Privacy Policy – Enginuity Training

Enginuity Online Training Privacy Policy

Last updated: 07 September 2026

Purpose of this Privacy Policy

Enginuity Online Training respects your privacy and is committed to handling personal information responsibly, securely and transparently.
This Privacy Policy explains how we collect, hold, use, disclose, protect and manage personal information when you:

visit our website
create an online training account
purchase or access a course
attend a webinar or virtual training session
complete an assessment or quiz
receive a certificate;
make an enquiry
subscribe to our communications
participate in corporate training or
otherwise interact with Enginuity Online Training.

We manage personal information in accordance with the Privacy Act 1988 and the Australian Privacy Principles to the extent that they apply to us. We also seek to follow those principles as a matter of good privacy practice.

Who We Are

Enginuity Online Training is operated by:

Legal entity: First Leg Consulting Pty Ltd
Trading name: Enginuity Online Training
ABN: 14631181809
Website Enginuitytraining.com.au Email: TBA
Telephone: +61 459 081671
Business or postal address: TBA

In this Privacy Policy, “Enginuity Online Training”, “Enginuity Training”, “we”, “us” and “our” refer to the legal entity identified above.

Scope of This Policy

This Privacy Policy applies to personal information collected through:

the Enginuity Online Training website our learning management system course registration and checkout pages webinars and virtual meeting platforms; assessment and certification systems
email, telephone and online enquiry forms; surveys and feedback forms;
social media interactions
public and corporate training bookings and
authorised third-party service providers acting on our behalf.

This policy does not apply to the independent handling of personal information by third- party websites or services that are not controlled by us.

What Is Personal Information?

Personal information is information or an opinion about an identified individual or an individual who is reasonably identifiable.
The personal information we collect will depend on how you interact with us.

Identity and contact information
We may collect:

your full name
preferred name
email address
telephone number
residential, business or postal address
job title
employer or organisation
industry sector
professional role and
account username or participant identification details.

Account information
When you create an online training account, we may collect:

your login credentials
account settings
communication preferences
course enrolments
access history
account activity and
password reset and security information.

Passwords should be stored in an encrypted or securely hashed form by our learning platform. We do not have access to your readable password where the platform operates as intended.

Purchase and transaction information
When you purchase a course or service, we may collect:

billing name and address;
products or courses purchased
transaction date and amount
invoice information
discount or promotional code information
purchase order details
payment status and
refund or account credit information.

Payments may be processed by an independent payment provider.
We do not ordinarily receive or retain complete credit or debit card details. Payment
providers may provide us with limited transaction information, such as the card type, the
last digits of the card, transaction status, and payment reference.

Course participation information
We may collect information about:

courses commenced and completed
lessons viewed
course progress
attendance at live sessions
time spent within the learning platform
downloads and resources accessed
webinar participation
discussion or chat contributions
questions submitted to a presenter
course expiry dates and completion status.

Assessment and certification information
Where a course includes an assessment, we may collect:

answers submitted
assessment attempt numbers
scores and results
pass or incomplete status
dates and times of attempts
feedback provided
suspected assessment irregularities
certificate issue dates
certificate numbers and
records required to verify a certificate.

Some assessments may be automatically marked against predetermined answers. An automated result may determine whether you have passed, must attempt an assessment again or qualify to receive a certificate.
You may contact us if you believe an automated assessment result is incorrect or has been affected by a technical problem.

Communications and support information
When you contact us, we may collect:

the content of your enquiry
correspondence and support history complaints and requested resolutions; technical support information
telephone notes
email records
survey responses and
feedback or testimonials.

Website and technical information
When you use our website or learning platform, we or our service providers may automatically collect:

internet protocol address
browser type
device type
operating system
approximate geographic area
referring website
pages visited
course pages viewed
session duration
access dates and times
cookie and tracking identifiers
error logs and
security and fraud detection information.

Marketing information
We may collect:

newsletter subscription details
marketing preferences
campaign engagement
email opening or link activity, where enabled
event interests
course interests and
records of consent or requests to unsubscribe.

Sensitive information
We do not generally require sensitive information to provide online training.
In limited circumstances, you may voluntarily provide information about:

accessibility requirements
dietary requirements for an in-person event
illness or injury relevant to a cancellation or special arrangement or another matter requiring reasonable assistance or adjustment.

