Privacy and Data Security Policy

Skill Path Australia Ltd (“Skill Path”) is committed to protecting personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) (the Privacy Act), as well as international data protection standards, including standards from the United Nations High Commissioner for Refugees (UNHCR) and the General Data Protection Regulation (GDPR). This policy outlines how we collect, use, and safeguard personal information.

Key principles

Skill Path adheres to the following principles:

  1. Lawful Collection and Use: Data is collected and processed only as permitted under the Australian Privacy Principles (APPs), with consent or another lawful basis.

  2. Purpose Specification: Personal information is used for defined and legitimate purposes.

  3. Data Minimization: We collect only what is necessary.

  4. Accuracy: Data is kept accurate and updated as required.

  5. Security and Confidentiality: Information is protected from misuse, interference, and unauthorized access.

  6. Transparency: Individuals are informed about data collection, use, and disclosure.

  7. Access and Correction: Individuals can access their personal information and request corrections.

  8. Accountability: We regularly review our practices to ensure compliance with the APPs and other standards.

Data collected

Personal Information

Personal Information is information or an opinion that identifies an individual. Examples of Personal Information we collect includes names, addresses, email addresses, phone numbers, ID documents and documents related to educational qualifications. This Personal Information is obtained in many ways including via applications forms for our programs, interviews, correspondence, by telephone, by email, via our website www.skillpath.org.au, from media and publications, from other publicly available sources, from cookies and from third parties. We don’t guarantee website links or policy of authorised third parties.

We collect your Personal Information for the primary purpose of providing our services to you, providing information to our users and marketing. We may also use your Personal Information for secondary purposes closely related to the primary purpose, in circumstances where you would reasonably expect such use or disclosure. You may unsubscribe from our mailing/marketing lists at any time by contacting us in writing.

When we collect Personal Information we will, where appropriate and where possible, explain to you why we are collecting the information and how we plan to use it.

Sensitive information 

At times we also may need to collect sensitive information. Sensitive information is defined in the Privacy Act to include information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.

Sensitive information will be used by us only:

  • For the primary purpose for which it was obtained.

  • For a secondary purpose that is directly related to the primary purpose.

  • With your consent; or where required or authorised by law.

Collection from third parties

Where reasonable and practicable to do so, we collect Personal Information only from you. However, in some circumstances we may be provided with information by third parties. In such a case we will take reasonable steps to ensure that you are made aware of the information provided to us by the third party.

 Use of Personal Information

We use personal information for:

  • Communicating with individuals about our services.

  • Accepting applications from new clients for services we offer.

  • Delivering education and training programs.

  • Facilitating migration and licensing pathways.

  • Coordinating support to clients with other reputable organisations.

  • Meeting legal obligations and supporting regulatory compliance.

Use of Third-Party Platforms

Skill Path uses third-party platforms, including Squarespace for website hosting, Airtable for database management, and Fillout for collecting applications.

These platforms are required to meet standards equivalent to those in this policy.

Data Collected by Third-Party Platforms

  • Website (Squarespace): Metadata, cookies, and user interaction data.

  • Database (Airtable) and form application (Fillout): Personal information such as names and contact details.

Purpose and security

Data collected is used only for purposes outlined in Section 3. Skill Path ensures these platforms implement adequate safeguards to protect personal information.

Cookies and website analytics

Through Squarespace, Skill Path uses only essential cookies (cookies or strictly necessary cookies for our website to function correctly) unless users opt in to allow collection of non-essential cookies (which improve website functionality, enhance user experience, and gather insights about traffic and performance).

Disclosure of Personal Information

Personal information may be shared:

  • With third parties: Where consent has been obtained, or as required by law.

  • With implementing partners: In line with our charitable purposes and ensuring compliance with the Australian Privacy Principles (APPs) and equivalent standards.

We will not sell or trade personal information.

Security of Personal Information

Personal Information is stored in a manner that reasonably protects it from misuse and loss and from unauthorised access, modification or disclosure, including through measures such as controlled access, encryption, and audit logs.

Information is retained only as long as necessary for its purpose or as required by law. When your Personal Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to delete, anonymise or securely your Personal Information.  

Your Rights

You have the right to:

  • Access: Request access to the personal information we hold about you.

  • Correction: Request corrections to ensure accuracy.

  • Erasure: Request the deletion of your data when it is no longer necessary for the original purpose or other lawful reasons (e.g., withdrawal of consent).

  • Complaints: Lodge complaints regarding our handling of your information by contacting us at info@skillpath.org.au.

If you wish to access, correct or erase your Personal Information, please contact us in writing. In order to protect your Personal Information we may require identification from you before releasing the requested information.

Data Breaches

If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Privacy Act 1988 (Cth). 

Policy Updates

This Policy may change from time to time to remain compliant with the APPs and evolving legal and organizational standards. Updates will be available on our website.

Privacy Policy Complaints and Enquiries

If you have any queries or complaints about our Privacy and Data Security Policy please contact us at: info@skillpath.org.au.