Terms of Service

Effective 1 February 2026 · Neuronpoint (neuronpoint.digital)

1. Parties and scope

These Terms form a contract between you (the participant or procuring organisation) and Neuronpoint for professional education services delivered from 63 Henry Street, Lovely Banks, Victoria 3221, Australia. Purchases made through invoices or checkout pages incorporate this document by reference.

2. Data controller identity

Neuronpoint is the controller for personal data collected for enrolment, billing, and classroom operations. Contact: signal@neuronpoint.digital or (03) 5386 6069. We maintain a register of processing activities internally and provide copies upon verified request.

3. Data categories collected

We collect identity and contact fields, employer details, dietary or accessibility notes you volunteer, assessment artefacts (SQL submissions, rubric scores), communications metadata, and limited device telemetry when you opt into analytics cookies.

4. Purposes and legal bases

Contract performance covers tuition delivery, certificates, and billing. Legitimate interests cover cohort safety, syllabus improvement, and fraud screening—balanced against your rights via DPIAs for new programs. Consent covers optional marketing mail and non-essential cookies, which you may withdraw without affecting core access.

5. Retention windows

Enrolment records remain seven years to meet taxation obligations. Lab repositories tied to your account are purged ninety days after cohort completion unless you purchase an archive add-on. Support tickets retire after twenty-four months unless linked to an active dispute.

6. Third-party sharing

We share data with payment processors, cloud hosting vendors in Australia or the EU Standard Contractual Clauses, and occasionally transcription partners when you consent to recorded retro sessions. We do not sell personal data and we vet subprocessors with DPAs.

7. International transfers

Primary processing occurs in Australia. If a subprocessor stores backups offshore, we rely on SCCs or adequacy decisions and document transfer impact assessments before onboarding new regions.

8. Security measures

Access controls follow least privilege, MFA for staff, encrypted disks on mentor laptops, and segregated lab VPCs. Incident response playbooks include customer notification thresholds aligned with Australian notifiable data breach rules.

9. Children’s privacy

Services target adult professionals. If we learn a minor enrolled without guardian authorisation we will delete associated records and cancel access unless legally required to retain evidence.

10. Policy changes and disputes

We post revisions here with a summary email to active cohorts when material. Continued attendance after fourteen days constitutes acceptance except where prohibited law grants you termination rights. Victorian courts hold non-exclusive jurisdiction; you may still pursue mandatory consumer rights under the Australian Consumer Law.