Privacy Policy | Oz Unpacked

Effective Date: 28 October 2026

1. About This Policy

Oz Unpacked (referred to as “Oz Unpacked,” “we,” “us” or “our”) operates our website and related Oz Unpacked pages, forms, digital products and communications, together with any educational tools or subscriptions we offer.

The privacy laws that apply to our handling of personal data depend on the relevant circumstances and jurisdictions.

This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you:

visit our website or a related Oz Unpacked page;
complete a contact, enquiry or other form, or an educational tool where provided;
download, access or purchase an Oz Unpacked digital product;
subscribe to an Oz Unpacked newsletter or update service;
receive or interact with our emails;
contact us for support or otherwise communicate with us; or
use another service that links to this Privacy Policy.

The fact that our educational content discusses Australian professional registration and migration does not by itself determine which privacy laws apply to our handling of personal data. Whether consent is required for a particular collection or use depends on the applicable law and circumstances. Where consent is required, it must be obtained before the information is processed for that purpose.

2. Personal Data We Collect

The personal data we collect depends on how you use Oz Unpacked.

Information You Provide Directly

We may collect:

your name and email address;
your country or location, if you provide it;
your consent and communication preferences;
your occupation, qualifications, professional background and answers submitted through forms or educational tools, where we request that information;
purchase, order, access and subscription information;
information you provide when requesting support, exercising a privacy right or communicating with us; and
any other information you choose to provide.

Where we provide an educational tool, it is designed to collect limited professional-background information for educational routing. Unless we expressly ask for it through an appropriate secure process, please do not send us passports, identity documents, detailed immigration files, criminal-history documents, personal health information or other unnecessary sensitive information.

Payment Information

Payments are processed by the provider shown at checkout. Where Stripe is used, it may collect payment-card details, billing information and other information required to process and protect the transaction.

Oz Unpacked does not ordinarily receive your complete payment-card number. We may receive information such as your name, email address, billing location, payment method type, the last four digits of a card, transaction amount, payment status, refund or dispute information, and subscription status where relevant.

Stripe handles personal data under its own privacy policy and applicable contractual and legal obligations. You can review Stripe’s privacy information at https://stripe.com/privacy

Information Collected Automatically

When you visit or use our website, we and our service providers may automatically collect:

IP address;
browser, device and operating-system information;
approximate location derived from an IP address;
referring page, pages viewed and links or buttons used;
date, time and duration of a visit;
cookie identifiers and similar technical information;
email delivery, unsubscribe and interaction information; and
security, error and diagnostic data.

We use website, customer-management, email, payment, hosting, content-delivery, security and analytics services to operate Oz Unpacked. These services may place or read cookies and similar technologies as described below.

3. How We Use Personal Data

We may use personal data to:

provide and operate the Oz Unpacked website, digital products, newsletters and any educational tools we offer;
where an educational tool is provided, generate and explain a result based on the answers you provide;
deliver purchases and manage access to digital products;
process payments, subscriptions, cancellations, refunds, disputes and related records;
send service messages, receipts, access instructions and important product or account notices;
send marketing or pathway-relevant educational emails where you have consented or where otherwise permitted by law;
respond to enquiries, support requests, complaints and privacy requests;
remember preferences and improve website usability;
understand website and email performance and improve Oz Unpacked content, products and customer journeys;
detect, investigate and prevent fraud, misuse, security incidents and technical problems;
maintain business, accounting, tax and audit records;
establish, exercise or defend legal claims;
comply with applicable laws, lawful requests and payment-network requirements; and
protect the rights, safety and integrity of Oz Unpacked, our users and others.

We will not use personal data for a materially different purpose without providing any notice or obtaining any consent required by law.

4. Forms And Educational Tools

Our forms use the information you submit to respond to your enquiry or provide a resource you request. If we provide an educational tool, it may use your answers to explain a result and identify information or Oz Unpacked resources relevant to your research.

Any educational result is not an official eligibility, registration, skills-assessment, migration, visa or employment decision. It does not have a legal or similarly significant effect on you. Professional regulators, skills-assessing authorities, the Australian Department of Home Affairs, state or territory authorities and employers make their own decisions under their current requirements.

If you believe your result was based on inaccurate information or you want assistance understanding how your information was used, contact us at [email protected].

5. Consent and Other Bases for Processing

Depending on the activity and applicable law, we may collect, use or disclose personal data:

with your consent, where consent is required;
to provide a product, subscription or service you request;
to take steps you request before entering a transaction;
where permitted by applicable law for our legitimate operational interests, after considering any impact on your rights;
to comply with legal, accounting, tax, fraud-prevention or payment obligations; or
where another permission or exception under applicable law applies.

You may withdraw consent by contacting us, subject to legal or contractual restrictions and reasonable notice. We will explain any likely consequences of withdrawal where required. Withdrawal does not affect processing that was lawful before the withdrawal.

6. Email and Marketing Communications

If you consent to receive marketing or educational communications, we may use your contact details and information you provide about your interests or occupation to send relevant content and offers.

You can stop marketing emails at any time by:

using the unsubscribe link in an email; or
contacting [email protected].

Unsubscribing from marketing does not prevent us from sending necessary transactional or service messages, such as receipts, product-access information, subscription notices, security messages or responses to your enquiries.

We keep suppression records where necessary to respect an unsubscribe request.

7. Cookies and Similar Technologies

Cookies are small files or identifiers stored on or accessed through your device. Oz Unpacked and our service providers may use cookies and similar technologies to:

make the website and forms function;
maintain security and prevent misuse;
remember choices and preferences;
understand visits, page performance and technical issues;
measure email and customer-journey performance; and
support payment and subscription processes.

