Privacy Policy

1. Purpose

Training Alliance Group (TAG) delivers employment, training and community services across three service streams:

• employment services under contracts with the Department of Employment and Workplace Relations (DEWR)
• Inclusive Employment Australia program under contract to the Department of Social Services (DSS)
• vocational education and training through two registered training organisations: Mining Transport and Construction Services Pty Ltd (MTACS, RTO 52053) and ABV Training & Consulting Pty Ltd (ABV, RTO 52592), regulated by the Australian Skills Quality Authority (ASQA) and the Department of Training and Workforce Development (DTWD)

This policy explains how TAG collects, holds, uses and discloses personal information. It applies to all individuals whose information TAG handles across these service streams, including participants, job seekers, students, employers and contractors.

This policy also applies to job applicants and contractors engaged by TAG. Personal information collected during recruitment or contracting is handled in accordance with the Privacy Act. TAG staff in an ongoing employment relationship are covered by TAG’s internal privacy arrangements for employment matters.

TAG complies with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs) in Schedule 1 and the Notifiable Data Breaches scheme under Part IIIC. TAG also complies with the Disability Services and Inclusion Act 2023 (DSI Act) for DSS-funded services, the Privacy (Tax File Number) Rule 2015 where applicable, and the Standards for Registered Training Organisations 2025 for RTO-enrolled students.

TAG manages information security across all service streams through a single certified Information Security Management System (ISMS), holds ISO 27001 certification, and is accredited under the Right Fit for Risk framework.

This policy is reviewed annually and may be updated to reflect changes in TAG’s operations, services or legal obligations.

2. Collection

TAG collects personal information that is necessary to deliver the services you have engaged us for. We only collect information for a lawful purpose that is reasonably necessary or directly related to our functions, or where required or authorised by law.

You may choose not to provide your personal information to us. In some circumstances this will mean we are unable to deliver the relevant service to you.

You may also choose to deal with us anonymously or using a pseudonym where this is practicable. However, for most of our services it will be necessary for you to identify yourself: for example, to assess your eligibility for a program, to enrol you in training, or to investigate and resolve a complaint.

2.1 Types of Information We Collect

Personal information we collect includes, but is not limited to:

• identifying information: name, address, phone number, email address, date of birth, driver’s licence details, concession card details and bank account details
• personal circumstances: marital status, age and gender
• education and employment history: qualifications, courses completed, training results and employment background
• sensitive information: where relevant to service delivery or employment purposes, including health information, disability status, cultural background and other sensitive information as defined under the Privacy Act
• Australian Government identifiers: such as your Unique Student Identifier (USI)
• Tax File Numbers: where required for program delivery, collected and handled in accordance with the Privacy (Tax File Number) Rule 2015
• recruitment and pre-employment information: including referee comments, background checks and pre-employment assessments, where consent has been provided
• marketing and promotional activity: including event registrations, email subscriptions and responses to campaigns

We collect sensitive information only where it is necessary for service delivery or employment purposes. In most cases we will seek your consent before collecting it. Where collection is a condition of a government contract or regulatory requirement, we will tell you at the time of collection.

2.2 Children and Young People

Where TAG collects personal information about a person aged 15 or over, our general practice is to collect information directly from them. For children under the age of 15, or where we are uncertain about a person’s capacity to provide informed consent, we will notify and seek consent from a parent or guardian, unless seeking consent is impractical or the collection is required or authorised by law.

2.3 Unsolicited Information

Sometimes personal information is provided to us without us having requested it. Where this occurs, we will determine whether the information is reasonably necessary for our functions. If it is not, we will destroy or de-identify it as soon as practicable and in accordance with applicable records management requirements. If it is relevant, we will handle it in accordance with this policy.

2.4 How We Collect Information

We may collect your personal information:

• directly from you: in person, by phone, email, post or through our website
• through forms, resumes and employment applications
• from third parties: including DEWR, DSS, DTWD, other government agencies, employers and referral organisations, where authorised
• through our social media platforms and marketing activities

Where a document you sign or accept includes a consent statement, that statement describes the specific personal information being collected and the purpose. Read it before signing. If you have questions about what information is being collected and why, contact us using the details in section 10.

There are inherent risks associated with transmitting information over the internet, including via email. You should be aware of this when sending personal information to us online. If this is a concern, you may contact us by phone or post instead.

2.5 Website and Passive Collection

Our websites collect information to support service delivery and improve user experience. We are not responsible for the privacy practices of external websites linked from our site.

