1. Who this policy covers

This draft describes information handling for the PLO Ninja website and browser-based study tools. The legal operator and a dedicated privacy contact will be identified in the final policy.

2. Information we collect

Depending on how you use the site, this may include:

• Account details: your name, email address, username and account preferences.
• Order and subscription details: the plan selected, billing details supplied at checkout, transaction references, payment status, renewal dates and access status.
• Messages and requests: information you provide when requesting support, sending feedback or joining a mailing list.
• Technical information: IP address, browser/device information, request times and security or error logs generated when you access the website.

The final policy will identify any additional information collected by enabled analytics, marketing, embedded content or form services following a configuration review.

3. How information is used

Information is used to create and authenticate accounts, provide paid access, process and reconcile orders, manage renewals and cancellations, answer enquiries, investigate faults or misuse, maintain security, and meet applicable record-keeping obligations.

If you choose to receive marketing updates, you can unsubscribe using the option provided in those messages. Essential account or billing notices are separate from marketing.

4. Checkout and service providers

The current site uses WordPress for accounts and SureCart for commerce and subscription management. Hosting is provided through Amazon Web Services. A payment provider identified at checkout processes payments. These services may process account, technical or transaction information needed to deliver their functions.

Payment-card entry should take place only through the checkout provider’s payment interface. Do not send card numbers or security codes through email or support forms. The final launch review will confirm the payment provider, email/form services and any other processors enabled on the site.

5. Cookies and browser storage

WordPress and checkout components use cookies or similar storage for functions such as sign-in, sessions, security and checkout. You can manage cookies through your browser, but blocking essential storage may prevent sign-in or purchasing from working.

The launch policy will list any optional analytics or marketing technologies actually enabled, their purposes and the controls available. This draft does not assert that optional tracking is absent.

6. Hosting and overseas processing

The current staging site is hosted on AWS in the United States. Service providers may also process information outside Australia. The countries and provider arrangements for the production service must be confirmed before launch.

7. Retention and security

Information is retained for the purposes for which it is needed, including account administration, transaction records, security, resolving disputes and applicable legal obligations. Retention periods and deletion processes will be confirmed for the production service.

Security measures help protect information, but no online service can guarantee absolute security. Use a strong, unique password and protect access to your email account.

8. Access, correction and privacy concerns

You can review available account and subscription details in My Account. You may request access to or correction of personal information, ask about deletion, or raise a privacy concern. Identity verification may be needed before a request is actioned; some records may need to be retained.

Before launch: insert the verified public privacy/support email and the process for handling enquiries and complaints. The current demo Contact page is not a verified privacy contact.

9. Links and changes

Other websites and independently operated services have their own privacy practices. This policy will be updated when the service or its information handling changes, with a revised date shown here.