Our providers may include GoHighLevel or LeadConnector for pages, forms, customer management and email automation; Stripe for payment-related functions; and Cloudflare or similar providers for hosting, content delivery, security or website measurement.

Current website measurement uses Google Tag Manager to load Google Analytics 4, with website events forwarded through a Stape server-side tagging endpoint. Our Meta measurement currently records page visits; Meta purchase, lead and contact-conversion events are not enabled. These services may receive or process technical and online identifiers, such as an IP address, browser or device details, page URL, referrer and PageView event information, depending on what is available to or sent to each service. Google, Meta, Stape and other providers may handle information under their own privacy terms.

You can control many cookies through your browser settings. Blocking some cookies may prevent parts of the website, forms, checkout or purchased services from working correctly.

The use of particular cookies and similar technologies may be subject to consent, notice or choice requirements under applicable law. Our use of technologies may change as the website develops, and we will update this Privacy Policy or our cookie notice when necessary.

8. When We Disclose Personal Data

We do not sell or rent personal data.

We may disclose personal data to:

website, hosting, content-delivery and security providers;
GoHighLevel, LeadConnector or related providers that support pages, forms, customer records, automation and email delivery;
Stripe and other providers involved in payments, subscriptions, fraud prevention, disputes and financial records;
analytics and technical-service providers;
customer-support, professional, legal, accounting, insurance or compliance advisers;
government bodies, regulators, courts, law-enforcement agencies or other parties where disclosure is required or permitted by law;
parties involved in a business reorganisation, financing, acquisition, sale or transfer, subject to appropriate confidentiality and data-protection measures; and
another party where you direct us or provide consent.

Depending on the service and applicable law, a provider may process personal data on our behalf under our instructions, or may process it as an independent controller for its own legal, security or operational purposes. The provider’s own privacy notice may also apply. Stripe’s handling of payment-related personal data is described in Stripe’s privacy information.

We may also use and disclose information that has been aggregated or de-identified so that it no longer identifies you, where permitted by law.

9. International Processing and Transfers

Some of our service providers, technical systems and support functions may be located in or access personal data from countries other than the one you are in, including the United States and other locations in which our providers operate.

Where required by applicable privacy law, we take reasonable steps to ensure that overseas recipients provide the required standard of protection, and we use contractual, organisational or other safeguards appropriate to the transfer.

Privacy rights and protections can differ between countries. Contact us if you would like more information about the safeguards relevant to your personal data.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to:

provide products, subscriptions and customer support;
maintain purchase, subscription and access records;
honour communication preferences and unsubscribe requests;
meet accounting, tax, legal, payment and recordkeeping requirements;
resolve disputes and enforce agreements;
prevent fraud and protect security; and
establish, exercise or defend legal claims.

Retention periods vary according to the type of information and the applicable requirements. When personal data is no longer reasonably needed, we will delete it, anonymise it or securely dispose of it, unless continued retention is required or permitted by law.

Some providers, including payment providers, may retain information independently where they have their own legal or operational obligations.

11. Data Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, loss, disposal or similar risks.

These measures may include access controls, account-security practices, secure service providers, encryption in transit where supported, system monitoring, backups and limiting access to people or providers who need the information for an authorised purpose.

No website, email, storage system or internet transmission is completely secure. We cannot guarantee absolute security. If a data breach occurs, we will assess it under applicable law. Where a breach is notifiable, we will notify the relevant regulator within the required timeframe and notify affected individuals where required.

12. Your Privacy Rights

Depending on where you live and the law that applies, you may have the right to:

request access to personal data we hold about you and information about how it has been used or disclosed;
request correction of inaccurate or incomplete personal data;
withdraw consent;
unsubscribe from marketing;
request deletion of personal data;
object to or request restriction of certain processing;
request a portable copy of certain personal data;
complain about how your personal data has been handled; and
lodge a complaint with an applicable privacy or data-protection authority.

Some rights are subject to exceptions and may not apply in every jurisdiction. For example, we may need to retain transaction data to meet legal, accounting, fraud-prevention or dispute-handling obligations.

To make a request, email [email protected]. Please describe your request clearly. We may need to verify your identity before acting and may ask for information reasonably necessary to locate the relevant records. We will respond within the period required by applicable law.

13. Privacy Complaints

If you have a question or complaint about our handling of personal data, contact us first at [email protected]. Please include enough information for us to understand and investigate the issue.

We will review the complaint and respond within a reasonable period. If you are not satisfied, you may be entitled to contact an applicable privacy regulator, depending on the law and circumstances that apply.

14. Children’s Privacy

Oz Unpacked is intended for adults researching Australian migration and related preparation. It is not directed to children, and we do not knowingly collect personal data from children.

If you believe a child has provided personal data to Oz Unpacked, contact [email protected] so that we can investigate and take appropriate action.

15. Third-Party Websites and Official Sources

Our website and products may link to third-party websites, including official regulatory and government sources. Those websites are operated independently and have their own privacy practices. This Privacy Policy does not govern third-party websites or services.

A link does not mean that Oz Unpacked controls the third party’s handling of personal data. Review the relevant third party’s privacy information before providing personal data to it.

16. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, providers, legal obligations or data-handling practices change.

The updated version will be posted on our website with a revised effective date. If a change materially affects how we use personal data, we will provide additional notice or request consent where required by law.

17. Contact Us

For privacy questions, requests, consent withdrawals or complaints, contact our privacy contact:

Oz Unpacked Privacy contact email: [email protected]