Privacy Policy

1. Introduction

Rosehill College complies with the Privacy Act 1988 (Cth), Australian Privacy Principles (APPs), and other applicable privacy legislation. This policy outlines how personal information is collected, used, disclosed, stored, and protected.

2. Purpose

To ensure transparency, accountability, and lawful handling of personal information.

3. Scope

Applies to all students, staff, contractors, and stakeholders whose information is held by Rosehill College.

4. Privacy Legislation

• Privacy Act 1988 (Australia)
• Australian Privacy Principles (APPs)
• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)

5. Collection of Personal Information

Types of Information

• Identification and contact details
• Academic records and enrolment information
• Financial and payment records
• Health information where required
• Sensitive information where legally permitted

Purpose of Collection

• Student enrolment and administration
• Delivery of education and support services
• Compliance with legal obligations
• Communication and reporting

6. Use and Disclosure

Use

• Academic administration
• Student support services
• Regulatory reporting

Disclosure

• Regulatory authorities
• Government agencies
• Service providers

Consent

• Obtained when required by law
• May be withdrawn by written request

7. Data Security

• Access controls and authentication
• Secure digital storage systems
• Regular audits and monitoring
• Data breach response procedures
• Mandatory notification where required
• Remedial action and prevention

8. Access, Correction and Retention

• Right to access personal information
• Correction of inaccurate records
• Retention aligned with legislation
• Secure disposal of outdated records

9. Complaints and Appeals

• Complaints submitted to Privacy Officer
• Handled under Complaints and Appeals Policy
• Right to external review if unresolved

10. Review and Document Control

Version: V1.1  |  Approved By: CEO  |  Approval Date: 8 June 2024  |  Next Review: 8 June 2026

This policy is reviewed annually or earlier if legislative or operational changes require.