Privacy Policy
Data Controller
The entity responsible for the processing of personal data in connection with this website (the "data controller" for the purposes of applicable privacy and data protection laws) is:
KXN Ventures Trust
trading as Keck Group
43 Fowler St, Camperdown NSW 2050, Australia
Contact email:
info@keckgroup.com.au
Where the General Data Protection Regulation (GDPR) applies, the entity identified above acts as the data controller within the meaning of Article 4(7) GDPR.
Information We Collect
We may collect personal information such as your name, email address, phone number, organisation details, and the contents of your enquiry. We may also collect technical and usage information such as IP address, browser type, device information, pages visited, and time of access.
Categories of Data Processed
When you use this Site, we may process the following categories of personal data:
- Technical data (e.g. IP address, browser type and version, device information, time of access);
- Usage data (e.g. pages visited, actions taken on the Site);
- Contact data that you provide (e.g. name, email address, phone number, message content);
- Any other data you voluntarily provide to us.
Documents You Upload to the Portal
If you create an account and use the document checklist, we collect and store the documents you choose to upload. These are credentials issued to you and verifiable by whoever issued them: your primary medical degree certificate, medical registration and certificates of good standing, examination results, English language test results, your curriculum vitae, evidence of recent practice, and professional indemnity insurance.
Documents we do not accept
We do not accept passports or other photo identification, and we do not accept police checks or criminal history records from any country. These are the most sensitive documents in the whole process — under the Privacy Act 1988 (Cth) a passport is a government-related identifier and criminal history is sensitive information — and nothing we do requires us to hold a copy of either. AHPRA obtains and assesses your criminal history itself through its own provider; AHPRA and the Department of Home Affairs ask you for your passport directly; an employer verifies your right to work through VEVO. So we do not ask for them, the portal offers no way to upload them, and our system refuses them if they are sent anyway.
Two facts from your passport are genuinely useful to you, so we ask for those instead of the document: your name exactly as it is printed — a spelling or transliteration difference between your passport and your qualifications is a common cause of AHPRA delay — and your passport expiry date, so we can warn you if it falls below the validity most visa subclasses require. For a police check we record only the date you tell us you obtained one. We do not ask for or store your passport number, your date of birth, or your place of birth.
The documents you do upload
Uploading is optional. You can use the pathway information and checklists without uploading anything. If you choose not to upload documents we simply cannot review them or prepare work that depends on them.
Who can see them. Your uploaded documents are visible to you and to our administrators, and each administrator access is recorded in an audit log. If you are being introduced to a specific medical practice and you have agreed to that introduction, documents relevant to that placement may also be visible to that practice. We do not sell your documents, and we do not disclose them to any other party except where required by law.
You can ask us to delete an uploaded document, or your account and everything in it, at any time — see Your Rights below, or write to info@keckgroup.com.au.
Purposes of Processing
We process personal data primarily to:
- Provide, operate and maintain the Site;
- Respond to enquiries and communicate with you;
- Improve and develop our services and user experience;
- Ensure the security and integrity of the Site;
- Comply with legal obligations and defend legal claims.
Contact Form
When you use the contact form, we process the data you provide (such as name, email address, and message content) to respond to your enquiry. This processing is necessary to take steps at your request prior to entering into any agreement and is in our legitimate interest to communicate with users.
Cookies and Similar Technologies
We may use cookies and similar technologies to operate the Site, improve functionality, and understand how the Site is used. Cookies are small text files placed on your device. Some cookies are necessary for the Site to function, while others help us understand usage patterns and improve performance.
You can manage or disable cookies through your browser settings. Disabling cookies may affect the availability or functionality of parts of the Site.
Where required by law (including in some jurisdictions outside Australia), we will request your consent before using non-essential cookies.
Analytics
We may use analytics tools or service providers to help us understand Site usage (for example, pages viewed, approximate location derived from IP address, and device/browser information). Analytics data may be processed by third parties on our behalf.
Where required, we will provide choices or obtain consent for analytics. You can also limit data collection using browser controls, privacy settings, or opt-out mechanisms provided by the relevant service provider.
Session Recording
To understand how this site and the portal are actually used — and to improve that experience — we record how pages are used during your visit: which pages you open, what you click, and how you move between them. The same recording is what lets us see what happened when something goes wrong, so a fault can be diagnosed and fixed rather than guessed at.
What you type is not recorded. Text entered into form fields is masked before anything leaves your browser, so the answers you give us and anything you type into a message are not captured in these recordings.
Recordings are processed on our behalf by PostHog (see Analytics above). They are used only to improve the product and support the people using it — never to build a profile of you, never to make a decision about you, and never shared with a practice or any other third party.
If your browser sends a Do Not Track signal we do not record your session at all. You can also ask us to stop recording yours, or to delete recordings already held, by writing to info@keckgroup.com.au.
Legal Basis under Australian Privacy Law
Where Australian privacy law applies, we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We collect, use and disclose personal information for purposes that a reasonable person would expect in connection with operating this Site and providing our services, or where required or authorised by law, or where you have given your consent.
Recipients and Categories of Recipients
We may share personal data with:
- Service providers who support the operation, hosting, security, analytics or other functions of the Site;
- Professional advisers (e.g. lawyers, accountants) where necessary;
- Authorities or third parties where required by law or to protect our rights.
International Data Transfers
Personal information may be collected from individuals located outside Australia and may be processed or stored in Australia or other jurisdictions. Where required, we take reasonable steps to ensure overseas recipients handle personal information in a manner consistent with applicable privacy requirements.
Storage Period
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law. After the applicable retention period has expired, data will be deleted or anonymised.
Data Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration, having regard to the state of the art, implementation costs and the nature of the data.
How We Protect Uploaded Documents
In addition to the measures described above, documents uploaded to the portal are:
- stored in a private storage bucket that is not publicly readable — there is no public link to any document, and files are served only through short-lived, access-checked links;
- held in a database hosted in Australia (AWS Asia Pacific, Sydney), encrypted in transit and at rest;
- restricted at the database level so that they are reachable only by your own signed-in account, by our administrators, and by a practice you have agreed to be introduced to;
- protected by an optional authenticator-app second factor (TOTP) on your account, which we recommend enabling if you upload identity documents.
No system is perfectly secure. If an eligible data breach affects your personal information, we will notify you and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth). Where the UK GDPR applies to you, we will also notify the Information Commissioner’s Office within 72 hours of becoming aware, as Article 33 requires.
Your Rights under Australian Privacy Law
Where Australian privacy law applies, you may request access to, or correction of, personal information we hold about you, subject to certain exceptions under the Privacy Act. If you have a concern or complaint about how we handle your personal information, you may contact us using the details provided below.
Complaints
If you have a concern or complaint about how we handle personal information, please contact us using the details below and provide sufficient information for us to assess your complaint.
We will acknowledge your complaint and aim to respond within a reasonable timeframe. If you are not satisfied with our response, and Australian privacy law applies, you may be able to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
Changes to this Privacy Policy
We may update this Privacy Policy from time to time by publishing an updated version on this Site. The updated policy will apply from the date it is published. Your continued use of the Site after changes are published constitutes acceptance of the updated Privacy Policy to the extent permitted by law.
Contact
If you have any questions or concerns about this Privacy Policy or our handling of personal data, please contact us at:
info@keckgroup.com.au