MyUniMentor Privacy Policy

Version: 1.4 — 15 October 2026; published pending the solicitor's sign-off

Legal operator: CJEL DIGITAL IMAGING EDUCATION SOLUTION PTY LTD (ABN 59 630 412 047; ACN 630 412 047)

Main business location: NSW 2034, Australia

CJEL DIGITAL IMAGING EDUCATION SOLUTION PTY LTD (ABN 59 630 412 047; ACN 630 412 047) ("CJEL") operates the MyUniMentor project and online service ("MyUniMentor"). References to "MyUniMentor", "we", "us" or "our" mean CJEL in its capacity as operator of the MyUniMentor project.

1. Our approach

CJEL DIGITAL IMAGING EDUCATION SOLUTION PTY LTD (ABN 59 630 412 047) is the entity responsible for operating MyUniMentor and for the personal-information handling described in this Policy.

MyUniMentor handles personal information to operate a student peer-mentoring marketplace, verify Mentors, administer payments and disputes, record Community Contribution, issue career records and facilitate professional referrals.

Where the Australian Privacy Act 1988 and Australian Privacy Principles (APPs) apply to us, we will comply with them. We also aim to apply privacy-by-design practices where the Privacy Act may not apply to every activity.

2. Information we collect

Depending on how you use MyUniMentor, we may collect:

Account and profile information

• - name;
• - email address and phone number;
• - date of birth;
• - location;
• - university, degree/course and study status;
• - languages;
• - profile photograph;
• - biography and service information.

Mentor verification information

• - photo identification;
• - student/enrolment evidence;
• - academic transcript or graduate evidence where required;
• - verification status and history.

Booking and communication information

• - Booking details;
• - dates/times;
• - service descriptions;
• - Platform messages;
• - cancellation/reschedule records;
• - ratings and reviews;
• - support requests;
• - enquiries you send to a Mentor before booking: the service, format, times you are free, your time zone, preferred language and the details you write.

Payment information

• - payment-provider identifiers;
• - transaction references;
• - amounts;
• - refunds;
• - payout status;
• - chargeback information.

We do not intend to store a Mentor's bank-login credentials or full bank account credentials where payment onboarding is handled directly by the payment provider.

Legal and security information

• - document/version accepted;
• - acceptance timestamp;
• - booking snapshot;
• - IP address;
• - browser/user-agent;
• - security logs;
• - fraud indicators;
• - moderation and dispute records.

Community Contribution and career information

• - contribution activities;
• - verified cumulative hours;
• - verifier/evidence;
• - Super Mentor status/history;
• - awards, award reasons and evidence;
• - factual career-record requests.

Professional referral information

• - referral request;
• - consent to share details;
• - Professional Provider selected;
• - professional registration verification;
• - referral status;
• - commercial-disclosure acknowledgement where relevant.

3. How we collect information

We collect information:

• - directly from you;
• - from your use of the Platform;
• - from the other party to a Booking;
• - from payment providers;
• - from public professional registers;
• - from a Professional Provider where appropriate;
• - from authorised administrators;
• - where required or authorised by law.

4. Why we use information

We may use information to:

• - create and manage accounts;
• - verify eligibility;
• - display Mentor profiles;
• - facilitate Booking and messaging;
• - process and administer payments;
• - prevent fraud and abuse;
• - moderate conduct;
• - investigate complaints and disputes;
• - maintain legal acceptance evidence;
• - operate Community Contribution and Super Mentor programs;
• - verify and issue career records;
• - verify Professional Providers;
• - make requested referrals;
• - comply with tax, reporting, legal and regulatory obligations;
• - secure, maintain and improve MyUniMentor;
• - send service messages;
• - send marketing only where we have a lawful basis and required consent.

5. Administrator access to Bookings, session records and messages

Platform messages are not private from MyUniMentor administrators.

MyUniMentor oversees every Booking. Authorised administrators can see, for each Booking:

• - who booked whom, for which service, and when;
• - its payment, session, confirmation, review, cancellation and dispute records, and the notices sent about it;
• - the Platform messages and chats connected with it, including one-to-one messages between the Mentee and the Mentor, Group Session chats, and help chats between Mentors.

They use this access to:

• - check that Bookings are accepted, delivered and completed, and step in when they are not;
• - user support;
• - complaints, payment disputes and refunds;
• - safety or safeguarding;
• - suspected fraud, security issues or rule breaches;
• - legal or regulatory compliance.

We do not use message content for advertising and do not sell it. Access is limited to authorised roles, and we record the actions administrators take on a Booking (such as reminders, reassignments and refunds).

6. Verification documents

Identity and academic documents are higher-risk information.

Our intended retention practice is:

• - keep source verification documents only as long as reasonably necessary to complete verification;
• - ordinarily delete source identity/academic documents within 30 days after verification is completed, unless needed for a current dispute, fraud investigation, legal requirement or re-verification;
• - retain a verification result/status and audit record without keeping the full source document where reasonably possible.

We may retain a source document longer where law, safety, fraud prevention or a current dispute reasonably requires it.

7. Hosting and service providers

The providers we use at the date of this version are:

• - OVHcloud (servers in Canada): the website, application and database;
• - Cloudflare R2: uploaded files (including verification documents) and encrypted backups;
• - Stripe: payments, refunds and Mentor payouts, including the identity and bank details Stripe Connect collects directly from Mentors (MyUniMentor does not store bank details);
• - Bluehost (United States): sending email from the MyUniMentor address;
• - Google: "Sign in with Google", if you choose it.

We update this list when a provider changes.

Service-provider locations and data flows can change. We maintain a current internal data map.

Where APP 8 applies to an overseas disclosure, we will take reasonable steps required by law and maintain appropriate contractual, technical or organisational safeguards.

8. Overseas recipients

Personal information may be processed or disclosed outside Australia, including in Canada and other countries in which our cloud, payment, communications or professional service providers operate.

Where practicable, we will maintain an up-to-date list of material overseas service locations.

9. Professional referrals

Before we send your personal contact or case details to a Professional Provider, we will:

• - identify the Professional Provider;
• - tell you what information will be shared;
• - explain the purpose;
• - obtain appropriate consent or rely on another lawful basis;
• - disclose a commercial or sponsored relationship where required.

You may browse public Professional Provider information without being required to disclose unnecessary personal information.

10. Community Contribution and career records

We may retain:

• - verified activities;
• - uncapped cumulative contribution hours;
• - evidence;
• - Super Mentor status/history;
• - award history;
• - corrections and withdrawals.

These records may be retained for career-verification and fraud-prevention purposes.

You may request correction of an inaccurate factual record.

11. Disclosure

We may disclose information to:

• - payment providers;
• - hosting and infrastructure providers;
• - communications providers;
• - Professional Providers with appropriate consent or lawful basis;
• - advisers, insurers and auditors;
• - regulators, courts, law-enforcement agencies or other authorities where required or authorised by law.

We will not routinely report every academic-integrity concern to a university. Any external disclosure should have a lawful basis and follow an approved process.

12. Marketing

Marketing consent is separate and optional.

You can unsubscribe from marketing without closing your MyUniMentor account.

Service and legal notices are not marketing and may still be sent where needed.

13. Access and correction

You may request access to personal information we hold about you, or ask us to correct inaccurate information.

We may need to verify your identity.

We will respond within a reasonable time and, where the Privacy Act applies, in accordance with applicable requirements.

14. Deletion

You may request deletion of your account or personal information.

We may retain information where reasonably necessary for:

• - transactions and accounting;
• - tax/reporting;
• - chargebacks;
• - disputes;
• - fraud/security;
• - safety;
• - legal acceptance evidence;
• - regulatory or legal obligations;
• - defence of legal claims;
• - integrity of career records.

15. Retention summary

Unless a longer period is reasonably required:

• - routine Platform messages: up to 24 months after the last relevant activity;
• - source identity/academic documents: ordinarily up to 30 days after completed verification;
• - Booking/payment/refund/chargeback records: 7 years;
• - legal acceptance records: 7 years after account closure or longer if required for a claim;
• - dispute/moderation records: up to 7 years depending on seriousness;
• - contribution/award records: while the account is active and up to 7 years after closure for verification purposes;
• - marketing consent/unsubscribe records: as reasonably necessary to demonstrate consent or suppression.

16. Security

We use reasonable technical and organisational safeguards appropriate to the information we hold.

No internet service is completely risk-free.

17. Data breaches

Where the Notifiable Data Breaches scheme applies, we will assess suspected eligible data breaches and notify affected individuals and the OAIC where required.

18. Complaints

You may make a privacy request or complaint by emailing support@myunimentor.com (marked "Privacy"). If an observer attends a session, or a Mentee joins a Group Session, the other people present will see and hear what is shared there. An observer attends only if the Mentee agreed beforehand, under the Mentor and Super Mentor Agreement. If your Mentor asks an experienced Mentor for advice about your Booking, the helper is shown only the service, format and date, not your name or contact details. Public profiles show first names only.

We aim to acknowledge a privacy complaint within 5 business days and respond substantively within 30 days where reasonably practicable.

If the Privacy Act applies and you remain dissatisfied, you may be able to complain to the Office of the Australian Information Commissioner.

19. Automated decisions

Where the Australian Privacy Act applies, CJEL will assess the transparency requirements commencing on 10 December 2026 for computer programs that use personal information to make a decision, or do something substantially and directly related to making a decision, that could reasonably be expected to significantly affect an individual's rights or interests. Where these requirements apply, this policy will describe the relevant kinds of personal information, decisions made solely by programs, and decisions substantially and directly assisted by programs.

At the date of this version, programs on the Platform:

• - remove the New Mentor label automatically after three Mentee reviews averaging 4 stars or more (an administrator decides otherwise);
• - order Mentors in search and the directory using reviews and Super Mentor status;
• - calculate prices, fees and when the Membership Fee applies;
• - refer a Booking to an administrator 14 days after the Mentor marks it complete without a Mentee response;
• - refuse messages that contain contact details.

Super Mentor status, payment decisions in disputes, and account suspension or deactivation are decided by an administrator, not by a program.

20. Changes

We may update this Policy as our services, providers or legal obligations change.

Material changes will be versioned and notified appropriately.