ASA Institute of Higher EducationABN: 85 617 180 079 | CRICOS: 03847F | TEQSA PRV: 14313Level 5, 540 George Street, Sydney NSW 2000, Australiainfo@asahe.edu.au | +1300 672 076 | https://asahe.edu.au
Last updated: 9 June 2026
1. Introduction
ASA Institute of Higher Education ("ASA", "we", "us", or "our") is committed to protecting the privacy of your personal information. We handle personal information in accordance with the Privacy Act 1988 (Cth) (the "Privacy Act") and the Australian Privacy Principles ("APPs").
This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you:
• Visit or interact with our website at https://asahe.edu.au
• Apply for or enrol in our courses (including via our Apply Now process)
• Use our student support and wellbeing services
• Attend events, graduations, or engage with us as a student, prospective student, alumni, staff member, contractor, education agent, or website visitor
This policy applies to all personal information we collect in the course of providing higher education services.
2. What personal information we collect
We collect different types of personal information depending on your relationship with us. This may include:
2.1 Identity and contact details
• Full name, date of birth, gender, preferred name
• Residential and postal address, phone numbers, email address
• Emergency contact / next of kin details
2.2 Application, enrolment and academic information
• Academic history, qualifications, transcripts, and prior learning
• English language test results and other entry requirements
• Unique Student Identifier (USI)
• Passport, visa, and immigration status details (for international students)
• Enrolment details, course selections, subjects/units, timetables
• Academic results, assessments, attendance records, and qualifications awarded
2.3 Financial and administrative information
• Payment details and transaction history (we do not store full credit card numbers)
• Bank account details (for refunds or scholarships)
• Higher Education Loan Program (HELP) or other government loan details
• Scholarship or sponsorship information
• Tax File Number (where required for lawful purposes)
2.4 Sensitive and health information
We may collect sensitive information (as defined in the Privacy Act), including:
• Health and medical information, disability status, or learning support needs (to provide reasonable adjustments and academic support)
• Information collected through our confidential counselling and wellbeing services (this is handled with particular care and usually requires your explicit consent for collection and any disclosure)
• Racial or ethnic origin, religious beliefs, or philosophical beliefs (where relevant to support services or cultural considerations)
• Criminal history or working with children checks (where required for placements, professional accreditation, or regulatory purposes)
Wellbeing and counselling records are treated with the highest confidentiality. Access is strictly limited to authorised wellbeing staff. Information will not be shared with academic or administrative staff without your explicit consent, except where there is an imminent risk of serious harm to you or others, or where disclosure is required or authorised by law.
2.5 Website and technical information
• IP address, browser type and version, device information, operating system
• Pages visited, time spent on site, referring website, and clickstream data
• Cookies and similar tracking technologies (see section 7)
2.6 Marketing, events and feedback
• Newsletter subscriptions and communication preferences
• Event registrations and attendance
• Feedback, surveys, testimonials, and photographs/videos (with consent)
2.7 Other information
• References and employment history (where relevant)
• Information from education agents or partner institutions
• Any other information you voluntarily provide to us
We only collect personal information that is reasonably necessary for our functions and activities as a higher education provider.
3. How we collect your personal information
We collect personal information:
• Directly from you — through our website forms (including the Apply Now form), the Meshed Higher Education student management system, emails, phone calls, in-person meetings, wellbeing booking forms (via Calendly), surveys, or when you otherwise contact us.
• From third parties — including education agents, previous educational institutions (for verification of prior learning or credit), referees, government agencies, payment processors, and publicly available sources (where relevant and lawful).
• Automatically — through cookies, server logs, analytics tools, and website technologies when you browse our site or interact with our online services.
