This policy explains how Training Combined Pty Ltd (RTO 45490) handles personal information collected through this website, in accordance with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). It describes the site you are reading now — our online course booking and enrolment system.
1. Who we are
Training Combined Pty Ltd is a Registered Training Organisation, RTO 45490, delivering nationally recognised high-risk work licence and short course training from Regents Park in Western Sydney.
- Address: 1–3 Mary Street, Regents Park NSW 2143, Australia
- Email: admin@trainingcombined.com.au
- Phone: 0403 415 066 or 0431 298 766
2. What we collect, and when
We collect only what we need to reserve your place, enrol you, meet our obligations as an RTO, and issue your licence paperwork. Collection happens at four distinct points.
a. When you book a course
Booking a course places a provisional reservation. At this step we collect:
- Your full name, email address and mobile phone number
- The course (or combo package) and the intake date you selected
- Any high-risk work licences you tell us you already hold, and their expiry date, where you provide it
- Your employer's name, if you supply it
We do not collect card or bank details on this website. Booking reserves your seat; our admin team contacts you afterwards with payment details and raises an invoice separately. No payment is processed on this site.
b. When you complete the Enrolment Agreement
Before training begins you complete an enrolment form. This collects considerably more, because nationally recognised training carries reporting obligations we cannot meet without it:
- Unique Student Identifier (USI) — required by the Student Identifiers Act 2014 (Cth). We cannot issue a Statement of Attainment or qualification without one.
- Date of birth, gender, residential address, suburb, state and postcode
- Home and mobile phone numbers, and email address
- Emergency contact name and phone number
- Employment status, and your employer's business name, address and contact details where relevant
- Statistical information required by the national VET data standard: Indigenous status, country of birth, whether you speak a language other than English at home, highest school level completed, prior post-school qualifications, disability status and any assistance required, and your main reason for study
- Your responses to the Language, Literacy and Numeracy (LLND) assessment
- Your typed signature and consent to the training and assessment agreements and declarations
- Your AEN number, where you supply it
c. When you enquire or request a guide
Our contact form and our campaign landing pages collect your name, email address, phone number and your message or the enquiry details you provide, so we can respond.
d. Automatically, for security
When you submit any form we record your IP address in order to rate-limit submissions and to run a Cloudflare Turnstile bot check. This is used to stop automated abuse of our forms. It is not used to build a profile of you, and it is not used for advertising.
e. Analytics and advertising, on our public pages only
Our public marketing and booking pages load Google Tag Manager, which runs Google Analytics 4, Google Ads remarketing, Hotjar and Meta advertising tags. These measure how the site is used and let us advertise to people who have visited it. They collect browsing behaviour and device information rather than the details you type into our forms.
None of these tags load on the pages that handle your personal information. The Enrolment Agreement — which carries your USI, date of birth, address, signature and LLND answers — and the staff admin area load no analytics, no advertising tag and no third-party tracking script of any kind. That is deliberate. Our Cookie Policy lists every tag and how to opt out.
3. Why we use it
- To deliver your training — reserve your seat, confirm your booking, enrol you, assess you, and issue your Statement of Attainment or licence paperwork.
- To meet our legal obligations as an RTO — including our reporting obligations under the VET Quality Framework and the requirements of the high-risk work licensing scheme.
- To communicate with you — booking confirmations, payment and joining instructions, course reminders, changes to your intake, and answers to your enquiries.
- To remind you when a licence is due for renewal — where you have given us your details in the course of training with us. Every such message carries an unsubscribe link, and unsubscribing is honoured.
- To improve our courses and service — including reviewing which courses are in demand.
4. Who we disclose it to
We do not sell, rent or trade your personal information. We disclose it only as set out below.
Regulators and government bodies
- SafeWork NSW — to process and issue your High Risk Work Licence, and to complete the digital assessment and application process required for HRWL courses.
