Privacy Policy

1. About this policy

RTEO (ABN 17 673 537 123) provides websites, online enrolment technology and related services. This policy explains how we handle personal information when you visit our website, contact us, register interest in an offer, make a payment or use our services.

For information submitted to a training provider through its enrolment forms, that provider also has its own privacy policy. The provider decides what information it needs and how it uses that information. Our Data Processing Agreement explains our role when processing information for a workspace customer.

2. Information we collect

Depending on how you interact with us, we collect:

• Contact details, including your name, email address and telephone number.
• Organisation details, position, business name and ABN where supplied or selected from the Australian Business Register.
• Enquiry and campaign responses, such as your current student management system, enrolment volumes, migration plans, preferred start date and messages.
• Account, workspace, support and correspondence records.
• Billing information, transaction references, payment status and subscription details. Card details entered in Stripe Checkout are handled by Stripe; we do not store your full card number.
• Technical information such as IP address, browser and device details, security logs and interactions with our website.

When providing services to a training organisation, we also process the learner, booking and other information that organisation supplies or asks us to collect. Avoid including sensitive information in general enquiry messages.

3. How we collect information

We collect information from you through forms, account settings, enquiries, support requests and payment interactions. We may receive information from an authorised representative of your organisation, connected systems you authorise, our payment provider and public business registers.

Our website uses cookies and similar technologies for functions such as maintaining sessions and preferences. Browser controls can restrict or remove cookies, although doing so may affect sign-in and other features.

4. Why we use information

We use information to respond to enquiries, assess and prepare requested services, maintain customer records, administer offers, process payments, provide support, secure the service and meet legal obligations.

A campaign submission preserves your answers at the time of your enquiry. Relevant information may also be recorded against your contact record to support follow-up. Payment status is linked to the relevant onboarding or service record.

Where you request or consent to updates, we may contact you about relevant services. You can ask us to stop promotional contact at any time using the contact details below or an unsubscribe option where provided. Essential service and payment communications may still be necessary.

5. Who receives information

We share information where needed with personnel and service providers supporting hosting, data storage, communications, payment processing, security and the services you request. Stripe processes payments. If you choose to book a consultation, Calendly processes the details you enter there.

For customer workspaces, authorised integrations may exchange information with the customer's student management system or other connected services. AI features may process information according to the customer's configuration and the applicable Data Processing Agreement. The DPA subprocessor schedule identifies providers and processing locations for workspace services.

We may also disclose information where required or permitted by law, or to investigate misuse and protect people, systems and legal rights.

6. Overseas processing

Some providers operate outside Australia, including in the United States. Processing locations depend on the service and configuration. Workspace processing arrangements and named locations are described in the Data Processing Agreement. Payment and optional booking providers may process information through their international operations.

An Australian hosting location does not mean every connected service processes information only in Australia. Contact us if you need details about a particular service before submitting information.

7. Security and retention

We use access controls and other technical and organisational safeguards to protect personal information. No internet service can guarantee absolute security.

We retain information for the purposes described in this policy, including service delivery, support, accounting, legal obligations and dispute handling. Retention depends on the type of record and the applicable requirements. When information is no longer needed and retention is not required, it should be deleted or de-identified. Customer workspace retention and deletion arrangements are addressed in the DPA.

8. Access and correction

You can contact us to request access to, or correction of, personal information we hold about you. We may need to verify your identity and clarify your request. Where access or correction is restricted by law, we will explain the reason where permitted.

For learner information controlled by a training provider, contact that provider first. We can assist the provider with requests relating to information processed through our service.

9. Privacy questions and complaints

Use our contact form, call 1800 697 836, or write to RTEO, 53 Barry Rd, Campbellfield VIC 3061. Please identify your request as a privacy enquiry and describe the information or event concerned.

We will assess your complaint and respond within a reasonable period. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner, where it has jurisdiction. The OAIC generally asks you to raise your complaint with the organisation first.

10. Updates and related documents

We may update this policy as our services or obligations change. The last-updated date identifies this version. Material changes affecting existing services will be communicated where required.

Read our Terms of Service and Data Processing Agreement alongside this policy.