GDPR Compliance

Last updated: September 2026

Data Protection Principles

We process personal data in accordance with the General Data Protection Regulation principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent: You have provided explicit consent for specific processing activities
• Contract Performance: Processing is necessary to fulfill our training services
• Legal Obligation: Processing is required to comply with legal requirements
• Legitimate Interests: Processing is necessary for our legitimate business operations, provided it does not override your fundamental rights

Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another organization
• Right to Object: Object to processing based on legitimate interests
• Rights Related to Automated Decision-Making: We do not use automated decision-making or profiling

Data Retention

Personal data is retained only as long as necessary for the purposes for which it was collected. Student records are maintained for a period of seven years following program completion to comply with educational record-keeping requirements.

International Data Transfers

We operate primarily within Australia. If personal data is transferred internationally, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Data Protection Officer

For questions about data protection or to exercise your GDPR rights, contact us at [email protected].

Exercising Your Rights

To exercise any of your rights, submit a request to [email protected]. We will respond within one month of receiving your request. If your request is complex or numerous, we may extend this period by an additional two months and will inform you accordingly.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Children's Privacy

Our services are directed at adults. We do not knowingly collect personal data from individuals under 16 years of age without parental consent.

Updates to This Policy

This GDPR compliance statement may be updated to reflect changes in our practices or legal requirements. The updated version will be posted with a revised date.