- The Australian Skills Quality Authority (ASQA) — our regulator, on request or as part of audit and compliance activity.
- The National Centre for Vocational Education Research (NCVER) — RTOs are required to report student and training activity data in the AVETMISS format. This reporting includes the personal and statistical fields listed in section 2(b). NCVER may use and disclose that data for statistical, research, administration and reporting purposes as permitted under the National Vocational Education and Training Regulator Act 2011 (Cth) and related legislation.
- The Student Identifiers Registrar — to verify your USI.
- Any other body where we are required or authorised by law to do so.
Service providers who operate this system
These providers process data on our behalf, under contract, for the purposes described above only.
| Provider | What it does | Where data is held |
|---|---|---|
| Supabase | The database holding bookings, enrolments and enquiries | Sydney, Australia (AWS ap-southeast-2) |
| Vercel | Hosts this website and its booking functions | Functions run in the Sydney region (syd1) |
| Resend | Sends booking confirmations, enrolment and reminder emails | Overseas — see section 5 |
| Cloudflare | Turnstile bot protection on our forms | Overseas — see section 5 |
| Tag Manager, Analytics and Ads — public pages only | Overseas — see section 5 | |
| Hotjar | Aggregate page-behaviour insights — public pages only | Overseas — see section 5 |
| Meta | Advertising measurement — public pages only | Overseas — see section 5 |
Business systems
- Our student management system, used to administer enrolments and issue certification.
- Our accounting system, used to raise and track your course invoice.
- Your employer, where your employer is arranging and paying for your training — limited to attendance, completion and certification.
5. Overseas disclosure
Your booking and enrolment records are stored in Australia, in the Sydney region.
However, the email delivery, bot-protection, analytics and advertising providers named above operate infrastructure outside Australia, including in the United States and the European Union. This means that when we send you an email, the content of that message — which will include your name, the course you booked and your booking details — is processed overseas in the course of delivering it. Likewise, browsing information collected by the analytics and advertising tags on our public pages is processed overseas by Google, Hotjar and Meta under their own terms. Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.
6. Security
We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These include encrypted connections (HTTPS) across the whole site, database access controls that restrict which records each part of the system can read, administrator access protected by authentication, and bot protection on public forms.
No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
7. How long we keep it
As an RTO we are required to retain certain records for set periods, and we cannot delete those records on request while that obligation applies:
- Records of the qualifications and Statements of Attainment we issue are retained for 30 years, as required of registered training organisations under the VET Quality Framework, and may be transferred to the regulator if we cease to operate.
- Enrolment, assessment and training records are retained for the period required by our compliance obligations, including for audit by ASQA.
- Enquiries and bookings that do not proceed to enrolment are retained only while they remain useful for the purpose they were collected, and are then deleted.
8. Accessing or correcting your information
You may ask us for a copy of the personal information we hold about you, and you may ask us to correct it if it is wrong, out of date or incomplete.
Email admin@trainingcombined.com.au with the subject line Privacy — access request, or call us on the numbers in section 1. We will need to verify your identity before releasing anything. We aim to respond within 30 days. There is no charge to make a request. If we refuse access or correction we will tell you why in writing, and how to have that decision reviewed.
9. Complaints
If you believe we have mishandled your personal information, please tell us first so we can put it right.
- Step 1 — tell us. Email admin@trainingcombined.com.au with the subject line Privacy — complaint, setting out what happened. We will acknowledge your complaint and aim to resolve it within 30 days.
- Step 2 — escalate. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.
Complaints about our training or assessment — as distinct from privacy — follow the complaints and appeals process in your Enrolment Agreement.
10. Changes to this policy
We may update this policy from time to time. The current version is always the one published at this address, and the "last updated" date at the top of the page shows when it last changed.
Questions about this policy?
Email admin@trainingcombined.com.au ·
Phone 0403 415 066
Training Combined Pty Ltd, 1–3 Mary Street, Regents Park NSW 2143 · RTO 45490