The Institute of Presilience® respects your privacy and is committed to protecting the personal information we hold about you. This policy explains what information we collect, why we collect it, how we use and disclose it, and the rights and choices available to you. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as the record-keeping and reporting obligations that apply to us as a Registered Training Organisation.
01 Who we are & this policy
The Institute of Presilience® ("the Institute", "we", "us" or "our") is operated by R2S Training and Education Pty Ltd (ABN 84 167 319 413; ACN 167 319 413), a Registered Training Organisation (National Provider Code 4785). References to "you" mean any person whose personal information we collect, including prospective, current and former students, participants, enquirers, website visitors, subscribers, partners and contacts.
This policy applies to personal information we collect through our website at instituteofpresilience.edu.au (our "Website"), through our enrolment, training, assessment and certification activities, and through our emails, phone calls, events, forms and other interactions with you. It does not apply to third-party websites or services that we link to but do not control.
02 Information we collect
The types of personal information we collect depend on how you interact with us. They may include:
- Identity and contact details – your name, title, date of birth, postal and email addresses, and phone numbers.
- Enrolment and student records – your Unique Student Identifier (USI), prior education and qualifications, employer or sponsor details, course selections, attendance, assessment submissions and results, and the qualifications, certifications and digital badges you are issued.
- Government-required VET data – information we are required to collect to report to national and state training authorities, which may include your citizenship or residency status, country of birth, language spoken at home, Aboriginal or Torres Strait Islander status, disability status and prior schooling. This is collected to meet our regulatory obligations (see sections 4 and 6).
- Payment information – billing details and records of payments. Card payments are processed securely by our payment provider, Stripe, and we do not store your full card details.
- Correspondence and enquiries – the content of forms you submit, emails, phone calls, support requests, feedback, reviews and testimonials.
- Technical and usage data – when you use our Website we may collect your IP address, browser and device type, operating system, the pages you view, referring URLs and similar information collected through cookies and analytics tools (see section 9).
You do not have to provide the personal information we request, but if you choose not to, we may be unable to enrol you, deliver training, issue a qualification or certification, or respond to your enquiry.
03 Sensitive information
Some of the information above is "sensitive information" under the Privacy Act, which is given additional protection. In limited circumstances we may collect sensitive information such as:
- Health or disability information – so we can make reasonable adjustments and support you at courses, assessments and events.
- Cultural background information – such as Aboriginal or Torres Strait Islander status, where required for government VET reporting.
- Other sensitive information where a specific course, credential or legal requirement makes it relevant.
We collect sensitive information only with your consent, or where the collection is required or authorised by law, and we use and disclose it only for the purpose for which it was collected or a directly related purpose you would reasonably expect.
04 How we collect it
Wherever practicable we collect personal information directly from you – for example when you enrol, complete a form on our Website, download a resource, register for a webinar or event, subscribe to updates, make a payment, or contact us by email or phone.
We may also collect information from third parties where you would reasonably expect us to, or where you have consented, including:
- your employer or sponsoring organisation, where they arrange or fund your training;
- the USI Registrar, to verify or create your Unique Student Identifier;
- referees, prior training providers or credentialing bodies, where relevant to your enrolment; and
- analytics and advertising providers, in relation to your use of our Website.
05 How we use it
We use personal information for the purposes for which it was collected and related purposes you would reasonably expect, including to:
- process enrolments and administer your participation in our programs, courses and events;
- deliver training and assessment, and issue qualifications, statements of attainment, certifications and Credly digital badges;
- create or verify your Unique Student Identifier and maintain your student records;
- meet our legal, regulatory and reporting obligations as a Registered Training Organisation (see section 6);
- process payments and manage accounts;
- respond to enquiries, provide support and manage feedback or complaints;
- send you administrative messages and, where permitted, marketing communications about our programs and events (see section 8);
- maintain, protect and improve our Website, services and security; and
- comply with the law and enforce our terms and rights.
06 When we disclose it
We do not sell your personal information. We may disclose it in the following circumstances:
- Within our group – to related entities of the Risk 2 Solution Group for the purposes described in this policy.
- Service providers – to contractors and suppliers who help us operate, including IT, hosting, email, learning management, payment, credentialing (such as Credly) and marketing providers, who are required to protect your information and use it only for the services they provide to us.
- Government and regulators – to the National Centre for Vocational Education Research (NCVER), the Australian Skills Quality Authority (ASQA) and other Commonwealth and State/Territory training and funding authorities, and the USI Registrar, as required for VET regulation, funding, audit, statistics and research. Note: under the National Vocational Education and Training Regulator Act 2011 and associated data provision requirements, we are required to disclose certain student information to the NCVER, which may use and disclose it for statistical, research, regulatory and reporting purposes.
- Employers and sponsors – where they arrange or fund your training, we may report on your enrolment, progress and completion.
- Professional and partner bodies – where relevant to your credential or where you have consented.
- Legal and safety – where required or authorised by law, to respond to lawful requests, or where reasonably necessary to protect the rights, property or safety of any person.
- Business changes – in connection with a sale, merger, restructure or transfer of our business or assets, in which case we will take reasonable steps to ensure the information remains protected.
07 Overseas disclosure
We store personal information in Australia. Some of our service providers, however, may process limited information outside Australia in the course of providing their services – for example, our website analytics provider (Google Analytics), our payment provider (Stripe) and the Credly digital badging platform may process certain technical, transaction or credential information overseas, including in the United States. Where personal information is disclosed to an overseas recipient, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.
08 Marketing & your choices
With your consent, or where otherwise permitted by law, we may send you information about our programs, courses, events and updates. Every marketing email includes an unsubscribe link, and you can opt out at any time by using that link or contacting us using the details in section 17. We will action opt-out requests promptly. Opting out of marketing does not affect essential administrative messages relating to your enrolment or account.
10 Data security
We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure, using appropriate technical and organisational measures. No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in serious harm, we will respond in accordance with the Notifiable Data Breaches scheme under the Privacy Act, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.
11 How long we keep it
We keep personal information only for as long as it is needed for the purposes described in this policy, or for as long as we are required to retain it by law. As a Registered Training Organisation, we are required to retain certain student and assessment records for prescribed periods. When information is no longer required, we take reasonable steps to destroy it or de-identify it.
12 Access & correction
You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. To make a request, contact us using the details in section 17. We will respond within a reasonable period and may need to verify your identity first. In limited circumstances we may decline a request as permitted by law, in which case we will explain why in writing.
13 Complaints
If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact our Privacy Officer using the details in section 17. We will acknowledge your complaint, investigate it and respond to you in a reasonable time.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.
14 Children & minors
Our programs and Website are intended for adult learners and professionals. We do not knowingly collect personal information from children. Where a student is under 18, we collect and handle their information with appropriate consent from a parent or guardian. If you believe we have collected information from a minor without appropriate consent, please contact us so we can address it.
15 Third-party links
Our Website and communications may contain links to third-party websites and services that we do not control. This policy does not apply to those sites. We encourage you to review the privacy policies of any third-party site before providing your personal information.
16 Changes to this policy
We may update this policy from time to time to reflect changes in our practices or legal obligations. The current version will always be available on this page, with the "Last updated" date shown at the top. We encourage you to review it periodically. Significant changes will be communicated where appropriate.
17 Contact us
For any questions about this policy, to exercise your privacy rights, or to make a complaint, please contact our Privacy Officer:
