Version 2026-08-15 · Higher Ed HA Assure™, a product of HA Assure Group Pty Ltd
HA Assure Group Pty Ltd handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Account details (name, work email, role, institution), authentication data (a salted password hash — never your password), and the governance content you enter. Payment card details are collected and held by Stripe, not by us.
To provide the Service, authenticate users, send service and billing notifications, and support you.
Stripe (payments), Cloudflare (hosting and data storage), and ZeptoMail (transactional email). We do not sell personal information and we do not use your governance content to train machine learning models.
On Cloudflare infrastructure. Some processing may occur outside Australia; we take reasonable steps to ensure overseas recipients handle information consistently with the Australian Privacy Principles.
Passwords are hashed with PBKDF2-SHA256 at 100,000 iterations with a per-user salt. Sessions are HttpOnly, Secure and expire after 14 days. Access is scoped to your institution.
Data is kept while your account is active and for 90 days after it ends, then deleted.
Email info@ha-assure.com to access or correct your information or to make a complaint. If you are not satisfied with our response you may contact the Office of the Australian Information Commissioner.