The company is subject to the Privacy Act and the associated National Privacy Principles.

This policy sets out how the company collects, holds and uses personal information collected from individuals in the conduct of our business.

Protecting Personal Information
All personal information collected from individuals as a result of our business operations will be protected as an essential part of the relationship we wish to establish with our clients. The company will only disclose this information in accordance with the provisions of the Privacy Act and the National Privacy Principles.

Information that the company holds
In the normal course of business activities, the company will collect personal information, including "sensitive information".

Personal information may include an individual's name, address, date of birth, contact details, occupation, and professional memberships.

Sensitive information includes details of an individual's racial or ethnic origin, religious beliefs, and health information. The company must obtain the consent of the person to collect and use that information.

Use and Disclosure of Personal Information
The company will use personal information to:

• Provide its services, particularly those associated with student services (eg recruitment, English language testing)
  
• Provide students, institutions and other clients of developments in the services it offers
  manage its internal business operations

The company will only disclose information for the purpose for which it was collected, and where appropriate, after obtaining the necessary consent from the individual. Information may be disclosed for other purposes, with the specific consent of the individual to do so.

The company may also be required to disclose personal information where the law requires such disclosure.

Security of Personal Information
The company will take reasonable steps to ensure the security of personal information that it holds, regardless of the form in which that information is held. This will include taking reasonable steps to prevent the misuse or loss of this information, or unauthorised disclosure, access to, or modification of this information.

Where the information is held in electronic form, access will be controlled by user logins and passwords, and restriction of access only to persons who need to have that access in the course of the company's business activities.

All staff of the company are subject to confidentiality obligations as part of their conditions of employment.

Right of Access by the Individual
Any individual has the right to request access at any time to the personal information that the company holds about that person. This access will be refused where the company cannot be satisfied as to the identity of the person requesting that access.

Any individual can request the company to modify or correct personal information that the person believes to be incorrect.

The company can refuse to provide access to personal information where the Privacy Act allows it to do so.

• Personal details of individuals who have enquired about study opportunities in Australia, or who have applied to undertake a course of study at an Australian educational institution,
  
• Personal details about individuals who have registered their names with a service offered by the company (eg the Graduate Recruitment Service)
  
• Personal details about individuals who have registered to participate in an event organised, managed or presented by AUSED-UNIED

In general, AUSED-UNIED uses this personal information for the following purposes:

• Assisting an individual to avail themselves of the opportunity to undertake studies in an Australian or British education institution;
  
• Assisting an individual to further their career after completing their studies at an Australian or British education institution, or an overseas education institution twinned to an Australian or British education institution
  
• Provide opportunities for individuals to participate in projects/programs as consultants
  
• Effective management of events

AUSED-UNIED has taken reasonable steps to ensure the security and appropriate use of personal information including:

• developing and implementing a Privacy Policy
  
• training its staff in the management of personal information
  
• developing and implementing appropriate computer system controls
  
• AUSED-UNIED is a contractor to the Commonwealth and State governments, and contracts out services.

Where a request is limited to access to an individual's personal information, the company will take all reasonable steps to respond within five (5) working days of the receipt of the request. These steps will include verification of the identity of the individual concerned.

Where the request is in respect of correction of inaccuracies to an individual's personal information, the nature of the inaccuracy must be clearly stated, along with the information required to be entered in lieu of the inaccurate information. The company will take all reasonable steps to respond within five (5) working days of the receipt of the request. These steps will include verification of the identity of the individual concerned.

All requests for access to personal information (for whatever purpose) will be responded to in writing, and will be recorded in a register maintained for this purpose.