Privacy Policy

Information we collect

We collect information needed to provide and protect the service, including:

• your name, email address, registration details and marketing preferences;
• the identifier and basic profile details returned by the social sign-in provider you choose;
• your enrolments, course progress, answers and completion records;
• your selected plan, subscription or trial status, access period and limited provider references used to manage entitlements;
• the Munio Learning landing route and bounded campaign tags supplied in a registration link, such as source, medium, campaign and content labels;
• community discussions, replies and private reports you submit;
• moderation decisions and audit records needed to apply and demonstrate the community rules;
• device, browser, network, security and service-use information; and
• messages and support requests you send to us.

Social sign-in is handled through Auth0 and your chosen identity provider. Munio does not receive or store the password for your Google, Microsoft, Apple or GitHub account.

Munio is not currently collecting payment information for Professional learning. If paid Professional access is introduced, Stripe will process the payment information needed to complete and manage the subscription. Munio will store only the limited provider references, subscription state and access period needed to provide the service; we do not store your card details.

Why we use your information

We use personal information to:

• create and manage your learner account;
• authenticate you and help prevent spam, misuse and fraud;
• deliver learning, save progress and maintain course records;
• activate and administer trial or subscription access and respond to Professional or team learning enquiries, separately from any optional marketing choice;
• operate and moderate the learner community, respond to reports and enforce the community rules;
• respond to questions and provide support;
• understand which Munio Learning campaigns produce registrations and genuine Professional or team enquiries;
• send newsletters, course updates and marketing where you have consented;
• maintain, secure and improve the service; and
• meet legal and regulatory obligations.

Service providers and disclosure

We use trusted service providers to operate Munio Learning. These include Auth0 for identity services, Google, Microsoft, Apple and GitHub when you choose their sign-in option, HubSpot for contact management and communications, and Cloudflare for hosting, database and security services.

These providers receive only the information needed to perform their services and handle it under their own privacy terms and their agreements with us. Some providers may process information outside Australia. We may also disclose information where required by law or where reasonably necessary to protect people, the service or our legal rights.

We do not sell your personal information.

Marketing and unsubscribing

You can choose whether to receive Munio Learning newsletters, course news and relevant information about Munio Cyber services. This choice is optional and does not affect access to your learner account. You can unsubscribe at any time by using the unsubscribe link in a marketing email or by emailing learning@muniocyber.com. Unsubscribing from marketing does not close your learner account or stop essential service messages, such as security or account notices.

Cookies and sign-in sessions

We use cookies and similar browser storage where needed to keep you signed in, protect your session, remember service choices and understand whether the service is operating correctly. If a registration link contains campaign tags, the bounded values are carried through sign-in inside the same short-lived, signed transaction cookie. Munio does not store a raw referring URL, advertising identifier or search term for this attribution. You may be unable to sign in or use parts of the portal if you block essential cookies.

Security and retention

We use reasonable technical and organisational safeguards designed to protect personal information. No online service can guarantee absolute security, so please also protect your social sign-in account and tell us promptly if you suspect unauthorised use.

We keep information for as long as needed to provide the service, maintain appropriate learning and consent records, resolve disputes and meet legal obligations. Community moderation records may be retained to investigate misuse, apply rules consistently and protect the service. We delete or de-identify information when it is no longer reasonably required.

Access, correction and deletion

You may ask to access or correct personal information we hold about you, or request deletion of your account information. Some records may need to be retained where the law permits or requires it. Email learning@muniocyber.com with your request. We may need to verify your identity before acting on it.

Questions and privacy concerns

If you have a privacy question or complaint, email learning@muniocyber.com. Please explain the issue and how you would like us to help. We will review your concern and respond within a reasonable period.

Changes to this policy

We may update this policy as the service or legal requirements change. The current version will be published here with its updated date. We will provide a more prominent notice where a change materially affects how we handle your information.