Skip to content
Legal

Privacy policy

Last updated: 15 June 2026

This notice explains how Octossure handles personal information collected through the public website, resource library, enquiry forms and demo booking flow. Paid platform use, customer data handling and support arrangements may be governed by separate written agreements.

1. Who we are

Octossure is operated by Shiro Corp Pty Ltd, ABN 85 661 820 373. Octossure provides RTO compliance and self-assurance software for Australian Registered Training Organisations.

For this public website, the main contact channel is info@octossure.com.au.

2. What we collect

We collect information you provide directly and limited technical information generated when you use the website.

  • Contact details you submit, such as name, work email, phone number, organisation, RTO name, RTO code and role.
  • Enquiry details, including your message, compliance context, preferred demo topic, selected booking slot and source page.
  • Resource access details, including the article or download requested, consent status, access token metadata and download count.
  • Operational request data, such as hashed IP address, browser user agent, timestamps and rate-limit signals used to protect public forms.
  • Campaign information when available, including UTM source, medium, campaign, term and content values.

Please do not submit learner records, sensitive health information, passwords, full compliance evidence files or confidential platform data through public website forms unless we have specifically asked for that information through an agreed customer process.

3. How we use information

We use website information for practical business purposes connected to Octossure enquiries, resources and demo workflows.

  • Respond to contact requests, demo enquiries, partnership questions and resource access issues.
  • Provide demo availability, create bookings, send confirmations and prepare relevant pre-demo material.
  • Unlock gated articles, templates, checklists, webinar material and downloadable resource links.
  • Send requested resources, follow-up material and relevant Octossure compliance updates where you have consented.
  • Understand which pages, resources and campaigns generate useful enquiries so the public website can be improved.
  • Protect the site, prevent spam or abuse, diagnose errors and maintain audit records for lead and booking workflows.

4. Demo bookings

When you book or enquire about a demo, we may collect your name, work email, phone number, organisation, RTO name, RTO code, role, selected slot, timezone, source page, campaign parameters and the context you want to discuss.

Confirmed bookings may be stored in an Octossure demo booking record and sent to Zoho Bookings so the appointment can be created, managed and confirmed. We may also send a lead notification internally and sync lead details to Zoho CRM where configured.

5. Resource access

Some articles, checklists, templates, webinar notes and downloads use preview-plus-email access. When you request access, we collect the details needed to unlock the material, email the access link, record consent and understand which resources are useful.

Resource links may use opaque, expiring access tokens scoped to the requested resource and email address. We store token hashes rather than the raw token, and we may record whether a download link was used.

6. Service providers and disclosure

We use trusted service providers to operate the website and related workflows. These providers may process information in Australia or other locations where they operate, subject to their own security and privacy controls.

  • Vercel: hosting, deployment, edge delivery, request logs and deployment protection.
  • Database provider: storage of lead captures, demo booking records and resource access tokens when DATABASE_URL is configured.
  • Resend: transactional emails, lead notifications and resource access links when email is configured.
  • Zoho CRM: best-effort lead sync for website enquiries and resource requests when CRM sync is configured.
  • Zoho Bookings: public demo availability lookup and confirmed Octossure demo appointments.

We may also disclose information where required by law, to protect our rights, to investigate misuse of the website, or as part of a business transfer involving Octossure or Shiro Corp Pty Ltd.

7. Cookies, analytics and technical data

The website may use cookies, similar technologies and hosting logs to keep the site working, protect forms, understand page performance and measure campaign activity. Where analytics or advertising tools are enabled, they should be configured to support website measurement rather than collecting unnecessary sensitive information.

You can control cookies through your browser settings. Blocking cookies may affect parts of the website, including forms, resource access or booking flows.

8. Storage and security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Public website workflows use limited data collection, hashed IP addresses for request context, rate limiting and token hashing for resource access links.

No internet service can be guaranteed to be completely secure. You should avoid sending highly sensitive information through public website forms.

9. Your choices

You can ask us to access, correct or delete personal information we hold about you, subject to legal, operational and record-keeping requirements. You can also ask us to stop sending marketing communications.

If an email includes an unsubscribe link, use that link for the fastest update. You can also contact us directly using the details below.

10. Changes and contact

We may update this policy as the website, resource library, demo flow or service providers change. The updated version will be published on this page.

For privacy questions or requests, contact info@octossure.com.au. You can also review the Terms and Conditions.