Privacy Policy

Last updated: 1 September 2025

1. Purpose

This policy outlines how International Education Consultants Australia (IECA) Pty Ltd collects, uses, stores, and protects personal information. It demonstrates our commitment to safeguarding privacy in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Scope

This policy applies to all personal information collected, used, or managed by IECA in the course of its work with staff, contractors, clients, partners, and stakeholders.

3. Definitions

Personal Information: Information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not.
Sensitive Information: A subset of personal information that includes details such as racial or ethnic origin, political opinions, religious beliefs, health information, or criminal records.
APPs (Australian Privacy Principles): A set of 13 principles under the Privacy Act 1988 (Cth) that govern the handling of personal information.
Data Breach: Unauthorised access to, or disclosure of, personal information, or loss of information that could lead to unauthorised access or disclosure.

4. Policy Statement

IECA is committed to protecting the privacy of individuals. We will:

Collect only the personal information necessary for our services and functions.
Use personal information only for the purposes for which it was collected, unless consent is given for another use, or disclosure is required by law.
Take reasonable steps to ensure information is accurate, up-to-date, and secure.
Provide individuals with access to their personal information and the ability to request corrections.
Respond promptly and appropriately to privacy breaches in line with the Notifiable Data Breaches (NDB) Scheme.

5. Principles of Practice

5.1 Collection of Information

IECA may collect personal information through forms, surveys, correspondence, consultancy projects, research, and training activities.
Where practical, information will be collected directly from the individual.

5.2 Use and Disclosure

Personal information will only be used for the primary purpose of collection, such as delivering services, conducting research, or meeting contractual obligations.
Disclosure to third parties will only occur with consent by the individual, or where required by law.

5.3 Data Security

IECA will take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.
Electronic records will be stored securely with password protection, and physical records will be stored in locked facilities5.4

5.4 Access and Correction

Individuals have the right to request access to their personal information held by IECA.
Requests for correction of inaccurate or outdated information will be responded to in a timely manner.

5.5 Data Breaches

IECA will act in accordance with the Notifiable Data Breaches Scheme by assessing suspected breaches and notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) if a breach is likely to cause serious harm.

6. Procedures

1. Request for Access or Correction: Submit in writing to the Director at k.richardson@ieca.com.au.

2. Handling Complaints: Privacy-related complaints will be managed under IECA’s Complaints and Feedback Policy.

3. Data Breach Response:

In the event of a data breach, IECA will:

1. Contain the breach.

2. Assess the potential impact.

3. Notify affected individuals and the AIC if required.

4. Review practices to prevent recurrence.

7. Responsibilities

All staff and contractors: Must comply with this policy and handle personal information responsibly.
Director: Responsible for ensuring IECA’s compliance with the Privacy Act and APPs, and for maintaining procedures to protect personal information

This policy will be reviewed every two years, or sooner if required by changes in legislation, regulation, or organisational needs.