1. Purpose and Scope
This Privacy Policy establishes the governance framework, compliance obligations, and operational protocols under which the Institute collects, processes, stores, discloses, and safeguards personal information. This Policy applies to all individuals who access the Institute’s website, engage with its digital platforms, or participate in any educational, administrative, or transactional activities. By continuing to interact with the Institute’s services, you acknowledge and consent to the data-handling practices described herein.
2. Definitions
For the purposes of this Policy:
- “Personal Information” refers to any information or opinion that identifies, or could reasonably identify, an individual.
- “Processing” includes collection, storage, use, disclosure, transmission, and destruction of personal information.
- “Third-Party Service Provider” refers to any external entity engaged to perform operational, administrative, or technical functions on behalf of the Institute.
3. Categories of Personal Information Collected
The Institute may collect and process the following classes of personal information, whether directly from the individual or indirectly through authorised intermediaries:
- Legal name, residential address, and contact identifiers
- Email address, telephone number, and communication metadata
- Financial and transactional information required for payment processing
- Academic history, English-language proficiency indicators, and related educational records
- Digital interaction data, including cookies, IP addresses, device identifiers, analytics metrics, and behavioural tracking information
Collection may occur through online forms, enrolment documentation, automated website technologies, or authorised third-party integrations.
4. Lawful Basis and Purpose of Processing
Personal information is processed strictly for legitimate and operationally necessary purposes, including but not limited to:
Verification of identity, enrolment administration, and institutional communication
Provision of educational services, course materials, and academic support
Financial management, invoicing, payment processing, and audit compliance
Internal governance, service optimisation, risk management, and quality assurance
Compliance with statutory, regulatory, or law-enforcement obligations
The Institute may also utilise aggregated, anonymised, or de-identified data for analytical, statistical, or operational improvement purposes.
5. Disclosure and Third-Party Engagement
The Institute does not sell, lease, or commercially exploit personal information. Disclosure may occur only under the following conditions:
- To payment processors, financial institutions, or authorised vendors for transactional purposes
- To government agencies, regulatory authorities, or law-enforcement bodies where disclosure is required or permitted by law
- To Third-Party Service Providers engaged to support administrative, technical, or IT-related operations
All third-party engagements are subject to confidentiality obligations and must adhere to data-protection standards consistent with applicable Australian privacy legislation.
6. Data Security and Risk Management
The Institute implements a multi-layered security framework incorporating administrative, technical, and physical safeguards designed to mitigate risks associated with unauthorised access, misuse, alteration, or loss of personal information. While reasonable measures are employed, the Institute does not warrant absolute security and disclaims liability for breaches arising from circumstances beyond its reasonable control.
7. Access, Correction, and Individual Rights
Individuals may request access to personal information held by the Institute and may seek correction of inaccurate, incomplete, or outdated data. Requests must be submitted to the Institute’s administration team and will be processed in accordance with applicable privacy legislation and internal compliance procedures.
8. Cookies, Tracking Technologies, and Digital Monitoring
The Institute’s digital platforms may deploy cookies, analytics tools, tracking technologies, and similar mechanisms to enhance user experience, monitor system performance, and collect operational metrics. Users may disable cookies through browser settings; however, doing so may impair website functionality or restrict access to certain features.
9. Data Retention
Personal information will be retained only for the duration necessary to fulfil the purposes for which it was collected, or as otherwise required under applicable laws, regulatory frameworks, or institutional record-keeping obligations. Upon expiry of the retention period, information will be securely destroyed or de-identified.
10. Amendments and Policy Governance
The Institute reserves the unilateral right to amend, revise, or replace this Privacy Policy at any time. Amendments take effect immediately upon publication on the Institute’s website. Continued use of the Institute’s services constitutes acceptance of the revised Policy. The Institute’s management team is responsible for oversight, implementation, and periodic review of this Policy to ensure ongoing compliance with legislative and regulatory requirements.
