Effective from 14 June 2026

Circular Project Solutions Pty Ltd ACN 688 958 474 trading as Jo Knott, ABN 24 688 958 474 (we, us or our), respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains how we collect, hold, use and disclose personal information in connection with our websites, training, e-learning, course licences, memberships, consulting, mentoring, workshops, speaking engagements, digital products, resources and other business activities.

1. SCOPE OF THIS POLICY

This Policy applies to personal information we handle about prospective clients, clients, course participants, authorised users, business contacts, contractors, suppliers, event and workshop participants, website visitors and other people who interact with us.

It should be read together with our Business Terms and Conditions and any service-specific collection notice we provide. Where a third-party platform or service is used, that provider may also have its own privacy policy.

2. WHAT IS PERSONAL INFORMATION?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether it is recorded in a material form or not.

Sensitive information is a category of personal information that may include health information, racial or ethnic origin, political opinions, religious beliefs, professional or trade association membership, union membership, sexual orientation, criminal record and biometric information.

3. THE INFORMATION WE MAY COLLECT

Depending on how you interact with us, we may collect your name, job title, employer or organisation, postal address, email address, telephone number and other contact details.

We may collect enquiry, booking, proposal, contract, invoice and payment information, including transaction records. Payment card details are generally processed by our payment providers rather than stored by us.

For training and e-learning, we may collect enrolment details, username or account information, course access records, progress, quiz results, completion status, certificate information, feedback and support requests.

For consulting, mentoring and advisory services, we may collect information about your business, operations, finances, workforce, leadership, projects, systems, risks, goals, decisions and circumstances relevant to the services you request.

We may collect communications and correspondence, meeting notes, call or session records, documents you provide, survey responses, testimonials and feedback.

When you use our websites or online services, we may collect technical and usage information such as IP address, browser type, device information, pages viewed, referring website, date and time of access, cookie identifiers and interaction data.

Where reasonably necessary for a service, we may collect sensitive information, including health or safety incident information. We will seek consent where required and will only collect information that is reasonably necessary for the relevant purpose.

4. HOW WE COLLECT PERSONAL INFORMATION

We usually collect personal information directly from you when you make an enquiry, complete a form, book or purchase a service, create an account, enrol in training, attend a session, communicate with us, subscribe to marketing, provide feedback or otherwise interact with us.

We may also collect information from your employer, an authorised administrator, a client organisation, a referral partner, a publicly available source, a professional adviser or a third-party platform used to deliver our services.

If you provide personal information about another person, you must be authorised to do so and, where required, ensure that person is aware of this Policy and the purpose for which their information is provided.

Where it is lawful and practicable, you may interact with us anonymously or using a pseudonym. This may not be possible where we need your identity to provide a service, issue a certificate, process a payment, meet a legal obligation or respond properly to your request.

5. WHY WE COLLECT, USE AND DISCLOSE INFORMATION

We may collect, use and disclose personal information to respond to enquiries; prepare proposals and agreements; process bookings, purchases and payments; provide, administer and improve services; create and manage accounts; enrol participants; monitor course progress; issue certificates; provide support; communicate with clients and users; and maintain business records.

We may use information to tailor training, consulting or mentoring services; manage corporate licences and authorised users; conduct workshops and events; administer subscriptions and memberships; obtain feedback; improve our content, systems and customer experience; and develop new services.

We may also use information for billing, debt recovery, fraud prevention, cybersecurity, quality assurance, risk management, insurance, legal compliance, dispute resolution and the protection of our rights, safety and property and those of others.

We may use de-identified or aggregated information for analysis, reporting, service improvement, research, benchmarking and business planning, provided the information does not reasonably identify an individual.

6. TRAINING, CORPORATE LICENCES AND EMPLOYER REPORTING

Where an employer, client organisation or authorised administrator purchases or manages training for participants, we may provide that organisation with information reasonably necessary to administer the licence and training program.

This may include participant names, enrolment status, access activity, progress, completion status, quiz results, certificate details and support issues. The organisation is responsible for ensuring it has authority to provide participant information to us and to receive training reports.

Participants should contact their employer or the relevant organisation if they have questions about how that organisation uses training records after receiving them from us.

7. DIRECT MARKETING

With your consent or where otherwise permitted by law, we may send you information about our services, training, resources, events and business updates by email or other electronic means.

You can opt out at any time by using the unsubscribe link in a message or contacting us. We may still send service-related communications that are necessary to administer an existing booking, account, licence, subscription or client relationship.

We do not sell personal information to third parties for their own marketing.