We will only collect sensitive information where it is reasonably necessary and where you have consented, or where collection is otherwise permitted or required by law.
Please do not provide unnecessary medical, legal, commercially sensitive or confidential project information through course discussions, assessments, surveys or support requests.

How We Collect Personal Information

We may collect personal information directly from you when you:

create an account
complete a registration or checkout form
purchase a course
submit an assessment
attend a webinar
complete a survey
request a certificate
contact us
subscribe to a newsletter
download a resource
participate in a promotion or
interact with us through social media.

We may also receive personal information from:

your employer or organisation
a person booking training on your behalf
corporate training coordinators
payment processors
learning management providers
webinar and virtual meeting providers
website analytics providers
email delivery platforms;
certificate providers
professional advisers
referral partners and
publicly available professional sources where appropriate.

Where an employer, client or other organisation enrols you, that organisation is responsible for ensuring it has authority to provide your information to us.

Anonymity and Pseudonyms

You may browse general sections of our website without identifying yourself.
You may also make a general enquiry using a preferred name where it is practical to do so.

However, we will usually require accurate identifying information where necessary to:

create a secure course account.
process a payment.
enrol you in training.
record assessment results.
issue or verify a certificate.
respond to an account-specific request.
investigate misuse or
comply with legal, taxation or recordkeeping requirements.

Certificates must ordinarily be issued in the participant’s correct name.

Why We Collect and Use Personal Information

We may collect, hold and use personal information to:

provide and administer online training create and maintain participant accounts process enrolments, payments and refunds
provide access to purchased courses
monitor course progress
administer and mark assessments
issue and verify certificates
provide webinars and virtual training
communicate course instructions and updates
respond to enquiries and support requests
provide accessibility assistance
manage corporate training arrangements
maintain accounting and business records
prevent fraud, misuse and unauthorised account sharing
protect our systems, participants and intellectual property; investigate complaints or suspected misconduct; obtain and analyse participant feedback
improve course content and website performance develop new courses and services
conduct internal reporting and business analysis
send marketing communications where permitted
comply with legal and regulatory obligations
establish, exercise or defend legal rights and
manage a business restructure, transfer or sale.

We may use aggregated or de-identified information for reporting, course improvement and business planning where the information no longer reasonably identifies an individual.

Service and Course Communications

When you enrol in a course, we may send communications reasonably necessary to provide the service, including:

account activation messages
password reset messages
payment receipts
course access instructions
webinar links
assessment reminders
course expiry notices
changes to delivery arrangements
certificate notifications
security alerts and
responses to support requests.

These are operational communications rather than promotional communications. You may not be able to opt out of essential messages while your account, enrolment or transaction remains active. Corporate training will be delivered in accordance with the accepted quotation or proposal.

Corporate and Employer-Funded Training

Where an employer, government agency, contractor, consultant or other organisation purchases training for you, we may provide that organisation with information reasonably connected with the training arrangement.
This may include:

confirmation of enrolment
attendance
course commencement;
completion status
assessment status or result
certificate issue information and
administrative information needed to manage the booking.

We will not ordinarily provide detailed assessment answers, private support communications or unrelated personal information to the purchasing organisation unless:

this was clearly explained as part of the training arrangement
you have consented;
disclosure is reasonably required under the relevant corporate agreement or
disclosure is required or authorised by law.

Participants should review any internal privacy notices or training requirements issued by their employer or sponsoring organisation.

Disclosure of Personal Information

We may disclose personal information to parties that assist us in operating our business and delivering training, including:

learning management system providers
website hosting and cloud-storage providers
payment processors
accounting and invoicing providers
email and customer communication providers
webinar and videoconferencing providers
certificate-generation providers
website analytics and security providers
course presenters and facilitators
contractors providing administrative or technical support
professional advisers, including accountants, insurers and lawyers
regulators, courts, law-enforcement agencies and government authorities
a purchaser or adviser involved in a proposed business sale or restructure and
other parties where you have consented or disclosure is permitted or required by law.

Service providers are only authorised to handle personal information for the purposes for which it was provided or as otherwise permitted by their agreement with us and applicable law.
We do not sell participant contact details or assessment information to unrelated third parties for their independent marketing purposes.

Overseas Storage and Disclosure

Some technology and service providers used to operate our website, learning platform, payment systems, webinars, email communications, analytics or cloud storage may store or process information outside Australia.

