About this policy
The Barrack St Compliance Co (BSCC) has chosen to be treated as an organisation for the purposes of the Privacy Act 1988 (Cth) and is listed on the Office of the Australian Information Commissioner's register of entities that have opted in to Privacy Act coverage. We have incorporated the 13 Australian Privacy Principles (APPs) into our systems and practices.
We are committed to protecting the privacy of the organisations we provide services to and the personal information they provide. We only collect information necessary to deliver our services.
What we collect and why
We provide audit, compliance and consulting services to organisations in the vocational education and training (VET) sector and to government. During an audit or review we may review and record personal information to meet our contractual obligations under VET standards and other government regulations and guidelines. This information is used to prepare audit and review reports.
Depending on the engagement, this may include:
- Staff of the organisations we work with: qualifications, CVs and general employment information. Reports may record a staff member's name and gaps in evidence against the standards or the organisation's management system.
- Students of the organisations we work with: enrolment details, training and assessment details and outcomes, and student file contents. Reports may record a student's name, program and gaps in evidence against the standards.
- Our clients' contacts: names, titles, contact details and other information relevant to delivering our services.
Consent
Before an engagement, the organisation we work with consents to the collection of personal information as part of our agreement to provide services. The agreement includes confirmation that the organisation has obtained the consent of its staff for this information to be collected lawfully and without undue intrusion.
We only collect sensitive information where the person consents, where it is required or authorised by law, where it is needed to prevent or lessen a serious threat to someone's life or health, or where it is necessary in relation to a legal claim.
If we receive personal information we did not ask for and could not otherwise have collected, we will destroy or de-identify it as soon as practicable, where it is lawful and reasonable to do so.
Use and disclosure
We only use or disclose personal information for the purpose it was collected. We do not sell, disclose or distribute personal information to third parties, except:
- where we are contractually required to provide it to a government department or agency
- where the client would reasonably expect the disclosure and has agreed to it in our agreement for services
- where disclosure is required in the public interest, such as law enforcement or public or individual health and safety, including where it is reasonably necessary to help locate a missing person, to establish, exercise or defend a legal claim, or for a confidential dispute resolution process
Audit and review reports are provided only to the organisation's chief executive or their nominated contact, or, for audits conducted for a regulator or funding body, to that body.
Direct marketing
We only use personal information for direct marketing where the person has consented or would reasonably expect it, and where they can easily opt out. We will not use a person's details to market our services without their written consent.
Overseas disclosure
We do not disclose personal information to recipients outside Australia.
Government identifiers
We do not adopt, use or disclose government-related identifiers, such as tax file numbers, as our own identifiers.
Quality and security
We take reasonable steps to make sure the personal information we collect, use or disclose is accurate, complete and up to date.
We protect personal information from misuse, interference, loss and unauthorised access through electronic and physical access restrictions, staff training, secure storage and documented archiving and destruction procedures. Emails containing personal information are destroyed at the end of each engagement. When we no longer need personal information, we destroy or de-identify it, unless we are required by law to keep it.
This website
This website does not use advertising or tracking cookies. If you send us an enquiry, we use your details only to respond to you. The map on our contact page is provided by Google Maps, which is subject to Google's own privacy policy.
Access and correction
You can ask to access or correct personal information we hold about you. We will respond within a reasonable time and will not charge you for making a request. If we decline a request, we will explain why in writing and tell you how to complain.
Questions and complaints
Our Privacy Officer is the BSCC Director. Please send requests for access, corrections or privacy complaints in writing to:
Privacy Officer, Barrack St Compliance Co
PO Box 519, Dickson ACT 2602
info [at] barrackst.com.au
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner.