Privacy Policy (v2.20)

ISM is committed to protecting the privacy and confidentiality of its students, clients and employee in accordance with the Privacy Act 1988 and the Australian Privacy Principles (APPs) and in compliance with EU – General Data Protection Regulation (GDPR) 2016/679 as outlined below:

Why we collect your personal information 

As a registered training organisation (RTO), we collect your personal information so we can process and manage your enrolment in a vocational education and training (VET) course with us. 

If your personal information is not provided, you will be unable to enrol and study with ISM.

How we use your personal information 

We use your personal information to enable us to deliver VET courses to you, and otherwise, as needed, to comply with our obligations as an RTO. 

How we disclose your personal information 

We are required by law (under the National Vocational Education and Training Regulator Act 2011 (Cth) (NVETR Act)) to disclose the personal information we collect about you to the National VET Data Collection kept by the National Centre for Vocational Education Research Ltd (NCVER). The NCVER is responsible for collecting, managing, analysing and communicating research and statistics about the Australian VET sector. We are also authorised by law (under the NVETR Act) to disclose your personal information to the relevant state or territory training authority. 

How the NCVER and other bodies handle your personal information 

The NCVER will collect, hold, use and disclose your personal information in accordance with the law, including the Privacy Act 1988 (Cth) (Privacy Act) and the NVETR Act. Your personal information may be used and disclosed by NCVER for purposes that include populating authenticated VET transcripts; administration of VET; facilitation of statistics and research relating to education, including surveys and data linkage; and understanding the VET market. 

The NCVER is authorised to disclose information to the Australian Government Department of Education, Skills and Employment (DESE), Commonwealth authorities, State and Territory authorities (other than registered training organisations) that deal with matters relating to VET and VET regulators for the purposes of those bodies, including to enable: 

• administration of VET, including program administration, regulation, monitoring and evaluation 
• facilitation of statistics and research relating to education, including surveys and data linkage 
• understanding how the VET market operates, for policy, workforce planning and consumer information. 

The NCVER may also disclose personal information to persons engaged by NCVER to conduct research on NCVER’s behalf. 

The NCVER does not intend to disclose your personal information to any overseas recipients. 

For more information about how the NCVER will handle your personal information please refer to the NCVER’s Privacy Policy at www.ncver.edu.au/privacy. 

If you would like to seek access to or correct your information, in the first instance, please contact your RTO using the contact details listed below. 

DESE is authorised by law, including the Privacy Act and the NVETR Act, to collect, use and disclose your personal information to fulfil specified functions and activities. For more information about how the DESE will handle your personal information, please refer to the DESE VET Privacy Notice at https://www.dese.gov.au/national-vet-data/vet-privacy-notice. 

Surveys 

You may receive a student survey which may be run by a government department or an NCVER employee, agent, third-party contractor or another authorised agency. Please note you may opt out of the survey at the time of being contacted. 

Contact information 

At any time, you may contact the Institute of Strategic Management to: 

• request access to your personal information 
• correct your personal information 
• make a complaint about how your personal information has been handled 
• ask a question about this Privacy Notice 

Updates to Policy

We will review our privacy policy from time to time to take account of new laws and technology, changes to our operations and practices, and the changing business environment. We will notify you about changes to our privacy policy by posting an updated version on our website and through direct email.

Privacy Procedures

• ISM will ensure that only authorised personnel have access to its LMS and eLearning portal at all times. Upon ceasing employment / contract with ISM all accesses will be revoked.
• ISM will ensure it uses and maintains a secure and protected LMS and eLearning portal that meets privacy legislation
• ISM will ensure that any third party persons or companies that may have access to private or sensitive information signs a non-disclosures agreement / contracts.
• ISM will ensure at all times paper-based documents are in lockable cabinets whilst not being worked on.
• ISM will ensure that the enrolment terms and conditions and declaration is clear with straightforward language, up to date and current at all times.
• ISM will ensure that this policy is reviewed and amended as required.
• ISM will ensure that this policy is displayed on its website for all staff and students.
• ISM will inform learners/users without delay in case of harmful data breach