Privacy Policy

At Immediate Response First Aid (IRFA), we are committed to protecting your privacy and handling your personal information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) and the VET Quality Framework.

1. Information We Collect

1.1 Personal Information

We collect personal information necessary for our training services, including:

• Identification details: Name, date of birth, contact details, Unique Student Identifier (USI)
• Training information: Course enrolments, attendance records, assessment results, qualifications
• Payment details: Credit card information (processed securely through third-party payment processors)
• Employment information: Employer details (for corporate bookings)
• Medical information: Relevant medical conditions or disabilities that may affect training (collected with consent)
• Communications: Emails, phone calls, and other correspondence with us

1.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent on site
• Referring website addresses
• Cookies and similar technologies (see our Cookie Policy)

2. How We Use Your Information

We use your personal information for the following purposes:

• Training delivery: To enrol you in courses, deliver training, conduct assessments, and issue certificates
• Compliance: To meet our obligations as a Registered Training Organisation (RTO) under the Standards for RTOs 2015
• Communication: To send course confirmations, reminders, certificates, and updates about your training
• Payment processing: To process your course fees and maintain financial records
• Quality improvement: To evaluate and improve our training services
• Marketing: To send you information about courses and services (you can opt-out at any time)
• Legal obligations: To comply with Australian laws and regulatory requirements
• Safety: To ensure the health and safety of all participants during training

3. Disclosure of Your Information

We may disclose your personal information to:

• Government agencies: Australian Skills Quality Authority (ASQA), National Centre for Vocational Education Research (NCVER), and other regulatory bodies as required by law
• Training authorities: State and Territory training authorities for funding and reporting purposes
• Employers: If you are enrolled through your employer, we may share your training records with them
• Service providers: Third-party providers who assist us with payment processing, IT services, and business operations (under strict confidentiality agreements)
• Industry bodies: Professional associations and regulatory bodies relevant to first aid training
• Legal purposes: Where required by law, court order, or to protect our legal rights

3.1 NCVER Disclosure

As an RTO, we are required to disclose personal information about students to the National Centre for Vocational Education Research (NCVER). The information disclosed includes:

• Personal and demographic information
• Course enrolment and completion data
• Assessment results and qualifications issued
• Employment and educational outcomes

NCVER uses this information for research, analysis, and to publish statistical reports. For more information, visit www.ncver.edu.au/privacy.

4. Data Security

We take the security of your personal information seriously and implement appropriate measures to protect it:

• Physical security: Secure storage of paper records in locked filing cabinets
• Electronic security: Encrypted databases, secure servers, and regular backups
• Access controls: Limited access to personal information on a need-to-know basis
• Staff training: All staff are trained in privacy obligations and data handling procedures
• Secure transmission: SSL/TLS encryption for online transactions and data transmission
• Third-party providers: We only work with service providers who maintain appropriate security standards

Despite our security measures, no system is completely secure. If you suspect any unauthorized access to your information, please contact us immediately.

5. Data Retention

We retain your personal information for the following periods:

• Training records: Minimum 30 years as required by the Standards for RTOs 2015
• Financial records: 7 years as required by taxation laws
• Marketing data: Until you withdraw consent or we determine it is no longer needed
• Website analytics: As specified in our Cookie Policy

After the retention period expires, we securely destroy or permanently de-identify your information.

6. Your Rights

Under Australian privacy law, you have the right to:

• Access: Request access to your personal information we hold
• Correction: Request correction of inaccurate or outdated information
• Opt-out: Unsubscribe from marketing communications at any time
• Complaint: Lodge a complaint if you believe we have breached privacy laws
• Withdraw consent: Withdraw consent for certain uses of your information (where applicable)

To exercise these rights, please contact us using the details below. We will respond to your request within 30 days.

7. Cookies and Website Analytics

Our website uses cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic and user behavior
• Improve website functionality and user experience
• Provide personalized content and advertisements

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our website.

We use the following analytics services:

• Google Analytics: To understand how visitors use our website
• Facebook Pixel: For remarketing and conversion tracking (if applicable)

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies before providing any personal information.

9. International Data Transfers

Your personal information is primarily stored in Australia. However, some of our service providers (such as cloud hosting and email services) may store data on servers located overseas, including:

• United States
• European Union
• Singapore

We only use overseas service providers who comply with Australian privacy standards or equivalent protections.

10. Children's Privacy

Our training courses are designed for individuals aged 14 and over. If a student is under 18 years old, we require parental or guardian consent for enrolment. We collect only the minimum information necessary for training delivery and compliance purposes.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on our website with a new "Last Updated" date. Significant changes will be communicated via email to enrolled students.

12. Complaints and Disputes

If you believe we have breached your privacy, please contact us first so we can try to resolve the matter. Our complaint process includes:

1. Submit your complaint: In writing via email or post
2. Investigation: We will investigate your complaint within 10 business days
3. Response: We will provide a written response with our findings and any actions taken
4. Escalation: If you are not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC)

Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au

13. Consent

By enrolling in our courses or using our services, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. You also acknowledge that:

• We may be required to disclose your information to government agencies and regulatory bodies
• Your USI and training records will be uploaded to national databases
• We will retain your training records for a minimum of 30 years
• Your employer (if applicable) may receive copies of your training records

You can withdraw your consent for marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.