Acceptable Use Policy

1. Who this policy applies to

This Acceptable Use Policy applies to users, administrators and organisations that access the CAQA Technologies website and any software, portals, dashboards, online systems or hosted environments that CAQA Technologies, part of CAQA Groups and a Career Calling International initiative, operates, administers or supports. Users must keep account details secure, use systems lawfully, protect confidential information, avoid unauthorised access and comply with any administrator, subscription or acceptable-use requirements that apply to their engagement.

2. Using this website

This website exists to describe our managed IT, cybersecurity, system support and technical services to education and business audiences and to let you contact our team. You may browse the site, submit enquiries through the contact page and subscribe to our newsletter. When you submit a form you agree to provide information that is accurate and not misleading, to identify yourself honestly and not to submit content that is unlawful, defamatory, infringing or harmful. The personal information you submit is handled under our Privacy Policy. No payments are taken through this website, and no user accounts are created on it.

3. Prohibited conduct

When using this website, or any system or environment we operate or support, you must not:

• use the website or systems for any unlawful purpose or in breach of any applicable law or regulation;
• share, sell or disclose credentials, or use another person’s credentials, for any system we administer;
• interfere with or disrupt the operation of the website or any supported system, service or network;
• conduct vulnerability scanning, penetration testing or any other security testing without written authorisation;
• introduce malware, or upload files or content designed to damage, intercept or expropriate systems or data;
• attempt to gain unauthorised access to accounts, systems, data or areas not intended for your use;
• circumvent, disable or degrade security controls, logging or monitoring;
• harvest or scrape content or contact details, or use the website to send unsolicited bulk communications; or
• impersonate CAQA Technologies, its staff or any other person, or misrepresent an affiliation with us.

4. Client-managed environments

Where we manage or support systems on behalf of a client organisation, the client’s own workplace, security and acceptable-use policies continue to apply to that client’s staff and users. This policy operates alongside those policies and alongside the relevant service agreement. If a conflict arises, the signed agreement for the engagement prevails. We may recommend, and with authorisation apply, access restrictions needed to protect a supported environment from misuse.

5. Monitoring and enforcement

We may investigate suspected misuse of this website or of systems we administer, and we may preserve relevant logs and records while we do so. Where misuse is identified we may restrict or suspend access, remove offending content, notify the affected client organisation and, where the conduct may be criminal, refer the matter to law enforcement. We may also recover reasonable costs arising from deliberate misuse where the law allows.

6. Advice, changes and severability

This policy is general information about acceptable behaviour and is not legal advice. We may update this policy from time to time, and the current version will always be available on this page. Where a change materially affects how a supported client environment is administered, we tell the nominated contacts of affected clients before the change takes effect wherever practicable. If any part of this policy is found to be unenforceable, the remainder continues to apply.

7. Reporting misuse

If you believe this website, or a system we support, is being misused, or if you have received a suspicious communication claiming to be from CAQA Technologies, report it to info@caqa.com.au, call 1800 266 160 or use our contact page. Suspected security incidents affecting managed clients should be reported under our Incident Response Terms.