How CAQA Data protects the confidential student, funding and business information entrusted to us during data services engagements.
CAQA Data, part of CAQA Groups and Career Calling International Pty Ltd (ABN 53 162 651 238), works every day with some of the most sensitive records an education or training organisation holds: student files, unique student identifiers, enrolment and completion histories, funding claims and commercial reporting. This Confidentiality policy explains what we treat as confidential, how that information is protected while we clean, validate, migrate and report on it, and what you can expect from us if something goes wrong. It applies to information received through this website and to information provided to us during engagements arranged through it.
We treat as confidential all non-public information received from a client or prospective client, including student and staff personal information, USI and identity data, AVETMISS and NAT file contents, enrolment, progress and completion records, funding and claims data, system exports and credentials, commercial terms, audit findings and anything an organisation would reasonably regard as private to its business. Enquiries made through this website, including the fact that an organisation has sought help with a data problem, are treated with the same discretion.
Confidential material should only be provided through the secure transfer channel agreed for your engagement, as described in our Data Services Terms. Website enquiry forms are intended for contact details and a description of your needs; please do not paste student records or attach datasets to an initial enquiry.
Access to client data is limited to the CAQA Data team members working on your engagement, on a need-to-know basis. Client environments and datasets are kept separate, and access is removed when a person no longer requires it for the engagement.
Everyone who works on client data for CAQA Data, whether an employee or an engaged specialist, is bound by written confidentiality obligations that continue after their involvement ends. Specialists from other CAQA Groups brands are engaged on a project only where the scope requires it, and they are subject to the same obligations.
We do not disclose confidential information to any third party except: with your written consent; where disclosure is necessary to deliver the agreed engagement and the recipient is bound by equivalent obligations; or where disclosure is required by law, by a court, or by a regulator with lawful authority. Where the law permits, we will tell you before making a compelled disclosure so that you can respond.
Where confidential information is also personal information, it is handled in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and our Privacy Policy. Students and other individuals whose records pass through our hands during an engagement are not our customers, and we do not use their information for any purpose other than performing the work your organisation has authorised.
Confidential material is stored and processed in access-controlled environments with encryption in transit, and our handling, retention and deletion practices are described in our Data Processing and Security Notice. We do not retain client datasets beyond the period agreed for an engagement, and we return or destroy material at completion as agreed.
Our confidentiality obligations begin when information is received - including with a first enquiry - and survive the end of an engagement. They continue for as long as the information remains confidential, regardless of whether any further work is undertaken.
If we become aware of unauthorised access to, or disclosure of, your confidential information, we will notify you without undue delay, explain what happened and what data was affected, take steps to contain and remediate the issue, and meet any notification obligations that apply under the Notifiable Data Breaches scheme.
You are responsible for ensuring that you are authorised to share the data you provide to us, that your own privacy notices and consents cover the disclosure, and that credentials or system access given to us are scoped to the engagement and revoked at its end. If material you send us includes information about other organisations, you must have the right to share it.
To raise a confidentiality concern, ask how your information is being handled, or request return or destruction of material, contact us through our contact page, by email to info@caqa.com.au, by phone on 1800 266 160, or by mail to 2/10 Lawn Court, Craigieburn, Victoria 3064.
To Receive Updates And Offers
