Privacy that is
clear and practical.

1. Who this policy applies to

In this policy, “RIGBI Group”, “we”, “us” and “our” means RIGBI Group and its service teams. A registered training organisation (RTO), licensed finance partner or other service partner is responsible for its own activities and receives information only as described in this policy. This policy applies to visitors, prospective learners, applicants, enrolled students, finance enquirers, employers, education agents, recruitment candidates, staff and contractors who use our website or services.

2. Information we collect

We collect information that is reasonably necessary for the service you ask us to provide. Depending on your interaction with RIGBI, this can include:

• name, email address, phone number, address and course or service interests;
• application and enrolment information, including date of birth, citizenship or visa status, USI, emergency contact details and supporting documents;
• learning, attendance, assessment, placement, certificate and student-support records;
• payment-related records such as invoices, payment status, instalments and transaction references. The application does not ask for or store payment card passwords or PINs;
• staff, contractor and payroll information needed to administer employment, pay, leave, superannuation and compliance obligations;
• finance enquiry details, supporting documents and records of any consent to share information with a finance partner;
• recruitment candidate profiles, work-rights information, screening records, applications and employer role briefs; and
• technical information needed to operate and secure the website, including essential session, security and form cookies.

We do not ask for additional personal information merely because you visit the website, and you should only provide information that is relevant to the request or service.

3. Why we use information

We use personal information to respond to enquiries, assess and process applications, create and manage enrolments and accounts, deliver training, support learners, coordinate finance referrals, manage recruitment and workforce screening, administer staff and payroll processes, issue records and certificates, process invoices and payments, communicate service updates, secure our systems, and meet contractual, legal, regulatory and quality-assurance obligations.

Where a form asks for a separate consent, it is for the particular activity described on that form. We do not treat a general “consent to the Privacy Policy” statement as the basis for every use.

4. RTO, licensed partner and regulatory requirements

For nationally recognised training, the RTO assigned to the relevant course or certification is identified for that training service. We may share information needed to deliver the course, assess learning, issue records or meet training and funding requirements with that RTO. For a finance referral, information is shared with a finance partner only where you have provided the specific information-sharing consent requested for that referral. For recruitment, candidate information is shared with an employer or screening provider only as explained in the relevant process and consent. We may also disclose information to government departments, regulators, auditors, funders, assessors, emergency contacts or other authorised parties where required or permitted by law.

5. Who we disclose information to

Information may be disclosed to the RTO assigned to a training service, a finance partner for a consented referral, an employer involved in a recruitment process, a screening provider, or a service provider supporting an RIGBI function. We limit disclosure to information needed for the relevant purpose, follow any consent and access controls that apply, and disclose information to regulators or other parties where required or permitted by law. We do not sell personal information.

We use service providers to operate our systems and deliver communications. Finance-partner notification emails contain a secure portal link rather than client details or documents. Personal information remains subject to the access controls and consent recorded for the relevant service.

6. Storage and protection

Information is stored in the RIGBI systems and file storage used for the relevant service. Access to learner, finance enquiry, recruitment, staff, payroll and employer information is restricted by account permissions and authenticated workflows. Protected files are delivered through access-controlled application routes rather than being treated as public website content. We use security controls such as CSRF protection, secure session settings where HTTPS is enabled, password hashing and role-based access controls. No online system can guarantee absolute security, so we also rely on people reporting suspected unauthorised access promptly.

7. Cookies and similar technologies

The RIGBI website and portals use these first-party cookies when needed:

• rigbi_portal_session_v2 — maintains a signed-in session and temporary portal state;
• csrftoken — helps protect forms and other state-changing requests from cross-site request forgery;
• rigbi_promo_offer_interest — a signed browser token used to prevent duplicate first-cohort interest submissions; it expires after 24 hours; and
• rigbi_contact_enquiry — a signed browser token used to prevent duplicate Contact Us submissions; it expires after 24 hours.

Session messages are held in the Django session rather than in a separate marketing cookie. RIGBI does not currently load analytics, advertising or behavioural-tracking cookies. Cookie consent requirements depend on the cookie’s purpose and the visitor’s location. Blocking cookies in browser settings may prevent sign-in or form submission. We will update this notice if our cookie use changes.

8. Retention

We retain information only for as long as it is needed for the purpose collected, to maintain accurate records, to complete training or recruitment processes, or to meet legal, regulatory, funding, audit, taxation and dispute-resolution requirements. Retention periods vary by record type. When information is no longer required, we take reasonable steps to securely delete it, destroy it or remove identifying details, subject to lawful holds and backup limitations.

9. Your choices and privacy rights

Subject to legal exceptions, you may ask us what personal information we hold about you, request correction of inaccurate information, ask us to explain how it is used, or raise a concern about its handling. You may withdraw a consent that relates to a specific optional activity, although this does not undo processing already completed or prevent us from keeping records we must retain. We may need to verify your identity before responding.

10. Contact us

For a privacy question, access or correction request, or concern about how information has been handled, contact the RIGBI Group team at support@rigbigroup.com.au. Please do not send passwords, payment card details or other sensitive information by email unless we have given you a secure method to do so.

11. Changes to this policy

We may update this policy when our services, partner arrangements, legal obligations or privacy practices change. The date at the top of this page identifies the current version. We will not describe services or third-party practices that are not actually used by RIGBI.