Privacy and Confidentiality Policy

The purpose of this Privacy and Confidentiality Policy is to outline how Future Ready Australia Ltd collects, uses, manages, and protects personal and confidential information. This policy ensures compliance with relevant privacy legislation and establishes a framework for maintaining the trust of our students, staff, partners, and the wider community.

This policy applies to all employees, volunteers, contractors, board members, and representatives of Future Ready Australia Ltd. It covers all personal and confidential information collected in the course of our operations, whether in physical or digital format.

Future Ready Australia Ltd is committed to protecting the privacy of individuals and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We respect the rights of individuals to control how their personal information is handled and are dedicated to transparent and secure data practices.

Personal information is defined as information or an opinion about an identified individual, or an individual who is reasonably identifiable. Examples include names, addresses, contact details, dates of birth, educational records, and employment history.

Confidential information refers to sensitive business or operational data that is not publicly available. This includes financial records, strategic plans, intellectual property, unreleased curriculum materials, and internal communications.

We collect personal information only when it is reasonably necessary for our functions or activities. Information is collected lawfully, fairly, and, where possible, directly from the individual concerned. When collecting information, we will take reasonable steps to inform the individual of the purpose of collection and how it will be used.

Personal information will only be used for the primary purpose for which it was collected, such as providing educational services, processing enrollments, or managing employment. We will not use personal information for secondary purposes unless the individual has consented, or it is required or authorized by law.

Future Ready Australia Ltd takes special care when handling the personal information of students and minors. Consent from a parent or legal guardian is required for the collection and use of personal information for individuals under the age of 18, except where authorized by law.

Explicit written consent must be obtained before capturing or publishing photographs, videos, or audio recordings of individuals. This applies to all promotional materials, websites, and social media platforms managed by Future Ready Australia Ltd.

We take reasonable steps to protect personal and confidential information from misuse, interference, loss, unauthorized access, modification, or disclosure. Security measures include secure physical storage, restricted access to digital files, password protection, and regular IT security reviews.

Staff must use secure and approved communication channels when transmitting personal or confidential information. Sensitive information should not be sent via unencrypted email or personal messaging applications.

Individuals have the right to request access to the personal information we hold about them. Requests for access should be made in writing to the Privacy Officer. We will respond to requests within a reasonable timeframe.

We take reasonable steps to ensure that the personal information we collect, use, and disclose is accurate, up-to-date, and complete. If an individual believes their information is incorrect, they may request a correction, and we will update our records accordingly.

We will not disclose personal information to third parties without the individual's consent, except where required or authorized by law. Where third-party service providers are used, we ensure they are bound by strict confidentiality and privacy obligations.

All staff, volunteers, and contractors are bound by confidentiality obligations as part of their employment or engagement terms. Unauthorized disclosure of confidential information is strictly prohibited and may result in disciplinary action.

Financial records and governance documents are treated as highly confidential. Access to this information is restricted to authorized personnel only, such as the Board of Directors and senior management.

In the event of a suspected privacy breach, staff must immediately notify the Privacy Officer. We have an established Data Breach Response Plan to contain, assess, and manage breaches, including mandatory reporting to the Office of the Australian Information Commissioner (OAIC) if required.

Personal and confidential information will only be retained for as long as necessary to fulfill the purpose for which it was collected, or as required by law. When no longer needed, information will be securely destroyed or permanently de-identified.

The Board of Directors and senior management are responsible for overseeing compliance with this policy. All staff are responsible for understanding and adhering to the privacy and confidentiality practices outlined herein.

Failure to comply with this Privacy and Confidentiality Policy may result in disciplinary action, up to and including termination of employment or contract. Serious breaches may also lead to legal action.

This policy will be reviewed annually or as required by changes in legislation or organizational practices. Updates will be communicated to all relevant stakeholders and published on our official platforms.