Companion Animal Institution
Effective date: 14 September 2026
 

Policy Statement
 

Companion Animal Institution is committed to respecting and protecting the privacy of the people who visit our website, contact us, use our services, purchase our resources or subscribe to our communications.
 

We handle personal information carefully, transparently and only for legitimate business purposes. Where applicable, we seek to comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other relevant Australian laws.
 

Companion Animal Institution is operated by Sarah Norton as a sole trader.
 

Purpose
 

The purpose of this Privacy Policy is to explain:
 

• what personal information we may collect;

• how and why we collect it;

• how the information may be used, stored and disclosed;

• how website cookies and analytics may be used;

• how individuals can access or correct their information;

• how individuals can make a privacy enquiry or complaint; and

• how we respond if personal information is lost, misused or accessed without authorisation.

Scope
 

This policy applies to personal information collected through:
 

• the Companion Animal Institution website at TheCAI.com.au;

• website contact and enquiry forms;

• email communications;

• newsletter or mailing-list subscriptions;

• purchases, bookings and payment transactions;

• account registrations;

• surveys, feedback forms or resource requests;

• social media and other digital platforms operated by Companion Animal Institution; and

• direct contact with Companion Animal Institution.

This policy does not control the privacy practices of external websites, services or organisations linked from our website.

Responsibilities
 

Business Owner
 

The owner of Companion Animal Institution is responsible for:
 

• overseeing the collection and handling of personal information;

• maintaining reasonable privacy and information-security practices;

• responding to requests for access or correction;

• reviewing privacy enquiries and complaints;

• responding to suspected data breaches; and

• reviewing and updating this policy when business activities, technology or legal obligations change.

Contractors and Service Providers
 

Any contractor or service provider given access to personal information must:
 

• use it only for the authorised purpose;

• protect it from loss, misuse and unauthorised access;

• comply with applicable privacy and confidentiality requirements; and

• notify Companion Animal Institution promptly of any suspected privacy or security incident.

​
 

Individuals are responsible for providing information that is accurate and current and for avoiding the submission of unnecessary personal or sensitive information.
 

Definitions
 

Personal information means information or an opinion about an identified individual or an individual who is reasonably identifiable.
 

Sensitive information includes information about matters such as a person’s health, racial or ethnic origin, religious beliefs, sexual orientation, criminal record or membership of certain organisations.
 

Cookies are small data files placed on a device when a person visits a website. They may support website functionality, security, analytics and user preferences.
 

Service provider means an external organisation used to help operate the website or deliver services, such as a website host, payment processor, email platform or cloud-storage provider.
 

We, us and our refer to Companion Animal Institution, operated by Sarah Norton as a sole trader.
 

Procedure
 

1. Information We May Collect
 

Depending on how individuals interact with us, we may collect:
 

• names;

• email addresses;

• telephone numbers;

• postal or billing addresses;

• organisation names and roles;

• information included in enquiries, messages, forms or feedback;

• service, booking or purchase information;

• newsletter and communication preferences;

• account details, if website accounts are introduced;

• transaction records;

• information relating to animal care, animal welfare, fostering, adoption or organisational operations that an individual chooses to provide;

• technical information such as IP address, device type, browser type, referring website and general website activity; and

• any other information voluntarily supplied to us.
   

We do not intend to collect sensitive information unless it is reasonably necessary for a specific purpose and the individual has consented, or its collection is otherwise permitted or required by law.
 

2. How Information Is Collected
 

Personal information may be collected:
 

• directly from an individual through a website form, email, purchase, subscription, booking or other communication;

• when an individual creates an account or downloads a resource;

• through cookies, analytics tools and website technologies;

• from an organisation the individual represents;

• from publicly available sources; or

• from a third party where the individual has consented or where collection is permitted by law.
   

Where practical, we will collect personal information directly from the individual concerned.

3. Why We Collect and Use Information
 

We may use personal information to:
 

• respond to enquiries and requests;

• provide information, resources, education, consulting or other services;

• process orders, bookings and payments;

• provide access to purchased or requested digital resources;

• establish and manage user accounts;

• maintain business and transaction records;

• communicate service-related information;

• send newsletters, updates or promotional material where consent has been provided or where otherwise permitted;

• improve our website, resources and services;

• monitor website performance and understand how visitors use the website;

• prevent misuse, fraud or security threats;

• manage complaints and disputes;

• meet insurance, taxation, accounting and legal requirements; and

• protect our rights and the rights, safety and wellbeing of others.
   

We will not use personal information for an unrelated purpose unless consent is obtained or the use is permitted or required by law.
 

4. Website Hosting and Wix
 

TheCAI.com.au is hosted and managed using Wix.
 

Wix may collect, process and store information on our behalf when individuals visit the website, submit a form, create an account, purchase a product or use another website feature. Wix may also use cookies and similar technologies to provide website functionality, security and analytics.
 

Information handled through Wix may be stored or processed using infrastructure located outside Australia. Wix’s handling of information is also governed by its own privacy practices and terms.
 

5. Cookies and Analytics
 

Our website may use essential, functional and analytical cookies.
 

Cookies may be used to:

• operate and secure the website;

• remember visitor preferences;

• support forms, accounts, purchases and other website functions;

• measure website traffic and performance; and

• understand how visitors interact with website content.
   

Visitors may be able to manage non-essential cookies through the website’s cookie settings or their browser settings. Disabling certain cookies may affect how parts of the website function.
 

