Skip to content
StudyVisaHub

Legal

Privacy Policy

Last updated: 2026-08-03

StudyVisaHub is operated as a small Australian business. Our annual turnover is under $3 million, which makes us a “small business operator” under section 6D of the Privacy Act 1988 (Cth) — so the Act, and the Australian Privacy Principles under it, do not currently apply to us. We have written this policy anyway. It describes what we actually do with your information, not what a law requires of us. If our circumstances change so that the Act applies, we will update this page and say so here.

By using StudyVisaHub, you agree to the collection and handling of your information as described in this policy.

Where and how we use artificial intelligence on this site — and where we do not — is set out separately in our AI Transparency Statement. In short: we do not use AI to profile you or to make automated decisions about you, and we do not submit your personal information to AI tools.

1. What personal information we collect

We collect personal information only when you actively provide it. This may include:

  • Contact details — your name and email address when you submit a contact form, advertising enquiry, or registration of interest
  • Newsletter subscription data — your email address and subscription preferences if you sign up for our newsletter
  • Enquiry content — the message or question you submit, which may include details you choose to share about your study or visa situation
  • Usage data — pages visited, links clicked, approximate location (country or region), browser type, device type, and referring source — collected automatically via cookies and analytics tools
  • Technical submission data — when you submit a form, our servers record the referring page URL, your browser's user-agent string, and an IP address or IP-derived identifier for rate limiting and fraud prevention. This data is held with your submission record.

We do not ask for sensitive information. Our forms include free-text fields — please do not enter health, financial or identity document details there. If you do, we delete it on request.

We do not knowingly collect personal information from children under 13.

2. How we collect it

We collect personal information:

  • Directly from you, when you submit a form or contact us
  • Automatically, through cookies and analytics tools as you browse the site — see Section 6 for details
  • From third-party providers, to the extent those providers process data on our behalf in accordance with their own terms

3. Why we collect it — purpose of collection

We use personal information to:

  • Respond to your enquiries and correspondence
  • Send newsletters or updates you have subscribed to
  • Operate and improve the site and its features
  • Analyse how the site is used so we can make it more useful
  • Detect and prevent fraudulent submissions
  • Comply with legal obligations and protect the security of the platform

We will not use your personal information for a purpose that is unrelated to why we collected it without first notifying you and, where required, obtaining your consent.

4. Disclosure of personal information

We do not sell, rent, or trade personal information.

We use the following third-party processors to operate the platform. Each receives only the information needed for their specific role:

  • Vercel Inc. (United States) — website hosting and serverless function runtime. All web traffic passes through Vercel infrastructure.
  • Supabase (database hosted in ap-south-1, Mumbai, India) — our primary database. Registration, subscription, enquiry, and survey records are stored here.
  • Resend (United States) — transactional email. We use Resend to send you confirmation emails and to notify us of new enquiries.
  • Google LLC (United States) — Google Analytics 4 (site analytics) and Google Sheets (where contact and question enquiry records are also stored as a secondary backup via our service-account integration).
  • Cloudflare (United States) — network delivery and DDoS protection. Traffic passes through Cloudflare before reaching Vercel.

We may also disclose personal information to law enforcement or regulatory authorities where required by law, court order, or to protect the rights, property, or safety of any person; and to a successor entity in the event of a merger, acquisition, or sale of assets, under equivalent privacy protections.

5. Overseas disclosure

Our database is hosted in Mumbai, India. Our website hosting, email delivery and analytics providers are in the United States. This means your information is stored and processed outside Australia.

6. Cookies and analytics

We use cookies and similar technologies for the following purposes:

  • Analytics (Google Analytics 4) — cookies _ga (expires 2 years) and _ga_* (expires 2 years) identify returning visitors and sessions. Analytics data is aggregated and does not personally identify you.
  • Site survey state — cookies svh_survey_dismissed (expires 30 days) and svh_survey_completed (expires 90 days) record whether you have dismissed or completed the on-site survey widget, so it is not shown again in that period.
  • Functionality — to remember your preferences and improve your experience when you return to the site.

You can disable cookies in your browser settings. Some site features may not function correctly if cookies are disabled.

7. Storage and security

We store personal information on infrastructure maintained by trusted third-party providers. We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure.

No data transmission over the internet or storage system is completely secure. While we do our best to protect your information, we cannot guarantee absolute security.

8. Retention

We retain personal information for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Newsletter subscriber data is retained while you remain subscribed and for a reasonable period afterwards. Contact enquiry data is retained for the period needed to respond to and resolve your enquiry.

When personal information is no longer needed, we take reasonable steps to destroy or de-identify it.

9. Your rights

The access and correction rights in the Privacy Act do not currently apply to us. We honour them anyway. Email contact@studyvisahub.com.au to see, correct, or delete what we hold about you, or to unsubscribe. We respond within 30 days, and if we cannot do what you have asked we will tell you why in writing.

10. Complaints

Contact us first at contact@studyvisahub.com.au and we will try to resolve it. If you are not satisfied: because we are a small business operator, the Office of the Australian Information Commissioner generally cannot investigate complaints about us, though it does publish guidance at oaic.gov.au. If that changes because our circumstances change, we will update this page.

11. Automated processing

Automated processing. We do not use automated decision-making or profiling to make decisions about you. Our tools display published government data and do not assess your individual circumstances or eligibility. If this changes, we will update this policy and tell you before the change takes effect.

12. Data breaches

If we discover a breach that could seriously harm anyone whose information we hold, we will tell the affected people directly and explain what happened and what to do about it. We are not currently required by law to do this. We will do it anyway.

13. Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or circumstances. Updates take effect when posted to this page and are reflected in the “Last updated” date above. We encourage you to review this policy periodically.

14. Contact us

For any privacy-related questions, requests, or complaints: contact@studyvisahub.com.au

Last updated: 2026-08-03