When we collect personal information directly from you, we will take reasonable steps to notify you (at or before the time of collection, or as soon as practicable afterwards) of:
• The purposes for which the information is collected
• Our contact details
• The consequences if the information is not provided (where applicable)
• Whether the collection is required or authorised by law
• Any third parties to whom we may disclose the information
4. Why we collect, use and disclose your personal information
We collect, use, and disclose personal information for the following primary purposes:
4.1 Core education services
• Assessing and processing course applications and determining eligibility
• Enrolling students, managing enrolments, timetables, and academic progress
• Delivering teaching, learning, and assessment activities (including online and blended modes)
• Recording and maintaining accurate student academic records
• Issuing testamurs, academic transcripts, and other official documents
• Managing graduations and alumni relations
4.2 Student support and wellbeing
• Providing academic support, learning assistance, and reasonable adjustments
• Delivering confidential counselling and wellbeing services
• Supporting students' health, safety, and welfare
4.3 Legal, regulatory and compliance obligations
• Complying with the requirements of TEQSA, CRICOS, the Education Services for Overseas Students (ESOS) Act 2000, the Higher Education Support Act 2003, and other relevant legislation and standards
• Reporting to government agencies (e.g., Department of Education, Department of Home Affairs for international student visa compliance and Confirmation of Enrolment)
• Meeting obligations related to the Unique Student Identifier (USI), HELP loans, and government funding
• Responding to legal requests, court orders, or regulatory investigations
• Managing complaints, grievances, appeals, and misconduct matters
• Ensuring workplace health and safety and duty of care obligations
4.4 Administration and operations
• Processing fees, payments, refunds, and scholarships
• Managing contracts with students, staff, and third parties
• Quality assurance, audits, and continuous improvement of our services
• Insurance, risk management, and legal advice
4.5 Communication and marketing
• Sending important administrative communications about your studies or enrolment
• Providing information about courses, events, webinars, and opportunities (with your consent or where permitted under APP 7)
• Conducting surveys and seeking feedback to improve our services
• Marketing and promoting ASA Institute of Higher Education (you may opt out at any time)
4.6 Other lawful purposes
• Any other purpose for which you have given consent
• Purposes that are directly related to the primary purposes above and that you would reasonably expect
• Where otherwise permitted or required by law
We will not use or disclose your personal information for a secondary purpose unless:
• It is directly related to the primary purpose and you would reasonably expect us to do so, or
• You have consented, or
• Another exception under the APPs or law applies.
5. Disclosure of your personal information
We may disclose your personal information to the following parties:
5.1 Service providers and contractors
• Our student management system provider (Meshed Higher Education)
• IT infrastructure, hosting, and cloud service providers (e.g., Microsoft Azure or other secure providers)
• Email, SMS, and communication platform providers
• Payment gateway and financial service providers
• Website developers, analytics providers, and digital marketing agencies (under contract)
• Professional advisors (legal, accounting, audit, insurance)
All service providers are bound by confidentiality obligations and, where required, contractual clauses requiring them to handle personal information consistently with the APPs.
5.2 Government and regulatory bodies
• Tertiary Education Quality and Standards Agency (TEQSA)
• Department of Education and other Commonwealth and state/territory education authorities
• Department of Home Affairs (for international students — visa compliance, Confirmation of Enrolment, and student visa reporting)
• Australian Taxation Office (ATO) where relevant
• Other government agencies as required or authorised by law (including law enforcement where a warrant or legal obligation exists)
5.3 Education sector partners
• Other higher education providers (for credit transfer, articulation, or verification of qualifications)
• Professional accreditation bodies (e.g., for accounting or IT programs)
• Education agents and recruitment partners (with appropriate agreements and your knowledge)
• Placement providers and host organisations (for work-integrated learning or internships)
5.4 Other disclosures
• Your emergency contacts or next of kin (in genuine emergencies or with your consent)
• With your explicit consent to any other party you authorise
• As required or authorised by law (including under court order or statutory obligation)
We do not sell your personal information to third parties.
6. Cross-border disclosure of personal information
Some of the service providers we use (for example, cloud hosting, analytics, email/communication platforms, or student management system components) may be located outside Australia or may store data on servers located overseas (commonly in the United States, Europe, or other regions).
When we disclose personal information to an overseas recipient, we take reasonable steps to ensure that:
• The recipient handles the information in a manner consistent with the APPs, or
• You consent to the disclosure after being informed that this may mean you will not have the same protections as under the Privacy Act, or
• Another exception under APP 8 applies.
If you have concerns about overseas disclosure, please contact us before providing information or using certain services.
7. Cookies, analytics and website technologies
Our website uses cookies and similar technologies (such as web beacons or pixels) to:
• Enable essential website functionality (e.g., form submissions, navigation, and the Apply Now redirect to Meshed)
• Analyse how visitors use our website (traffic sources, popular pages, device types) to improve user experience and content
• Remember your preferences (where applicable)
We may use analytics services such as Google Analytics (or equivalent). These services may collect information about your use of our website and may set cookies. Information collected is generally aggregated and anonymised where possible.
You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling certain cookies may affect the functionality of our website (for example, the ability to submit forms or access the application portal).
We do not use cookies for cross-site tracking or targeted behavioural advertising without appropriate consent mechanisms where required by law.
For more information about the specific cookies we use, please contact us or refer to any Cookie Notice we may publish separately.
8. Data security
We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. Our security measures include:
• Secure web hosting and encrypted data transmission (HTTPS/TLS)
• Access controls, authentication, and role-based permissions for staff and systems
• Encryption of sensitive data at rest and in transit where appropriate
• Regular security assessments, updates, and monitoring
• Staff training on privacy and data protection obligations
• Confidentiality agreements with employees, contractors, and service providers
• Secure disposal procedures for paper and electronic records
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. In the unlikely event of a data breach that is likely to result in serious harm to individuals, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under the Privacy Act.
