Flying Fish Australia privacy policy

We take your privacy seriously and only use your information to deliver your training, manage your booking, and meet legal requirements. Flying Fish Sailing is the trading name of Flying Fish Australia Pty Ltd. This policy outlines how personal information is collected, used, stored, disclosed, and accessed in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and applicable RTO and RYA requirements.

1. Purpose

Flying Fish Australia Pty Ltd (the RTO) is committed to protecting the privacy of students, clients, and stakeholders. This policy explains how personal information is handled in line with Australian privacy law and relevant training standards.

2. Scope

This policy applies to:
  • Prospective and enrolled students
  • Clients and website users
  • Staff, contractors, and third parties handling personal information
  • All systems including LMS platforms, RYA systems, and student management systems

3. Types of personal information collected

Student and client data
  • Full name, date of birth, gender
  • Contact details (address, phone, email)
  • Unique Student Identifier (USI)
  • Identification documents
  • Emergency contact details
  • Course enrolment, completion, and competency records
Sensitive information (where required)
  • Medical or fitness-to-participate information
  • Incident or injury reports
  • Language, literacy, and numeracy (LLN) assessments
Online and system data
  • LMS login details
  • IP address and usage data
  • Website interaction data

4. Purpose of collection

Personal information is collected for:
  • Enrolment and course administration
  • Delivery and assessment of training
  • Issuing qualifications and statements of attainment
  • Compliance with ASQA and regulatory requirements
  • AVETMISS reporting to government authorities
  • Safety management, including vessel operations where applicable
  • Communication with students and clients
  • Delivery of RYA training and certification

5. Disclosure of personal information

We may disclose personal information to: Regulatory and government bodies
  • Australian Government and State Training Authorities
  • National Centre for Vocational Education Research (NCVER)
  • ASQA or other regulators
RYA and associated systems
  • Personal data (name, email, date of birth, address) may be shared with RYA Interactive and Learning Pool
  • Data is used solely for course delivery, certification, and student management
Third-party service providers
  • LMS and IT service providers
  • Payment processors
  • SMS and email communication platforms
We do not sell or rent personal information.

6. Cross-border disclosure

Some personal information may be transferred overseas, including to UK-based RYA systems and Learning Pool LMS. We take reasonable steps to ensure overseas recipients comply with privacy obligations consistent with the Australian Privacy Principles.

7. Data security

We implement appropriate safeguards including:
  • Secure servers and access controls
  • Role-based access to student data
  • Password protection and authentication
  • Secure storage of physical records
  • Staff confidentiality obligations

8. Data retention

Personal information is retained in accordance with:
  • AVETMISS and NCVER requirements
  • Standards for RTOs 2025
  • Applicable maritime and safety regulations
Student records of attainment are retained for a minimum of 30 years where required.

9. Access and correction

Individuals have the right to:
  • Access their personal information
  • Request correction of inaccurate or incomplete data
  • Request deletion where legally permissible
Requests must be submitted in writing to the RTO.

10. Consent and choice

By providing personal information, individuals consent to its use and disclosure as outlined in this policy. Individuals may:
  • Opt out of marketing communications
  • Withdraw consent, subject to legal and contractual obligations

11. Complaints

If you believe your privacy has been breached, you may submit a complaint to: Flying Fish Australia Pty Ltd [Insert contact details] Complaints will be investigated and responded to within a reasonable timeframe. If unresolved, complaints may be escalated to the Office of the Australian Information Commissioner (OAIC).

12. Website and cookies

Our website may use cookies and analytics tools to improve user experience. Users may disable cookies via browser settings.

13. Policy review

This policy is reviewed periodically to ensure ongoing compliance with:
  • Privacy legislation
  • RTO standards
  • RYA requirements

14. Related documents

  • Student Enrolment Form
  • AVETMISS Data Collection Notice
  • Student Handbook
  • Complaints and Appeals Policy
  • Records Management Policy