordance with their own privacy policy, which you can review at stripe.com/au/privacy. Stripe is certified to PCI DSS Level 1, the highest standard for payment security.
We do receive a payment confirmation from Stripe (including your email address and the amount paid) so we can grant you course access and issue a receipt. We do not receive or store your full card details at any point.
6. Third-party sharing
We do not sell, rent, or trade your personal information to any third party, ever.
We share your information only in the following limited circumstances:
- Stripe — your email address and purchase total are shared with Stripe to process your payment and send you a payment receipt. See section 4.
- Email delivery — we use a transactional email provider to deliver receipts and certificates to your inbox. Your email address is passed to this provider solely for the purpose of delivering that message. It is not used for any other purpose.
- Legal obligations — we may disclose your information if required to do so by law, court order, or a regulatory authority.
No other third parties receive your personal information.
7. Your rights
Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:
- Access — request a copy of the personal information we hold about you.
- Correction — request that we correct inaccurate or out-of-date personal information.
- Deletion — request that we delete your account and personal information.
- Complaint — lodge a complaint if you believe we have mishandled your personal information.
To exercise any of these rights, please contact us at the address below. We will respond to all requests within 30 days.
If you are unsatisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.
8. Contact us
For any privacy-related enquiries, requests, or complaints, please contact us:
We will acknowledge your request promptly and aim to resolve all enquiries within 30 days. For complex requests, we may need up to 60 days, in which case we will keep you informed of our progress.
This policy may be updated from time to time. We will post the revised version on this page with an updated "Last updated" date. Continued use of the platform after any changes constitutes acceptance of the updated policy.