8. COOKIES, ANALYTICS AND ONLINE TECHNOLOGIES

Our websites and online services may use cookies, pixels, analytics tools and similar technologies to operate the site, remember preferences, understand usage, improve performance, support security and measure the effectiveness of content and marketing.

Some technologies may be provided by third parties and may collect information directly from your device. You can usually control cookies through your browser settings, although disabling cookies may affect website or service functionality.

Where required, we will provide an appropriate cookie notice or consent mechanism.

9. WHO WE MAY DISCLOSE INFORMATION TO

We may disclose personal information to employees, contractors and professional advisers who need the information to support our business or provide services.

We may disclose information to technology, learning management, website hosting, email, customer relationship management, document storage, analytics, video conferencing, scheduling, accounting, payment, marketing and cybersecurity providers.

We may disclose information to your employer, client organisation or authorised administrator where they arranged or paid for your training or service and the disclosure is reasonably necessary for administration, reporting or fulfilment of that service.

We may disclose information to insurers, legal advisers, accountants, auditors, regulators, courts, law enforcement bodies or other parties where reasonably necessary to protect rights, manage a claim, comply with law or respond to a lawful request.

If our business or assets are sold, restructured or transferred, personal information may be disclosed to advisers and potential or actual purchasers subject to appropriate confidentiality arrangements.

10. OVERSEAS DISCLOSURE AND CLOUD SERVICES

Some service providers may store or process information outside Australia or use infrastructure located in multiple countries. The countries involved may change depending on the provider and its systems.

Where practicable, we take reasonable steps to select reputable providers and to ensure appropriate contractual, privacy and security arrangements are in place. However, overseas recipients may be subject to different privacy laws and legal access requirements.

You may contact us for further information about the providers relevant to a particular service.

11. HOW WE HOLD AND PROTECT INFORMATION

We may hold personal information in electronic systems, cloud platforms, email accounts, business records and, where necessary, paper files.

We take reasonable steps appropriate to our business to protect information from misuse, interference, loss and unauthorised access, modification or disclosure. These steps may include access controls, passwords, multi-factor authentication, secure service providers, backups, staff and contractor confidentiality obligations, software updates and data minimisation.

No method of electronic transmission or storage is completely secure. You are responsible for using secure passwords, protecting account credentials and notifying us promptly if you suspect unauthorised access.

12. RETENTION AND DESTRUCTION

We retain personal information for as long as reasonably necessary for the purpose for which it was collected, to provide services, maintain training and business records, meet contractual and legal obligations, resolve disputes and protect legitimate business interests.

Retention periods vary depending on the type of information and the service involved. When information is no longer required, we take reasonable steps to securely destroy it or permanently de-identify it, subject to backup, archival and legal retention requirements.

13. ACCESS AND CORRECTION

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

We may need to verify your identity before responding. In some circumstances, the law may permit or require us to refuse access or correction. If so, we will provide reasons where it is lawful and reasonable to do so.

We do not ordinarily charge for making a request, although we may charge reasonable costs for providing access where permitted by law.

14. DATA BREACHES

If we become aware of a suspected data breach, we will assess and respond to it promptly. Where required by applicable law, we will notify affected individuals and the relevant regulator.

You should contact us immediately if you become aware of any loss, unauthorised disclosure or suspected misuse of information connected with our services.

15. CHILDREN AND YOUNG PEOPLE

Our business services are generally directed to adults and organisations. We do not knowingly collect personal information from children unless it is reasonably necessary for a particular service and appropriate consent or authority has been obtained.

Where a participant is under 18, the purchasing organisation, parent or guardian is responsible for ensuring that participation and the provision of personal information are appropriately authorised.

16. THIRD-PARTY WEBSITES AND SERVICES

Our websites, resources and communications may include links to third-party websites, platforms or services. We are not responsible for the privacy practices, security or content of those third parties. You should review their privacy policies before providing personal information.

17. COMPLAINTS

If you have a concern or complaint about how we have handled personal information, please contact us using the details below and provide enough information for us to understand and investigate the issue.

We will acknowledge and respond within a reasonable period. We may request further information and will aim to resolve the matter fairly and practically.

If you are not satisfied with our response and applicable privacy law gives you that right, you may contact the Office of the Australian Information Commissioner or another relevant regulator.

18. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes to our services, systems, practices or legal obligations. The current version will be published on our website with its effective date.

Material changes will apply from the stated effective date. Where appropriate, we may also notify affected clients or users directly.

19. CONTACT US

Circular Project Solutions Pty Ltd ACN 688 958 474 trading as Jo Knott

ABN 24 688 958 474

Email: [email protected]

Website: joknott.com.au