Some information is collected passively by software running on your device. TAG does not collect this information directly. You can limit passive collection by disabling cookies, disabling JavaScript, opting out of Google Analytics, or disabling location services on your device.

Our website includes an eligibility questionnaire to help determine whether TAG services may be suitable for you. This form is reviewed by a staff member: no automated eligibility decision is made from your responses.

3. Use of Personal Information

We use your personal information for the primary purpose for which it was collected; delivering the services you have engaged us for. This includes:

• meeting our obligations under government contracts and regulatory requirements
• assessing your eligibility for programs and services
• recruitment of job applicants and engagement of contractors, consistent with the collection purposes described in section 2.1
• communicating with you about your participation in our services
• developing and improving our programs
• marketing and promotional activities, where you have engaged with us in that context
• responding to your enquiries

We may use your information for a secondary purpose where:

• you have consented
• you would reasonably expect the use, and it is related to the primary purpose (or, for sensitive information, directly related to the primary purpose)
• the use is required or authorised by Australian law or a court or tribunal order

Where appropriate, consent for secondary use will be confirmed in writing.

We use video surveillance at our premises for security purposes only. Footage is not used for any other purpose and is not publicly available.

4. Disclosure

We only disclose your personal information for the purpose for which it was collected, or as otherwise permitted under the Privacy Act. We may disclose your information to:

• DEWR, DSS or DTWD, as required under our government contracts or funding arrangements
• ASQA or other regulatory bodies, where required
• other Australian Government agencies, where authorised by law
• third-party service providers who assist us in delivering services to you, including employers, referral organisations and training partners. These disclosures are consistent with the consent you provide at registration
• courts, tribunals or law enforcement agencies where required or authorised by law

4.1 Disclosure Overseas

Personal information collected from participants under TAG’s DEWR and DSS government contracts is stored in Australia and is not transferred overseas.

In other contexts, we may disclose personal information to overseas recipients in limited circumstances, including:

• we use third-party platforms for business operations, communications or marketing activities that may store or process data on overseas servers, TAG takes reasonable steps to ensure such platforms meet applicable privacy standards;
• you have provided consent for your personal information to be used in marketing or promotional content, which may be created, stored or published using overseas platforms;
• material containing personal information is published on the internet, such as social media content, reports or promotional materials, where consent has been provided.

TAG takes reasonable steps to limit the overseas disclosure of personal information to the circumstances described in this section.

5. Data Quality

TAG takes reasonable steps to ensure the personal information we collect and hold is accurate, current, complete and not misleading. If you believe information we hold about you is incorrect or out of date, contact us using the details in section 10.

6. Information Security

TAG is committed to protecting your personal information from loss, unauthorised access, misuse, modification and disclosure. TAG manages information security through a certified Information Security Management System (ISMS) that covers all service streams and operational environments. TAG holds ISO 27001 certification and is accredited under the Right Fit for Risk framework.

Personal information is retained and disposed of in accordance with applicable records management requirements. When personal information is no longer required, it is disposed of securely.

7. Notifiable Data Breaches

TAG is subject to the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth). If TAG becomes aware of an eligible data breach: that is, unauthorised access to, disclosure of, or loss of personal information that is likely to result in serious harm to any individual, TAG will:

• take immediate steps to contain the breach and assess the risk of harm
• notify affected individuals as soon as practicable
• notify the Office of the Australian Information Commissioner (OAIC) as required under the NDB scheme

TAG maintains an internal data breach response procedure. If you believe your personal information held by TAG has been compromised, contact us using the details in section 10.

8. Automated Decision-Making

TAG does not currently use automated systems to make, or substantially contribute to, decisions about individuals. Where assessment or screening tools are used, a staff member reviews all outcomes before any decision is made.

This policy will be updated to reflect any changes in TAG’s use of automated decision-making, including to meet emerging regulatory requirements.

9. Access and Correction

You have the right to request access to the personal information TAG holds about you, subject to limited exceptions under the Privacy Act. You also have the right to request that inaccurate, incomplete or out-of-date information be corrected.

To make an access or correction request, contact us using the details in section 10.

10. Complaints and Contact

If you believe TAG has breached your privacy, you can make a complaint verbally, in writing or anonymously using any of the following:

• Phone: 1300 436 756
• Email: enquiries@trainingalliance.com.au
• Post: PO Box 526, West Perth WA 6872
• Online: via the feedback form at www.trainingalliance.com.au

TAG handles privacy complaints in accordance with its Complaints Management Policy. You will not face any retribution for making a complaint.

If you are not satisfied with TAG’s response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.