OnsiteTrainingAustralia

Privacy Policy

Last reviewed 26 September 2026

This policy covers the information this website collects, why we collect it, who we share it with and what you can do about it. It applies to onsitetraining.com.au. Records held for nationally recognised training are also governed by the standards for Registered Training Organisations — see RTO documents.

Onsite Training Australia, Queensland, as part of the Emerging Leadership Institute Pty Ltd, ABN 89 650 661 895.

What we collect

Three different things, collected in three different ways.

What you typeOn an enquiry form: your name, email address, phone number, company, and whatever you write in the message. On a booking: the same for each attendee, plus the Unique Student Identifier required for nationally recognised training.
How you found usIf you arrive from a campaign link or an ad, the site stores the campaign tags on that link (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the Google click id if there is one, the page you landed on, and the site that referred you. It keeps the first time you arrived and the most recent, for 90 days.
How you use the sitePages viewed, courses looked at, how far down a page you read, searches run on the site, and which form fields you started or finished. These attach to a random identifier for your browser, not to your name, unless and until you submit a form.

We do not collect payment card details. Card payments are handled entirely by Stripe on their own systems. We are told that a payment succeeded and see the last few digits, never the full number.

Cookies and similar storage

When you first arrive you are asked to accept or decline. Declining is a real choice and costs you nothing here: everything on the site still works.

ota_consentRecords the choice you made and the version of this wording you were shown. Kept for one year. Set whichever way you answer.
ota_vid, ota_sidA random identifier for your browser and for the current visit, so page counts are not double-counted. Two years and 30 minutes. Set whichever way you answer, and carrying no name or address.
ota_attrHow you found us, as described above. Kept for 90 days, in a cookie and in your browser's local storage.
Advertising and analyticsSet only after you accept: Google Analytics, Google Ads, Meta and LinkedIn. These are the vendors' own cookies and are governed by their own policies.

If you decline, no vendor tag is loaded at all. The scripts are never requested, rather than requested and then told not to track — a tag that loads has already sent your IP address and the page you were on. The only thing we then record is an anonymous page count.

You can clear all of these in your browser settings at any time. Clearing ota_consent makes the banner ask again.

Why we collect it

  • To answer your enquiry and send you the course information you asked for.
  • To enrol you, issue your certificate, and meet our record-keeping obligations as a training provider.
  • To work out which courses to run, where, and how often. That is mostly what the campaign tags are for.
  • To measure whether our advertising works, so we are not paying for ads that bring nobody.

We do not sell your information, and we do not share it with anyone for their own marketing.

Who we share it with

Service providers who process it on our behalf, and only for the purposes above:

ZohoOur CRM. Enquiries and bookings are stored here, in Zoho's Australian region.
StripeCard payments and refunds.
XeroInvoicing and accounting for bookings.
GoogleAnalytics, Google Ads conversion measurement, and Tag Manager. Loaded only after you accept.
Meta, LinkedInAdvertising measurement. Loaded only after you accept.
Partner RTOsWhere a course is delivered under another Registered Training Organisation's registration, your enrolment details go to that RTO so it can issue your qualification. The RTO delivering each course is named on the course page.

Some of these providers store or process data outside Australia. We use Australian regions where the provider offers one.

How long we keep it

Enquiries and customer records are kept while you are a customer, and afterwards for as long as we are required to keep them. Records relating to nationally recognised training are kept for the period the standards for Registered Training Organisations require. Website behaviour data is kept for two years, and campaign attribution expires after 90 days.

Your choices and your rights

Under the Privacy Act 1988 (Cth) you can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. You can ask us to stop sending you marketing at any time, and every marketing email carries an unsubscribe link.

Ask by emailing admin@onsitetraining.com.au or calling 0408 869 869. We will respond within 30 days.

If you are not satisfied with how we have handled your information, complain to us first, and then to the Office of the Australian Information Commissioner at oaic.gov.au.

Keeping it safe

The site runs over HTTPS. Access to the CRM and the payment systems is limited to staff who need it. No system is perfect, and if a breach occurs that is likely to cause you serious harm we will tell you, as the notifiable data breaches scheme requires.

Changes to this policy

If we change what we collect or who we share it with, we update this page and move the review date at the top. A material change to the consent wording re-prompts you for a decision rather than assuming the old one still stands.

Questions about this policy? Email admin@onsitetraining.com.au or send us a message.