Privacy Policy
Legend Institute Pty Ltd
RTO Code: 41426 | CRICOS Provider Code: 04002K | ABN: 79 607 512 201
1. About this policy
Legend Institute Pty Ltd (“Legend Institute”, “we”, “us” or “our”) respects your privacy. This policy explains how we collect, hold, use and disclose personal information when you enquire about our courses, use our website or social media forms, apply to study, enrol or otherwise deal with us.
We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply, and applicable education, student identifier and recordkeeping requirements.
2. Information we collect
The information we collect depends on your dealings with us. It may include:
- Your name, date of birth, address, email address and telephone number.
- Your course interests, preferred intake, location and enquiry details.
- Your Unique Student Identifier (USI), education history, qualifications, employment information and language, literacy, numeracy and digital skills assessment information.
- Enrolment, attendance, academic progress, assessment, payment, refund and complaint records.
- Emergency contact details and information about an authorised representative or education agent.
- Disability, health, support needs or Indigenous status information where relevant to student support or required reporting.
- Website usage information, such as IP address, browser, device, pages visited and interactions, where collected by the technologies used on our website.
We collect sensitive information only with your consent where required, or where collection is otherwise required or authorised by law. Please do not submit passport copies, health documents or other sensitive records through advertising lead forms.
3. How we collect information
We generally collect information directly from you through website enquiries, Facebook and Instagram Instant Forms, application and enrolment forms, email, telephone, meetings, learning systems and assessments.
Where appropriate and lawful, we may also collect information from your authorised education agent or representative, previous education providers, employers, government agencies and service providers. We take reasonable steps to make you aware of relevant third-party collection.
You may make a general enquiry anonymously or under a pseudonym where lawful and practicable. We usually need to verify your identity for enrolment, issuing qualifications and meeting reporting obligations. If you do not provide necessary information, we may be unable to process your request or provide a service.
4. Why we use information
We collect, hold, use and disclose personal information to:
- Respond to enquiries and provide course, fee, intake and entry requirement information.
- Assess applications, eligibility, prior learning and support needs.
- Manage enrolment, teaching, assessment, student support and qualifications.
- Administer payments, refunds, complaints and appeals.
- Maintain records and meet regulatory, audit, reporting and legal obligations.
- Operate, secure and improve our website, systems and services.
- Send relevant marketing communications where permitted by law.
We use or disclose information for other purposes only with your consent or where otherwise permitted or required by law.
5. Facebook and Instagram lead forms
If you submit a Facebook or Instagram Instant Form, we receive the details you submit, which may include prefilled contact information and your answers to course enquiry questions.
We use those details to respond to your enquiry and contact you about relevant study options by telephone, email or SMS. Where permitted by law, we may send related course updates. You can ask us to stop marketing at any time.
Meta also handles information under its own privacy policy, available at https://www.facebook.com/privacy/policy/. This policy explains Legend Institute’s handling of information received from your enquiry.
6. Marketing preferences
You can opt out of marketing emails using the unsubscribe link, follow the opt-out instructions in a marketing SMS, or contact info@legendinstitute.edu.au. We will action requests within applicable legal timeframes.
Opting out of marketing does not stop essential communications about an active application, enrolment, payment or legal obligation. We do not sell your personal information.
7. Who we disclose information to
Where necessary and lawful, we may disclose relevant information to:
- Staff, trainers, assessors and contractors who need it to perform their duties.
- Your authorised education agent, representative or another person you authorise.
- Providers supporting our student management, learning, hosting, communications, payments, IT and administration systems.
- Professional advisers, auditors, insurers and relevant dispute resolution bodies.
- Government departments, regulators and authorised bodies, including ASQA, NCVER, the Student Identifiers Registrar, the Department of Education, the Department of Home Affairs and the Tuition Protection Service, where applicable.
- Other parties where you consent, or disclosure is required or authorised by law.
We take reasonable steps to limit disclosures to information needed for the relevant purpose. Emergency contacts do not automatically receive access to your student records.
8. Student data and statutory reporting
As a registered training organisation and CRICOS provider, we collect and report student information under applicable vocational education and international education requirements.
This may include reporting training activity to NCVER or authorised government bodies, USI-related processes, and international student information through PRISMS. Information reported to authorised bodies may be used for administration, regulation, policy, research, statistics and student surveys as permitted by law.
We provide the applicable student privacy collection notice at or before enrolment. That notice contains more specific information about mandatory student data collection, use and disclosure and should be read with this policy.
9. Overseas handling
Our use of technology providers and dealings with overseas education agents may involve personal information being stored, accessed or disclosed outside Australia. Where applicable, we take reasonable steps required by Australian privacy law to protect information disclosed overseas.
10. Cookies and website technologies
Our website may use cookies and similar technologies to support its operation and, where enabled, understand usage and measure advertising performance. These technologies may collect device and browsing information.
You can manage cookies through your browser settings. Restricting cookies may affect some website functions. Third-party websites and platforms linked from our website have their own privacy practices.
11. Storage, security and retention
We hold information in electronic systems and, where applicable, paper records. We take reasonable steps to protect it from misuse, interference, loss and unauthorised access, modification or disclosure, including appropriate access restrictions and security controls.
We keep information for as long as reasonably needed for its purpose and to meet applicable education, financial, legal and regulatory recordkeeping obligations. When information is no longer required, we take reasonable steps to securely destroy or de-identify it, unless retention is required by law.
If a data breach occurs, we assess it and notify affected individuals and regulators where required by law.
12. Access and correction
You can request access to personal information we hold about you or ask us to correct inaccurate, incomplete or outdated information by contacting us below.
We may need to verify your identity. We will respond within a reasonable period, generally within 30 days. If we refuse a request, we will explain why, where required, and how you can complain. There is no fee to request access or correction. If a lawful, reasonable access charge applies, we will tell you beforehand.
13. Privacy complaints
If you have a privacy concern, contact us with your name, contact details and a description of the issue. Address your complaint to the Privacy Contact at info@legendinstitute.edu.au.
We will acknowledge your complaint, review the relevant circumstances and aim to provide a written response within 30 days. If more time is needed, we will explain the reason and expected timeframe.
If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):
- Website: https://www.oaic.gov.au/
- Telephone: 1300 363 992
14. Changes to this policy
We may update this policy to reflect changes in our practices or legal requirements. The current version will be published on our website with its last updated date. You can request a copy free of charge.
15. Contact us
Privacy Contact — Legend Institute Pty Ltd
- Phone: (02) 8014 3969
- Email: info@legendinstitute.edu.au
- Campus: Level 3, 20–22 Macquarie Street, Parramatta NSW 2150