Privacy Statement

UMA College respects the privacy of students, staff, contractors, visitors and other people who interact with us. This statement explains the types of personal information we collect, why we collect it, how we use it, when we may disclose it, and how a person can ask to access or correct their information.

This statement applies to personal information collected through our website, course enquiries, applications, enrolments, student administration, training delivery, assessment, support services, events, complaints and other dealings with UMA College.

Who we are

UMA College is a registered education provider (RTO 45617, CRICOS Provider 04318A). We deliver training and related services to domestic and international students.

As part of our role, we must collect and keep certain information to meet our legal, regulatory and contractual obligations. These obligations may arise under vocational education and training laws, student identifier requirements, the ESOS framework for international students, visa-related reporting requirements, and other laws that apply to education providers.

Personal information we collect

The information we collect depends on a person’s relationship with UMA College and the service being provided.

We may collect:

  • name, date of birth, contact details and emergency contact details
  • identity information needed to verify identity or eligibility
  • enrolment, course and student administration information
  • education history, prior qualifications and assessment records
  • course progress, attendance, completion and outcome information
  • payment, fee, refund and related financial administration information
  • information provided in enquiries, complaints, appeals and support requests
  • staff, contractor and employment-related information
  • website enquiry information and email communication records
  • photographs, video or image material where this is collected for an authorised purpose.

For students, some information may be required for national reporting, student identifier, training record, funding, audit or regulatory purposes.

Sensitive information

We only collect sensitive information where we have a lawful reason to do so.

This may include information needed for student support, mandatory reporting, government data collections, workplace administration, health and safety, or other lawful purposes connected with our services.

Examples may include information about disability, reasonable adjustment needs, language background, country of birth, Indigenous status, health-related support needs, welfare matters, or other information a person chooses to provide to us.

We handle sensitive information carefully and limit access to people who need it for an authorised purpose.

International students

For international students, UMA College may collect and keep additional information needed to administer enrolment and meet obligations under the ESOS framework.

This may include:

  • application and admission records
  • written agreements and fee records
  • Confirmation of Enrolment information
  • passport, visa and related identity information
  • current residential address and other contact details
  • course progress and attendance information
  • welfare, support and critical incident records, where relevant
  • transfer, deferral, suspension, cancellation and withdrawal records
  • records used to support PRISMS reporting
  • communications and decisions connected with international student compliance.

UMA College may need to report or disclose some international student information to Australian Government agencies, regulators or other authorised bodies where required or permitted by law. This can include information connected with enrolment status, course progress, attendance, visa matters, student welfare, cancellations, transfers or other reportable events.

Why we collect personal information

We collect personal information so we can:

  • respond to enquiries
  • process applications and enrolments
  • deliver training, assessment and student support services
  • monitor student progress, attendance and participation
  • issue records, statements of attainment, certificates or qualifications
  • manage fees, payments, refunds and financial administration
  • meet student identifier, training activity and government reporting obligations
  • manage international student obligations, including PRISMS-related reporting
  • handle complaints, appeals, incidents and support matters
  • communicate with students, staff, contractors and other stakeholders
  • maintain records required for audit, investigation or regulator review
  • comply with laws, contracts and regulatory requirements.

Where personal information is required by law or for enrolment administration, UMA College may not be able to provide a service if the information is not supplied.

Website, enquiries and online services

When a person uses our website or contacts us online, we may collect information submitted through forms, email links, course enquiries, subscription forms or other online functions.

Our website may also collect technical information such as browser type, device information, pages visited and general usage data. This information helps us maintain website security, respond to enquiries, improve website content and understand how people use our online services.

If UMA College uses cookies, analytics tools, online advertising tools or third-party website plugins, those tools may collect information in line with their own privacy settings and terms. People can adjust browser settings to manage cookies, but some website functions may not work properly if cookies are disabled.

Use and disclosure of information

UMA College uses personal information for the purpose for which it was collected, or for related purposes that a person would reasonably expect.

We may disclose personal information:

  • to government departments, regulators or authorised agencies where required or permitted by law
  • to organisations that support student administration, training delivery, records management, technology, finance, communications or other business functions
  • to the Office of the Student Identifiers Registrar, where required
  • to vocational education and training authorities or data collection bodies, where required
  • to agencies involved in international student regulation, visa administration or ESOS compliance, where applicable
  • to third parties where a person has consented
  • where disclosure is needed to prevent or respond to a serious risk to health, safety or welfare
  • where otherwise authorised or required by law.

UMA College does not sell student or stakeholder contact lists.

Overseas disclosure

UMA College does not intend to disclose personal information overseas unless this is required for a specific service, authorised by law, consented to by the person, or necessary for international student administration.

Some technology providers or online services may store or process information using systems located outside Australia. Where this occurs, UMA College takes reasonable steps to use reputable providers and appropriate information handling arrangements.

Storage and protection of information

UMA College takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, unauthorised modification and unauthorised disclosure.

Information may be held in electronic systems, approved cloud services, email systems, student management systems, physical files or other business records.

Access to personal information is limited to authorised people who need access for their role. Records are kept for the period required by law, regulation, contract or business need. When information is no longer required, it is destroyed or de-identified where lawful and practical.

Student images and recordings

Photographs, videos and recordings are personal information.

UMA College may collect or use images or recordings for training, assessment, identification, administration, student support, safety, events, marketing or promotional purposes, depending on the circumstances.

Images of students under 18 are not used for marketing or promotional purposes. Where images or recordings of students under 18 are collected for another authorised purpose, they are handled with care and used only for that purpose.

Adult students may choose not to have their image used for marketing or promotional purposes by notifying UMA College in writing.

Direct marketing

UMA College may send information about courses, services, events or updates where a person has consented, made an enquiry, enrolled with us, or would reasonably expect to receive that information.

People can unsubscribe from marketing communications or update their communication preferences at any time.

Accessing or correcting personal information

A person may ask to access personal information UMA College holds about them. A person may also ask us to correct information they believe is inaccurate, out of date, incomplete, irrelevant or misleading.

We will respond to access and correction requests within a reasonable time. We may need to verify identity before releasing or changing information. In some cases, access may be limited where the law allows or requires us to refuse access.

To request access or correction, contact UMA College using the details below.

Privacy complaints

A person who has a privacy concern should contact UMA College first so the matter can be reviewed.

UMA College will consider the concern and respond within a reasonable time. If the person is not satisfied with the response, they may contact the Office of the Australian Information Commissioner.

Office of the Australian Information Commissioner
Website: oaic.gov.au
Phone: 1300 363 992

Contact

UMA College
RTO 45617 | CRICOS Provider 04318A
19-20 Enterprise Avenue, Padstow NSW 2211
Phone: 1300 219 391
Email: [email protected]
Website: uma.edu.au

Review of this statement

UMA College may update this Privacy Statement from time to time to reflect changes in our services, systems, legal obligations or information handling practices. This version is dated 30 May 2026.