Privacy Statement
AI for Me by WA AI Hub
4 March 2026
4 March 2026
1. Introduction
Western Australia AI Hub ("WA AI Hub", "we", "us", or "our"), operated by Customer Experience Insight Pty Ltd, is committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This Privacy Statement explains how we collect, use, disclose, and protect personal information in connection with the AI for Me programme and related services.
2. Scope of This Statement
This Privacy Statement applies to:
- Visitors to our website
- Individuals who register for our waitlist
- Applicants to the AI for Me programme
- Selected participants in our cohort programmes
- Recipients of our communications and Programme Guide
3. Information We Collect
3.1 Waitlist Registration
When you join our waitlist, we collect:
3.2 Programme Applications
When you apply for the AI for Me programme, we collect:
- Personal details (name, email, phone, location, pronouns)
- Professional information (job title, organisation, industry, experience)
- AI context (maturity level, challenges, familiarity with frameworks)
- Learning objectives and application plans
- Video submission (optional)
- Accessibility requirements
- Session preferences and timezone
3.3 Automatically Collected Information
When you visit our website, we may automatically collect:
4. How We Use Your Information
We use your personal information for the following purposes:
4.1 Programme Delivery
- Processing applications
- Programme communications
- Delivering materials
- Participant support
4.2 Communications
- Programme Guide delivery
- WA AI Hub updates
- Responding to enquiries
4.3 Improvement
- Programme analysis
- Service improvements
- Anonymised research
5. Legal Basis for Collection (APP 3)
We collect personal information only when:
Consent
You have provided explicit consent (e.g., checking consent boxes on forms)
Necessity
Collection is reasonably necessary for our functions or activities
Legal Requirement
We are required by law to collect certain information
Note: We do not collect sensitive information unless you voluntarily provide it (e.g., accessibility needs) and consent to its collection.
6. Disclosure of Personal Information (APP 6)
We may disclose your personal information to:
6.1 Service Providers
Formspree
Form submission processing (US-based, Privacy Shield certified)
Vercel
Website hosting and analytics (US-based)
Delivery of programme communications
6.2 Programme Partners
- External reviewers for application assessment (under confidentiality agreements)
- WA Government departments (as programme sponsors)
6.3 Legal Requirements
We may disclose information where required or authorised by law:
- Comply with legal obligations
- Respond to lawful requests from government agencies
- Protect our rights, safety, or property
6.4 Overseas Disclosure (APP 8)
Some of our service providers are located overseas (primarily the United States). Before disclosing personal information overseas, we take reasonable steps to ensure the overseas recipient handles your information in accordance with the APPs or is subject to a law or binding scheme substantially similar to the APPs.
7. Data Security (APP 11)
We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access.
Encryption
TLS 1.3 in transit; AES-256 at rest
Access Controls
Role-based access for authorised personnel
Secure Hosting
SOC 2 Type II certified infrastructure
Regular Audits
Security practices reviewed periodically
7.2 Data Breach Response
In the event of an eligible data breach under the Notifiable Data Breaches (NDB) scheme, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.
8. Data Retention
We retain personal information only for as long as necessary:
| Data Type | Retention Period |
|---|---|
| Waitlist registrations | 3 years or until deletion requested |
| Unsuccessful applications | 1 year after deadline |
| Participant records | Programme + 2 years |
| Financial records | 7 years (legal requirement) |
| Website analytics | 26 months |
9. Your Rights (APP 12 & APP 13)
Under the Privacy Act 1988, you have the right to:
1. Access Your Information
Request access to personal information we hold about you. We will respond within 30 days.
2. Correct Your Information
Request correction if your information is inaccurate, incomplete, or misleading.
3. Request Deletion
Request deletion unless we are required to retain it by law or for legitimate purposes.
4. Withdraw Consent
Withdraw your consent at any time. This will not affect the lawfulness of prior processing.
5. Opt-Out of Communications
Unsubscribe from communications at any time via email link or by contacting us directly.
10. How to Make a Request
To exercise any of your rights, please contact us at:
When making a request, please:
- Provide sufficient information for us to verify your identity
- Clearly describe the information or action you are requesting
- Include your contact details for our response
We will respond to all requests within 30 days.
11. Complaints
If you believe we have breached your privacy or mishandled your personal information, you may lodge a complaint with us.
11.1 Internal Complaint Process
- Submit your complaint in writing to privacy@wahub.ai
- Include details of the alleged breach and any supporting information
- We will acknowledge receipt within 5 business days
- We will investigate and respond within 30 days
11.2 External Complaint
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Office of the Australian Information Commissioner
Website: www.oaic.gov.au
Phone: 1300 363 992
Email: enquiries@oaic.gov.au
Address: GPO Box 5218, Sydney NSW 2001
12. Cookies and Analytics
Our website uses cookies and similar technologies to improve your experience and analyse website usage.
Essential Cookies
Required for website functionality
Analytics Cookies
Help us understand how visitors use our site (Vercel Analytics)
Managing Cookies: You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.
13. Changes to This Statement
We may update this Privacy Statement from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:
- Posting a notice on our website
- Updating the "Last Updated" date at the top of this document
- Sending an email notification for material changes (if you have provided your email)
14. Contact Us
If you have any questions about this Privacy Statement or our privacy practices, please contact us at:
15. Legal Framework
This Privacy Statement is governed by:
Privacy Act 1988 (Cth)
Federal privacy legislation
Australian Privacy Principles
13 principles governing personal information
Notifiable Data Breaches
Mandatory breach notification requirements
Spam Act 2003
Commercial electronic messages requirements