AMA Learn Online

For the purposes of this policy, FME means FME Training Pty Ltd trading as AMALearnOnline.

 

1. AMALearnOnline Moodle site

---

To gain access to this AMALearnOnline Moodle site you gave us data on your first name, last name and email address.  This information is stored on this site. Moodle also logs our IP address for security and support purposes.

All Moodle sites require a small amount of information to be stored and maintained for user access.  User data will be stored securely within this Moodle site which is backed up nightly.  Backups are kept for 30 days.  Moodle also logs your IP address for security and support purposes.

2. Accounting Data

---

FME is required to keep data on clients, tutors and suppliers for accounting purposes.

ALL clients and suppliers (students, tutors and others) who interact with FME consent to consent to FME storing and processing their contact details and transaction data.

FME's accounting system includes both cloud based (Xero) and desktop based systems. The accounting system allows us to maintain records of the services you have purchased from or supplied to us. We must maintain this data for ATO, HMRC and statutory compliance purposes.

We keep some or all of the following information for accounting purposes:

1. Customer / supplier name, address, phone, email and other contact details.
2. Transaction data such as PayPal / Stripe reference, amount, date, product purchased etc.

3. Backups

Backups of FME sites are made nightly and stored for 30 days.

Backups hold a full copy of each site database: this includes all user information and their interactions with the site such as IP address, messaging, forums, assessments, days of login, activity tracking, etc.

Backup files are stored on dedicated encrypted disks using a cloud service within the EU.  Overwrite of backups occurs every 30 days.

 

4. FME server information

AMALearnOnline uses cloud-based servers with third party providers based in the EU to host our websites. 

All our servers are cloud based and managed / supported by EU based hosting companies and other EU and non-EU contractors. FME contractors and hosting support staff may have access to these servers from time to time, and the hosting providers or other contractors may require access for purposes of support. ALL clients (students, tutors and others) utilising our services are required to give their consent to our hosting your sites in this cloud.  

• All servers sit behind firewalls with only the required ports open to the outside world
• User and password for accounts on the server have very strong requirements and there are very few user accounts with shell access to the server - these are controlled by public keys
• Individual sites on the servers are hFME under separate user accounts and are locked down so that one client can not gain access to another client's account
• Our cloud hosting providers use intrusion detection software which monitors for unusual activity and flags on our monitoring systems should anything untoward occur
• Our cloud service providers have software in place to prevent brute force attacks on passwords
• Our cloud service providers’ agents use a secure password database with two form factor for authentication to access account details for server and sites
• All cloud service providers backup all sites nightly and these backups are kept for 30 days

5. Email information

Email is managed and stored on Google and EU hosting providers.

FME email is managed and stored on Google and EU hosting providers.

6. Electronic document storage

FME stores electronic documents and files on local PC's, Google Drive, Microsoft OneDrive and Zoho servers.

These files primarily contain information of a non-personal nature such as learning materials.  However, accounting records and emails may include personal data, and learning videos may contain personal images.

7. Visual images and recordings

FME uses Vimeo, Sessions, Zoom and Adobe to store learning videos and recordings of webinars.  Such material may be retained for an extended period as it may be incorporated into subsequent learning materials.

Personal data may include the image of tutors, and occasionally the names and comments of webinar attendees.

8. Tutor held personal data

FME acts primarily as the agent of independent accounting and finance tutors. FME is not responsible for the data management policies of those principals unless data is supplied to those tutors by FME.  FME requires and has received assurances by those tutors that they will abide by GDPR principles in regard to all personal data supplied to them by FME.