Privacy Policy

v1.1 — effective 9 September 2026. Privacy questions and requests: privacy@onshift.edu.au

This site, the course-access product and the systems around them are operated by Eden LMS Pty Ltd (ABN 25 653 776 026, ACN 653 776 026), trading as Eden & Onshift Education, of 2/30 Maddox Street, Alexandria NSW 2015. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Accredited training is delivered by Onshift Education, RTO 41304, and the same handling applies to training records.

What we collect

When you submit an eligibility form or contact us we collect the details you provide (typically your name, email, mobile number and postcode), together with technical information from your browser (page URL, referrer, marketing campaign identifiers such as UTM parameters and Google Click ID). If you go on to enrol, we also collect the information required by the National VET Data Policy and by ASQA as our regulator.

How we use it

To assess your suitability for the training you enquired about and contact you about it.
To meet our record-keeping obligations as a nationally recognised RTO.
To improve the quality of our website and marketing.
To report anonymised campaign performance to advertising platforms (e.g. Google Ads, GA4).

Who we share it with

We do not sell your personal information. We share it only with service providers who help us operate our website, communications and student management (bound by confidentiality) and with government agencies where the law requires it (for example, the National Centre for Vocational Education Research and ASQA).

Your choices

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it where we're not required to keep it. Email privacy@onshift.edu.au or write to us via the details on our Contact page.

Processing outside Australia

Some of the services we use to run our website, email, payments and student records may store or process information outside Australia. We are currently confirming exactly which providers those are and which countries are involved, and this section will name them.

Sensitive information

Some things you tell us — for example in a support conversation, a check-in reply, a phone call or a request for an extension — may reveal sensitive information such as health or personal circumstances. We treat that content as restricted: access is limited to staff who need it, access is logged, and we keep detail out of ordinary email and SMS.

Identity verification

We do not currently run automated identity checks on this website. If we introduce them, we will describe the provider, what is checked and whether any identity document is kept before we start.

Communication preferences

You can stop marketing, reminder and wellbeing messages at any time. See our communication preferences page.

Still to be confirmed

We are being upfront about the parts of this policy that are not finished. The following content is awaiting review and is not yet a commitment:

Overseas processing and storage: The countries our hosting, email, payment and support providers process or store information in have not yet been confirmed and published.
Sensitive information: The categories of sensitive information we may collect (for example health or support-related disclosures), the consent basis and how they are protected are not yet published.
Identity verification: If we introduce identity checks, the provider, what is checked and whether identity documents are retained must be described here first.
Retention periods: How long each type of record is kept, and when it is deleted, is not yet published.
Rights requests and response times: The process and timeframe for access, correction and deletion requests is not yet published.
Data breach notification: Our notifiable data breach response commitment is not yet published.

Complaints

If you're concerned about how we've handled your information you can contact us using the details above. If you're not satisfied with our response you can contact the Office of the Australian Information Commissioner at oaic.gov.au.