The countries in which personal information may be stored or accessed may include:

Australia;
[United States]
[New Zealand]
[Singapore]
[Ireland or other
European Union locations] and
[insert other countries used by actual providers]

The location of cloud-based information may change depending on the provider’s infrastructure and subcontractors.
Where required, we will take reasonable steps to ensure that overseas recipients handle personal information consistently with applicable Australian privacy requirements.

Before publishing this policy, the above country list should be checked against the current locations used by our website host, learning management system, payment provider, email service, webinar provider and other relevant services.

Direct Marketing

With your consent, or where otherwise permitted, we may use your contact details to tell you about:

new training courses
upcoming webinars
downloadable resources
newsletters
relevant industry content
special offers and
Enginuity Training services.

Marketing communications will identify the sender and provide a means of unsubscribing.
You may opt out at any time by:

using the unsubscribe link in the communication;
changing your account preferences, where available; or
contacting us using the details at the end of this policy.

We will process unsubscribe requests within the period required by applicable law.
Unsubscribing from marketing will not prevent us from sending essential account, transaction, security or course-delivery communications.
We do not use sensitive information for direct marketing without your consent.

Cookies and Similar Technologies

Our website and learning platform may use cookies and similar technologies.
Cookies are small data files stored on a device or browser.

They may be used to
keep you signed in
maintain course sessions
remember account preferences
process checkout activity
protect the website from misuse
understand website usage
measure course and marketing performance
dentify technical problems and
improve website functionality.

Cookies may include:
Essential cookies
These are required for core functions such as secure login, account access, checkout and cybersecurity.
Preference cookies
These remember settings and improve the user experience.
Analytics cookies
These help us understand how people use our website and training platform.
Marketing cookies
Where used and permitted, these may help us measure campaigns or provide more relevant advertising.
You can control cookies through your browser settings and any cookie-management tool
made available on our website.
Blocking essential cookies may prevent parts of the website, checkout or learning platform from working correctly.
Third-party services may also use cookies or similar technologies in accordance with their own privacy policies.

Webinars, Recordings and Participant Contributions

A webinar or online training session may be recorded where this has been explained to participants before recording begins.

A recording may capture:
a participant’s display name
voice
image
questions
chat contributions or
other information shared during the session.

Where practical, participants who do not wish to appear in a recording may be able to:

keep their camera and microphone turned off
use written questions;
contact the presenter privately or
view an alternative recording or course resource.

Participants must not disclose confidential, privileged, commercially sensitive or personal information during a webinar unless authorised to do so.
Recordings will only be used for the purposes explained at the time of collection, such as providing course access, internal quality review or creating training material with appropriate permission.
We will not use an identifiable participant testimonial, image or recording for promotional purposes without appropriate consent.

Automated Assessments

Online quizzes and assessments may be scored automatically using predetermined rules.
Automated processing may be used to:

determine whether an answer is correct
calculate a score
record the number of attempts
determine whether the required pass mark has been met
provide standardised feedback and
trigger certificate eligibility.

Automated assessment is not intended to make decisions about employment,
professional licensing, legal rights or a participant’s suitability for a specific project role.

A participant may request that we investigate a result where they believe:
the assessment did not operate correctly
an answer was recorded incorrectly
the platform failed during submission or
the result is inconsistent with the published assessment rules.

Security of Personal Information

We take reasonable steps appropriate to the nature of the information and our operations to protect personal information from:

misuse
interference
loss
unauthorised access
unauthorised modification and
unauthorised disclosure.

Security measures may include:

account authentication
access controls
encrypted connections
password protection
secure payment providers
reputable cloud and learning-platform providers
system updates
data backups
malware and security monitoring
staff and contractor confidentiality requirements and
restricting access to people who need the information for their work.

No internet transmission, website, email system or storage platform can be guaranteed to be completely secure.
Participants are responsible for:

protecting their login credentials
using a strong and unique password
logging out of shared devices
not sharing course access and
notifying us promptly of suspected unauthorised account activity.

Data Breaches

A data breach may occur where personal information is lost, accessed without
authorisation or disclosed without authorisation.
If we become aware of a suspected data breach, we will take reasonable steps to:

identify what occurred
contain the breach
assess the affected information
reduce the risk of harm
investigate the cause
improve relevant controls; and
comply with applicable notification requirements.

Where the Notifiable Data Breaches scheme applies and a breach is likely to result in serious harm that cannot be prevented through remedial action, we will notify affected individuals and the Office of the Australian Information Commissioner as required.

