Privacy Policy overview
This Privacy Policy describes how personal data is collected, used, stored, and shared when
users access or interact with the metacognition resources provided on this website.
Introduction
This Privacy Policy explains how the Company operating the website at prenirlyltiov.sbs
collects, uses, stores, and shares personal data. It applies to visitors and
registered users who access the website, interact with its content, or communicate
with the Company through available channels.
The Company aims to comply with Australian privacy requirements and, where
applicable, international data protection standards such as the GDPR, CCPA, and
LGPD. Users are encouraged to read this Policy together with the Cookie Policy and
Terms and Conditions available on the website.
How personal data is collected
The Company collects personal data when users provide it directly, when it is generated
through use of the website, and when it is obtained from service providers supporting
technical operations. Only information relevant for specified purposes is collected and
processed in line with applicable data protection laws.
Information provided directly
-
•
Contact details provided through forms, such as name or preferred name and
communication channels supplied by the user.
-
•
Content of messages, feedback, or enquiries submitted through the website,
including any information voluntarily included by the user.
-
•
Preferences selected in account settings or consent tools, such as
communication options or cookie categories chosen.
-
•
Optional profile information supplied when creating or updating an account,
such as short descriptions or display settings.
-
•
Responses to voluntary surveys or questionnaires made available on the
website for service improvement or research purposes.
Information collected automatically
-
•
Technical details about the device and browser, including type, version,
operating system, and basic configuration information.
-
•
Log information such as pages visited, time and date of access, referring
and exit pages, and approximate session duration.
-
•
Approximate location derived from IP address, limited to general geographic
areas such as city or region where technically feasible.
-
•
Interaction data, for example clicks on links, scrolling behaviour, and
navigation paths used while browsing the website.
-
•
Information about cookies and similar technologies stored on the device,
including consent preferences and identifiers where applicable.
Use of personal data
Personal data is used to operate the website, respond to enquiries, maintain security,
and improve content and functionality. The Company processes data on the basis of
consent, contractual necessity, legitimate interests, or compliance with legal
obligations, depending on the specific activity and applicable law.
-
•
To provide and maintain access to the website, including delivering requested
pages, managing sessions, and operating basic interactive features.
-
•
To respond to enquiries, feedback, or support requests submitted through forms
or other communication channels provided on the website.
-
•
To analyse website usage and performance in order to understand how services
are used and identify areas for improvement or troubleshooting.
-
•
To remember user preferences where technically possible, such as language
choices or display settings, to support a more consistent experience.
-
•
To maintain the security and integrity of systems, including monitoring for
suspicious activity, preventing misuse, and managing access controls.
-
•
To comply with applicable legal obligations, regulatory requirements, and
lawful requests from competent authorities where required.
-
•
To manage records, audits, and internal administration necessary for operating
the website and supporting long term service planning.
Data commitment: The Company is committed to handling personal data
lawfully, fairly, and transparently. Data is collected only where necessary for defined
purposes, stored for no longer than required, and protected through appropriate
technical and organizational measures designed to reduce unauthorized access,
alteration, or disclosure.
Sharing of personal data
Personal data may be shared with carefully selected service providers that support
website hosting, analytics, communication tools, or security functions. Data may also be
disclosed where required by law, to protect rights or safety, or in connection with
corporate transactions such as restructuring or transfer of services.
Service providers
The Company engages service providers to support website hosting, analytics,
communication tools, and other operational functions. These providers process
personal data only on documented instructions, are subject to confidentiality
obligations, and must implement appropriate security measures.
Compliance with legal obligations
The Company may process and retain personal data where necessary to meet legal
obligations, respond to lawful requests from authorities, maintain records for
tax or accounting purposes, or comply with regulatory requirements in relevant
jurisdictions.
Anonymous statistics
The Company may compile anonymous or aggregated statistics about website usage,
such as total visits or general reading patterns. These statistics do not
identify individuals and are used to understand service performance and plan
future improvements.
User rights
Depending on their location and applicable law, users may have rights regarding personal
data, including access, rectification, deletion, restriction, objection, and data
portability. The availability and scope of these rights vary by jurisdiction and are
subject to conditions and lawful exceptions.
-
•
Users may request confirmation of whether personal data about them is
processed and obtain a copy of such data, subject to verification and
applicable legal restrictions.
-
•
Users may request correction of inaccurate personal data and completion of
incomplete information, subject to verification and applicable law.
-
•
Users may request deletion of personal data in certain circumstances, such
as when data is no longer needed or processing is based on withdrawn
consent, subject to legal obligations and legitimate interests.
-
•
In certain circumstances, users may request to receive personal data they
have provided in a structured, commonly used, machine readable format and to
have that data transmitted to another controller where technically
feasible.
-
•
Where processing is based on legitimate interests or carried out for direct
marketing, users may object to such processing, and the Company will
consider the objection in line with legal requirements.