9. Retention and destruction of personal information
We retain personal information only for as long as it is reasonably necessary to fulfil the purposes for which it was collected, or to meet our legal, regulatory, and contractual obligations.
Examples of retention periods include:
• Student academic records and enrolment information — retained in accordance with TEQSA standards, ESOS requirements, and archival obligations (often 7 years or longer after completion or last enrolment)
• Wellbeing and counselling records — retained for a period appropriate to the service and legal requirements, with strict access controls
• Financial and transaction records — retained to meet ATO and audit requirements (generally 7 years)
• Website analytics and logs — retained for a limited period for operational and security purposes
When personal information is no longer required, we securely destroy it or de-identify it so that it can no longer be associated with you.
10. Accessing and correcting your personal information
You have the right to request access to the personal information we hold about you and to request that we correct any information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
How to make a request
• Email: info@asahe.edu.au
• Phone: +1300 672 076
• In writing to our address above
• Via our website contact form
We will respond to access and correction requests within a reasonable time (usually within 30 days). We may need to verify your identity before providing access.
In some cases, we may charge a reasonable fee for providing access (we will advise you in advance). If we refuse a request, we will provide reasons and information about how you can complain.
Note for current students: Much of your academic and enrolment information is available to you through the student portal in our Meshed Higher Education system. Please log in there first for routine access.
11. Complaints about our handling of your personal information
If you have a concern or complaint about how we have collected, used, or disclosed your personal information, or if you believe we have breached the APPs, please contact us first so we can try to resolve the matter promptly and fairly:
Privacy enquiries / complaintsEmail: info@asahe.edu.auPhone: +1300 672 076
We will acknowledge your complaint, investigate it, and aim to provide a response within a reasonable timeframe.
If you are not satisfied with our response, or if you prefer not to contact us directly, you may complain to the Office of the Australian Information Commissioner (OAIC):
• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au
• Postal: GPO Box 5218, Sydney NSW 2001
12. Direct marketing and your communication preferences
We may send you information about our courses, events, webinars, alumni opportunities, and other services by email, SMS, or post if:
• You have opted in or subscribed, or
• You have an existing relationship with us and the communication is directly related to that relationship, and we provide a simple means for you to opt out (in accordance with APP 7).
You can opt out of marketing communications at any time by:
• Clicking the "unsubscribe" link in our emails
• Replying "STOP" to SMS messages
• Contacting us at info@asahe.edu.au and requesting to be removed from marketing lists
We will action opt-out requests promptly. Opting out of marketing will not affect important administrative or service-related communications about your enrolment or studies.
13. Anonymity and pseudonymity
Where it is lawful and practicable to do so, you may interact with us anonymously or by using a pseudonym. For example, you can browse our website or make general enquiries without identifying yourself.
However, for most services — including course applications, enrolments, wellbeing support, fee payments, and issuing of official documents — we are required to identify you and verify your identity. It will generally not be practicable to remain anonymous in these situations.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, technology, legal requirements, or regulatory environment.
The current version will always be available on our website at https://asahe.edu.au (usually linked in the footer). We will update the "Last updated" date at the top of the policy.
For significant changes that materially affect how we handle student personal information, we will take reasonable steps to notify affected individuals (for example, via email to current students or prominent notice on our website).
We encourage you to review this policy periodically.
15. Contact us
If you have any questions about this Privacy Policy, our privacy practices, or wish to make a request regarding your personal information, please contact us:
ASA Institute of Higher Education
Privacy Officer
Level 5, 540 George StreetSydney NSW 2000, Australia
Email: info@asahe.edu.au
Phone: +1300 672 076
Website: https://asahe.edu.au
Important notes
• This Privacy Policy should be read in conjunction with our Terms of Use, Student Handbook, and any specific consent forms or notices provided at the time of collection (for example, wellbeing consent forms or application declarations).
• When you apply via our "Apply Now" link, you are redirected to the Meshed Higher Education student management system. The privacy policy and terms of Meshed also apply to the handling of your application and enrolment data. We recommend reviewing their privacy documentation.
• This policy does not cover the privacy practices of third-party websites linked from our site (e.g., Calendly for wellbeing bookings, or external social media platforms). We encourage you to review the privacy policies of those services.
© 2026 ASA Institute of Higher Education. All rights reserved.
This document is for general information and does not constitute legal advice. For specific legal advice regarding privacy obligations, please consult a qualified Australian legal practitioner.