Retention and Destruction

We retain personal information for as long as reasonably necessary for the purpose for which it was collected and for legitimate business, contractual, legal, accounting, insurance and dispute-management requirements.
Different records may be kept for different periods.
For example:

account information may be retained while an account remains active
transaction and invoice records may be retained to meet financial and legal obligations
course progress records may be retained while access remains available
assessment and certificate records may be retained to confirm course completion and verify certificates
support and complaint records may be retained while a matter remains open and for a reasonable period afterwards
marketing information may be retained until consent is withdrawn or the
information is no longer required and
backup copies may remain temporarily within secure backup systems until they are overwritten through standard retention cycles.

When personal information is no longer required, we will take reasonable steps to securely delete it, destroy it or permanently de-identify it, unless retention is required or permitted by law.

Accessing Your Personal Information

You may request access to personal information we hold about you.
To protect your information, we may need to verify your identity before providing access.

We will respond within a reasonable period and may provide access by:

confirming information held
providing an electronic copy
allowing information to be viewed through your account or
providing another appropriate form of access.

In some circumstances, access may be limited or refused where permitted by law. Where appropriate, we will explain the reason for the decision and available complaint options.
We will not ordinarily charge for making an access request. A reasonable charge may apply for substantial administrative work where permitted, but we will advise you before incurring the charge.

Correcting Your Personal Information

You may ask us to correct personal information that is:

inaccurate
incomplete
out of date
irrelevant or
misleading.

You may be able to update certain information directly through your online account.
For other corrections, contact us using the details below.
We may need to verify your identity or request supporting information before changing significant records, including a participant’s name on an issued certificate.

Deleting an Account or Withdrawing Consent

You may ask us to close your account or withdraw consent for a particular use of your information.
Closing an account may result in the loss of:

course access
saved progress
assessment history
downloadable resources and
access to certificates through the learning platform.

We may retain certain information after account closure where reasonably required for:

transaction records
certificate verification
fraud prevention
dispute resolution
legal obligations or
establishing or defending legal rights.

Withdrawal of consent does not affect handling that occurred lawfully before consent was withdrawn.

Third-Party Links and Services

Our website and course materials may contain links to:

government resources
legislation
standards bodies
industry publications
video platforms
professional websites or
other third-party services.

We do not control the privacy, security or information-handling practices of independent third parties.
You should review the privacy policy of a third-party website or service before providing personal information.

Social Media

When you interact with Enginuity Online Training through a social media platform, both we and the platform provider may receive information about that interaction.

The platform provider will handle information under its own privacy policy and settings.

Please do not post personal, confidential, privileged or commercially sensitive information in public comments or messages.

Children and Young People

Enginuity Online Training is primarily designed for adults working in construction, infrastructure, contract administration, project delivery and related professional roles.

Our services are not directed to children.

A person under 18 should only create an account or enrol with the involvement and consent of a parent, guardian, employer, educational institution or other responsible adult.

If we become aware that personal information has been collected from a child without appropriate authority, we will consider reasonable steps to delete or appropriately manage that information.

Privacy Complaints

You may contact us if you believe that:

we have mishandled your personal information
your information has been disclosed without authority
an access or correction request has not been properly addressed
you have received marketing after opting out or
we have not followed this Privacy Policy.

Please provide:
We will:
your name and contact details;
a description of the issue;
relevant dates;
supporting information; and
the outcome you are seeking.

acknowledge the complaint within a reasonable period
investigate the matter
request further information where necessary and
provide a response or proposed resolution.

We aim to resolve privacy complaints fairly and promptly.
If you are not satisfied with our response and the Privacy Act applies to the matter, you may be entitled to contact the Office of the Australian Information Commissioner.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to:

our courses and services
our website or learning platform
technology providers
information-handling practices
legal requirements or
business operations.

The current version will be published on our website and will show the date it was last updated.
Where a change is material and affects existing participants, we may also provide notice by email, through the learning platform or by another reasonable method.

Contact Us

Questions, access requests, correction requests and privacy complaints should be
directed to:
Privacy Contact
Enginuity Online Training
Operated by: First Leg Consulting Pty Ltd
ABN: 14 631 181 809
Email: TBA
Telephone: +61 459 081 671
Postal address: TBA
Website: EnginuityTraining.com.au