Marketing consent and privacy policy

Fire and Safety Australia Pty Ltd (FSA) is committed to protecting your privacy. This policy outlines how we collect, store, use, and disclose personal information in line with the Privacy Act 1988 (Cth) (Privacy Act), the Australian Privacy Principles (APPs), and other applicable laws, including our obligations as a Registered Training Organisation (RTO).

Students attending FSA for training are referred to FSA’s Student Handbook for further information on FSA’s policies.

What personal information we collect

We only collect information necessary for our services and regulatory obligations. This may include:

Contact details (name, phone, email, address)
Demographic details (e.g. date of birth, gender, region)
Enrolment and training history
Payment details (for processing transactions)
Website usage and digital interaction data
Information submitted via surveys, social media or events
Technical data (browser, IP address, device details)
Medical details (where required for emergency services delivery or compliance)

We may also collect government-issued identifiers such as USI, TFN or ABN where legally required. This includes data collected to meet obligations under the Data Provision Requirements 2012, the National Vocational Education and Training Regulator Act 2011 (Cth) (NVETR Act), and the Outcome Standards for Registered Training Organisations (RTOs) 2025.

How we collect personal information

We may collect your information:

If you provide it to us in writing, via the telephone, or in person
Through our website, digital systems or assets, or related social media (some of which is collected automatically via usage, audit, and security logging and cookies);
Through your participation in events, training or emergency response services
From public sources or third parties (e.g. government agencies, partner organisations)

Why we collect personal information

We use personal information to:

Manage enrolments, course delivery and assessment
Issue qualifications or statements of attainment
Meet compliance and reporting obligations under the NVETR Act, AVETMISS, and the Outcome Standards for RTOs 2025
Provide emergency response or medical services
Maintain safety, wellbeing and compliance
Improve our services, systems and platforms
Communicate important updates or respond to enquiries

Marketing and digital advertising

We use a combination of personal information and anonymised data to deliver relevant marketing messages through email, SMS, website personalisation, and advertising through third-party sites and platforms (including social media).

Collecting this information allows us to:

Promote FSA courses, news, events or industry updates to you via email, outbound calls, SMS and social channels
Exclude individuals from marketing activities (such as email communication, advertising targeting, or social media posts or ads) that are not relevant to them
Reminders about renewals, expiry or follow-up training
Undertake remarketing activity, including building lookalike audiences, to target directly, or to build a retargeting audience in social platforms through paid advertising
Link anonymised data with identified data to personalise communication

These activities comply with the Privacy Act, APPs, and the Spam Act 2003. You can opt out of direct marketing at any time via unsubscribe links or by contacting us.

Disclosures to third parties

We may disclose personal information to:

Government regulators and agencies (e.g. NCVER, DESE) as required under the NVETR Act
Medical providers or partner organisations (as relevant to your services)
Technology vendors or analytics providers under confidentiality agreements
Our related entities or advisors where necessary

Personal information may be disclosed to the National Centre for Vocational Education Research Ltd (NCVER), the Australian Government Department of Employment and Workplace Relations (DEWR), and other authorised state and territory training authorities for the purposes of statistical research, program administration, and regulatory oversight in accordance with the Privacy Act and the NVETR Act.

We do not sell or rent personal information.

Accessing and correcting personal information

We take reasonable steps to protect your personal information from misuse, interference or unauthorised access. When no longer required, personal data is securely destroyed or de-identified, unless retention is required by law.

You can request access to, or correction of, the personal information we hold about you by contacting our QID team. Requests will be actioned within 10 business days. ID verification may be required.

Students may request access to their training records, results or statements by contacting the RTO Manager. Records are maintained for 30 years as per ASQA requirements. Amendment requests are recorded and assessed promptly.

Medical and emergency information

Where FSA provides first aid or medical services, health-related information may be collected and used to manage treatment, injury reporting, or fitness for work. Such information is handled under strict confidentiality protocols.

Regulatory and sector obligations

As a Registered Training Organisation (RTO), FSA is bound by the National Vocational Education and Training Regulator Act 2011 (Cth), the Data Provision Requirements 2012, the OutcomeStandards for RTOs 2015, and the National VET Data Policy. These require the collection, use, and disclosure of personal information for activities such as student enrolment, training delivery, reporting, and compliance auditing.

Student data may be disclosed to authorised bodies including the NCVER and relevant government departments. Handling of such data complies with the Privacy Act 1988 (Cth) and Australian Privacy Principles.