PRIVACY POLICY

Last updated: [DATE]

1. Who we are

This website, https://overseasstudy.com.au/, is operated by [LEGAL ENTITY NAME, ABN], trading as Overseas Study & Migration Services (“OSMS”, “we”, “us”). This policy explains how we handle personal information.

Privacy contact: [APPROVED PRIVACY CONTACT: name/role, email, postal address]
Contact page: https://overseasstudy.com.au/contact-us/

[Reviewer: confirm whether the entity is covered by the Privacy Act 1988 and the Australian Privacy Principles (APPs), including any small business exemption. If you are not certain, say so here and still commit to handling information in line with the APPs.]

2. Information we collect

Depending on how you deal with us, we may collect:

• Contact details: name, email, phone number, preferred contact method.
• Enquiry details: what you ask about and the service you request, e.g. study, visa or migration matters.
• Booking details: appointment times and related communications.
• Information needed to provide a service you engage us for: [e.g. date of birth, nationality, passport/visa details, education and employment history, family details, documents you upload]. [Confirm the actual list.]
• Sensitive information: some services may require [e.g. health, character or criminal-record information]. We collect this only where you provide it or consent, and where it is reasonably necessary for the service. [Delete if not collected.]
• Technical data: IP address, device and browser type, pages viewed, and cookie data (see section 9).
• Payment details: [describe, e.g. processed by a payment provider and not stored by us. Only include if true.]

3. How we collect it

• Directly from you: enquiry forms, booking forms, email, phone, WhatsApp/SMS [if used], in-person meetings.
• Automatically through the website using cookies and similar tools.
• From third parties where you authorise it or the law allows, e.g. [education providers, referrers, authorities]. [Confirm.]

If you give us information about another person (e.g. a family member), please make sure they know and agree.

4. Why we collect and use it

• To respond to your enquiry and arrange the service you request.
• To book and manage appointments.
• To provide the services you engage us for, including [education and migration services], and meet our professional and legal obligations.
• To handle payments, records, complaints and feedback.
• To improve and secure our website.
• To send marketing messages only where permitted by law (see section 10).

If you don’t provide the required details, we may not be able to respond or provide the service.

5. Who we share it with

We share personal information only as needed, and only with:

• Our authorised staff and registered migration agents. [Confirm.]
• Service providers that support our operations: [website host], [CRM/email platform], [booking/calendar tool], [payment provider], [analytics], [IT/cloud storage]. [List each actual provider and what it does.]
• Education providers, government departments or other third parties where you ask us to act with them or where the service requires it (e.g. [institution applications, visa applications]).
• Professional advisers, regulators or authorities, where required or authorised by law.

We do not sell personal information. [Include only if true.]

6. Overseas disclosure

Some providers may store or access information outside Australia. Based on our current arrangements, this may include: [COUNTRIES / “None”]. [Complete from the actual provider list. Do not state that data stays in Australia unless verified.] Where we disclose information overseas, we take reasonable steps to make sure the recipient handles it consistently with the APPs, or we rely on another basis permitted by APP 8.

7. Storage and security

We store information in [electronic systems / paper files] held by [describe]. We take reasonable steps to protect it from misuse, interference, loss and unauthorised access, including [access controls, passwords/MFA, encryption in transit, staff confidentiality obligations]. [List only measures actually in place. Don’t claim certifications such as ISO 27001 unless held.] No online system is completely secure. If a data breach is likely to cause serious harm, we will follow the Notifiable Data Breaches scheme and notify affected individuals and the OAIC as required.

8. Retention and disposal

We keep personal information only as long as needed for the purposes above and our legal and professional record-keeping obligations. [State the actual retention period, e.g. [X] years after file closure for client files, [X] months for unconverted enquiries.] When no longer needed, we securely destroy or de-identify it.

9. Cookies and analytics

Our website uses cookies and similar technologies for [essential site function, analytics (e.g. Google Analytics), advertising/remarketing (e.g. Meta Pixel, Google Ads)]. [List only tools actually installed.] These tools may collect technical data and may be operated by third parties, including overseas. You can manage cookies in your browser settings or our cookie banner [if any]; blocking some cookies may affect site features.

10. Marketing

We will send marketing emails or SMS only where you have consented or the law otherwise permits, and every message will include a way to unsubscribe. You can also ask us at any time to stop.

11. Accessing and correcting your information

You can ask to access or correct personal information we hold about you by contacting our privacy contact above. We may need to verify your identity. We will respond within a reasonable time, and within 30 days where the APPs apply. In limited cases, we may refuse access or correction and will explain why.

12. Privacy complaints

Contact our privacy contact first, with details of your concern. We will acknowledge it and respond within [X] days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au. [If services are provided by a registered migration agent, also see the complaint pathway in the Terms.]

13. Professional confidentiality

Where we provide migration assistance, additional confidentiality obligations may apply under the Migration Agents Code of Conduct and your client agreement. [Reviewer: confirm and align with the agreement.]

14. Third-party links

Our website links to other sites. We are not responsible for their privacy practices; please read their policies.

15. Changes

We may update this policy. The current version will always be on this page with its “Last updated” date.