National Training and Compliance Group (NTAC Group, we, us or our) respects your privacy. This policy explains how we handle personal information in connection with our website, enquiries, accredited training, drug testing device training, workplace workshops and strategy services.
1. Information we collect
The information we collect depends on how you interact with us. It may include:
- your name, email address, telephone number, organisation, role and preferred contact details;
- information included in website forms, emails, telephone calls, quotes, bookings and service enquiries;
- training and enrolment information, attendance records, competency evidence and information required for course administration or regulatory reporting;
- billing, payment and transaction details (payment card information is handled by the relevant payment provider where applicable);
- workplace, policy, risk, gap-analysis or program information supplied so we can provide workshops or strategy services; and
- technical information such as IP address, browser type, device information, server logs and interactions with our website.
Where practical, you may deal with us anonymously or using a pseudonym. This may not be possible where we need to identify you to deliver training, issue records, prepare a quote, meet legal obligations or provide a requested service.
2. How we collect information
We usually collect information directly from you when you complete a form, contact us, request a quote, make a booking, register for training, attend a workshop or work with us on a strategy engagement.
We may also receive information from your employer, a booking contact, an authorised representative, a training or service partner, or another person who arranges services for you. We may collect publicly available business information where it is relevant to an enquiry or engagement.
3. Website forms and enquiries
When you submit an enquiry form, we use the details you provide to respond, discuss your requirements, prepare a quote, arrange a consultation or booking and keep an appropriate business record.
Form submissions may be delivered to our business email account and stored in the secure administration area of our website. Please do not include unnecessary health, identity or other sensitive information in a general website enquiry.
4. How we use information
We use personal information to:
- respond to enquiries and provide information, quotes, bookings and services;
- administer training, workshops and consulting engagements;
- communicate with participants, clients and organisational contacts;
- maintain training, compliance, financial and business records;
- improve our website, services and client experience;
- protect our systems and prevent misuse or fraud; and
- meet legal, regulatory, contractual and reporting obligations.
5. Cookies and similar technologies
Our website and service providers may use cookies or similar technologies that are necessary for website operation, security, session management, preferences and performance. Server logs may also record technical information about visits.
We do not currently use targeted advertising cookies on this website. If non-essential analytics or marketing technologies are introduced, we will review this policy and any consent controls that may be required. You can also manage or delete cookies through your browser settings, although blocking essential cookies may affect website functions.
6. Disclosure of information
We may disclose information where reasonably necessary to:
- our personnel, contractors and professional advisers;
- website hosting, email, cloud storage, payment, IT and business administration providers;
- organisations or employers that book or fund a service, where appropriate and authorised;
- training, certification or service partners involved in delivering a requested service; and
- regulators, government agencies, courts or law-enforcement bodies where required or authorised by law.
For HLTPAT010, information may be provided to Healthcorp (RTO 91222) and relevant regulatory bodies where required to administer training, assess competency, issue a Statement of Attainment or meet reporting obligations. We do not sell personal information.
7. Overseas service providers
Some technology, cloud, email, website or administrative service providers may store or process information outside Australia. The countries involved can vary depending on the provider and its systems.
Where the Australian Privacy Principles apply, we take reasonable steps to work with reputable providers and to ensure personal information is handled appropriately.
8. Storage, security and retention
We may hold information electronically and, where necessary, in physical records. We use reasonable administrative, technical and physical safeguards designed to protect it from misuse, interference, loss and unauthorised access, modification or disclosure.
No internet transmission or storage system is completely secure. We retain information only for as long as reasonably necessary for the purpose collected, our business and training records, dispute resolution, and legal or regulatory requirements. When no longer required, information is securely destroyed or de-identified where practicable.
9. Direct marketing
We may contact existing clients or people who have requested information about relevant NTAC Group services where permitted. You can opt out at any time by using an unsubscribe option where provided or contacting us. Service, booking and administrative messages are not marketing communications.
10. People under 18
Our services are primarily provided to organisations and adult participants. We do not knowingly seek personal information from children through the general website.
If a person under 18 participates in training or another service, we may collect information through a parent or guardian, employer, school, training partner or other authorised contact where appropriate. A young person’s capacity to consent is assessed according to the circumstances, including their maturity and understanding, rather than by relying on a single fixed age. Please contact us before submitting information about a child if you are unsure.
11. Access and correction
You may ask to access personal information we hold about you or request that inaccurate, out-of-date, incomplete, irrelevant or misleading information be corrected. Contact us using the details below. We may need to verify your identity and may decline access where permitted by law, in which case we will explain the reason where appropriate.
12. Privacy complaints
If you have a privacy concern, please contact us with enough detail for us to investigate. We will acknowledge and respond within a reasonable timeframe.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
13. Changes to this policy
We may update this Privacy Policy when our services, technology or legal obligations change. The current version will be published on this page with its updated date.