If advertising or additional tracking technologies are introduced, this policy and the website’s cookie notice will be updated where necessary.
 

6. Payments and Purchases
 

If online payments or purchases are introduced, transactions may be processed by Wix Payments or another third-party payment provider.
 

Payment providers may collect financial information needed to complete a transaction. Companion Animal Institution will generally not receive or retain complete credit or debit card details where payments are processed securely by an external provider.
 

Payment information will be handled in accordance with the payment provider’s privacy policy, security standards and terms.
 

7. Newsletters and Direct Marketing
 

Where an individual subscribes or otherwise consents, we may use their contact information to send newsletters, service updates, educational information or promotional communications.
 

Every electronic marketing communication will provide a way to unsubscribe. Individuals can also withdraw their consent by contacting admin@TheCAI.com.au.

We may still send essential communications relating to an existing order, booking, account or service where required.
 

8. Disclosure of Personal Information
 

We may disclose personal information to:
 

• Wix and other website-service providers;

• payment processors;

• email, newsletter and customer-management platforms;

• cloud-storage, information-technology and cybersecurity providers;

• professional advisers, including accountants, insurers and legal advisers;

• contractors assisting with the delivery of our services;

• government agencies, regulators, courts or law-enforcement authorities where required or authorised by law; or

• another party with the individual’s consent.

We do not sell or rent personal information.
 

Service providers are given access only to the information reasonably required to perform their services.
 

9. Overseas Processing and Disclosure
 

Some technology and service providers may store or process information outside Australia.
 

The countries involved may vary according to the provider’s systems and infrastructure. Where reasonably practicable, we will consider the privacy and security practices of providers before sharing personal information with them.
 

By using our website or services, individuals acknowledge that their information may be processed in countries with privacy laws that differ from Australian law.
 

10. Storage and Security
 

Personal information may be stored electronically through Wix, email systems, cloud-storage services, business software and secure devices.
 

We take reasonable steps to protect information from:
 

• loss;

• misuse;

• interference;

• unauthorised access;

• unauthorised alteration; and

• unauthorised disclosure.
   

These measures may include password protection, access controls, software updates, secure platforms, multi-factor authentication and limiting access to people who require the information.
 

No website, internet transmission or electronic-storage system can be guaranteed to be completely secure.
 

11. Retention and Disposal
 

We retain personal information only for as long as reasonably necessary to:
 

• provide services;

• manage the relationship with the individual;

• maintain business and financial records;

• respond to disputes or complaints; and

• meet legal, taxation, insurance and regulatory requirements.
   

When information is no longer reasonably required, we will take reasonable steps to delete, destroy or de-identify it, unless it must be retained by law.
 

12. Access and Correction
 

Individuals may request access to the personal information we hold about them or ask for information to be corrected if it is inaccurate, incomplete or out of date.
 

Requests should be emailed to admin@TheCAI.com.au.
 

We may ask for sufficient information to confirm the requester’s identity before providing access or making a correction. We will respond within a reasonable period.
 

In some circumstances, access may be limited or refused where permitted by law. If this occurs, we will provide an explanation where reasonably required.
 

13. Children’s Privacy
 

Our website and services are not specifically directed at children under 18 unless a resource or activity clearly states otherwise.
 

A child or young person should obtain the assistance of a parent, guardian, teacher or other responsible adult before providing personal information through the website.
 

If we become aware that personal information has been collected from a child without appropriate authorisation, we will take reasonable steps to review and, where appropriate, delete it.
 

14. External Links
 

Our website may contain links to external websites or services.
 

Companion Animal Institution is not responsible for the content, security or privacy practices of external websites. Visitors should review the privacy policy of any external service before providing personal information.
 

15. Privacy Incidents and Data Breaches
 

Suspected privacy incidents will be assessed promptly.
 

Where a data breach is likely to cause serious harm and applicable law requires notification, we will take reasonable steps to notify affected individuals and the Office of the Australian Information Commissioner.
 

We will also take reasonable steps to contain the incident, reduce potential harm and prevent a similar incident from happening again.

 

16. Privacy Enquiries and Complaints
 

Questions, requests or complaints about privacy or the handling of personal information can be submitted to:
 

Privacy Contact
Companion Animal Institution
Email: admin@TheCAI.com.au
 

Please include enough information for us to understand and investigate the matter.
 

We will acknowledge and assess privacy complaints and aim to provide a response within 30 days.
 

If the matter is not resolved satisfactorily and the Privacy Act applies, the individual may contact the Office of the Australian Information Commissioner through www.oaic.gov.au.
 

17. Changes to This Policy
 

This Privacy Policy may be amended when our services, website functions, technology, service providers or legal obligations change.
 

The current version will be published on TheCAI.com.au with its effective date. Continued use of the website after an update indicates acknowledgement of the revised policy.
 

Related Documents
 

• Website Terms and Conditions

• Cookie Notice

• Refund and Returns Policy

• Disclaimer

• Email and Direct Marketing Consent Statement

• Data Breach Response Plan

• Records Retention Procedure

• Wix Privacy Policy

• Privacy Act 1988 (Cth)

• Australian Privacy Principles

• Spam Act 2003 (Cth)
   

Review
 

This policy will be reviewed at least every two years or earlier if there is a significant change to the website, business activities, service providers or applicable legislation.
 

Next scheduled review: September 2028