-
•
Users may request restriction of processing in specific situations, for
example while the accuracy of data is contested or where processing is
objected to and under review.
To exercise any of the rights described in this section, users should contact the
Company using the channels indicated on the website and provide sufficient
information to verify identity. The Company will respond in accordance with
applicable data protection laws and within required time limits.
Data security
The Company takes reasonable steps to protect personal data against accidental or
unlawful destruction, loss, alteration, unauthorized disclosure, or access. Security
measures include technical safeguards, organizational policies, and regular review of
practices, but no method of transmission or storage is completely secure.
Technical measures
-
•
Using encryption or secure protocols where appropriate to protect data
in transit between the user’s device and the website.
-
•
Implementing access controls and authentication measures to limit
administrative access to systems storing personal data.
-
•
Applying regular updates, patches, and maintenance procedures to reduce
vulnerabilities in software and infrastructure.
-
•
Maintaining backups and technical logs to support recovery, auditing,
and investigation of potential security incidents.
Organizational measures
-
•
Limiting access to personal data to personnel and service providers who
require it for their duties and are bound by confidentiality
obligations.
-
•
Providing guidance and internal policies on data protection
responsibilities and appropriate handling of personal information.
-
•
Using structured processes for assessing new tools or services that
involve personal data, including privacy considerations where
relevant.
-
•
Maintaining incident response procedures designed to address suspected
data breaches or security issues in a timely manner.
Data retention
Personal data is retained only for as long as necessary to fulfil the purposes for which
it was collected, including meeting legal, accounting, or reporting obligations.
Retention periods depend on the type of data, the context of collection, and statutory
requirements in relevant jurisdictions.
-
•
Account related data may include usernames, password hashes, preference
settings, saved reading lists, and other configuration choices associated with
an account profile.
-
•
Learning related data may include records of articles viewed, reflective tools
accessed, and general engagement patterns, typically used in aggregated form to
understand interest in metacognition topics.
-
•
Communications data may include messages sent through contact forms, feedback
submissions, survey responses, and related metadata such as date, time, and
technical delivery information.
-
•
In general, the website does not request payment details. If financial
information is ever collected, it will be limited to what is necessary for the
specific transaction and handled through secure, reputable service
providers.
-
•
Marketing related data may include communication preferences, records of
consent for optional updates, and information about interactions with non
essential messages where such features are provided.
When personal data is no longer required, it will be deleted, anonymized, or securely
archived in accordance with internal policies and applicable legal standards.
International data transfers
Personal data may be transferred to and processed in countries outside the user’s
location, including where service providers or servers are situated. In such cases, the
Company implements safeguards such as contractual protections or reliance on adequacy
decisions, consistent with applicable data protection laws.
-
•
Transfers to service providers located in other countries that supply hosting,
analytics, or communication tools necessary for website operation.
-
•
Use of standard contractual clauses or similar mechanisms where required to
provide appropriate safeguards for international data transfers.
-
•
Storage of data on servers that may be physically located outside the user’s
country, subject to security and access controls.
-
•
Limited disclosure to external advisors or auditors in different jurisdictions
where needed for legal, compliance, or governance purposes.
Cookies and similar technologies
The website uses cookies and similar technologies to operate core functions, remember
preferences, and collect analytics. Details about the types of cookies used, their
purposes, and management options are set out in the separate Cookie Policy, which should
be read together with this Privacy Policy.
Cookie categories used
-
•
Essential cookies are used to operate core website functions, such as
security, session management, and consent recording, and cannot be disabled
without affecting basic functionality.
-
•
Performance and analytics cookies help measure website usage, improve
content, and diagnose technical issues, often using aggregated or anonymized
information where feasible.
-
•
Personalization cookies, where used, help tailor content or remember
optional settings, and are deployed only in accordance with applicable
consent requirements.
-
•
Functionality cookies support enhanced features and remember certain user
choices, such as language preferences or layout settings, to provide a
smoother experience.
Users can manage cookie preferences through on site tools where available and by
adjusting browser settings. Restricting cookies may affect website functionality and the
availability of certain features or services.
Changes to this Privacy Policy
The Company may update this Privacy Policy periodically to reflect changes in legal
requirements, technical developments, or service offerings. Any revised version will be
published on this page with an updated effective date and will apply from the time it is
made available.
-
•
Significant changes to this Privacy Policy will be indicated by updating the
effective date and posting the revised version on this page.
-
•
Where changes materially affect how personal data is processed, the Company may
provide additional notice, such as a banner on the website or other reasonable
means.
-
•
Users are encouraged to review this Privacy Policy periodically to stay
informed about current practices and their associated rights.
-
•
Continued use of the website after changes take effect will be treated as
acknowledgement of the updated Privacy Policy, to the extent permitted by
law.
Where required by law, users may be notified of important changes through additional
channels, such as notices on the website or other reasonable communication methods.