Introduction

At IDP* we understand that your privacy is important to you. We are committed to meeting your expectations and will comply with all applicable privacy and data protection legislation in relation to your personal data, which may include your sensitive information.

This Privacy Notice explains how we collect, use, and share your information when you engage IDP about any of our Student Essential Services.

Who we are

IDP is a global organisation that assists individuals to study overseas and provides English language testing around the world. This requires us to collect personal information from you. “We”, “us” and “our” refers to the IDP Group of companies, including IELTS Australia and IDP Connect Limited. Our IDP Group Privacy Notice can be found here: IDP Privacy policy | IDP Education

Information We Collect

IDP offers services from third parties to help support you in your studies overseas and we call these Student Essentials. These services may include Overseas Student Health Cover (OSHC), accommodation arrangements, a 24/7 emergency helpline, referral to guardianship services, money transfer and banking services, visa application services and career skills training.

We do not collect personal and sensitive information unless the information is reasonably necessary for our business functions or activities. We will obtain your consent before collecting any sensitive information.

When you deal with us, you will need to identify yourself in order for us to provide our services to you, as such we do not accept the use of pseudonyms.

Our Legal Basis for Processing Your Personal Data

We will only process personal data where we have a lawful basis to do so. The basis for processing your personal data varies depending on the activity we collected it for. In some occurrences, we may have more than one lawful basis for processing.

Consent: IDP process personal data where you have provided your consent to do so. For example, where your personal data is used for Marketing purposes. You may withdraw consent at any time through the direct communications we send to you, or by contacting privacyofficer@idp.com

Contract: IDP processes personal data which is necessary for the performance of a contract for your engagement with IDPs services. This includes, but not limited to, referral to partner service providers, responding to your queries, and administration.

Compliance with a Legal Obligation: In certain situations, we may need to process your personal data to comply with legal or regulatory requirements, such as tax regulations, or to respond to lawful requests from government authorities.

Legitimate Interests pursued by IDP: We may process your personal data when it's necessary for our legitimate interests, provided those interests are not overridden by your rights and interests. This could include improving our services or ensuring the security of our systems.

The below illustrates what personal data we collect dependent on the Student Essentials Service or Product you engage with us about, and the legal basis for its collection.

Why Do We Collect Your Information?

Collection of your personal information allows us to:

• provide the health insurance provider nominated by you with all relevant information for your Overseas Student Health Cover;

• facilitate your accommodation arrangements with third party providers

• contact the relevant organisations, authorities or other third parties in relation to your overseas guardianship application

• respond to your query and/or direct your query when you contact the IDP 24/7 Helpline

• contact the Department of Home Affairs (DHA) with all relevant information required for visa renewal or parent visa application

• contact Australian institutions or other organisations on your behalf to facilitate visits, career skills training or internship placements

• to communicate with you for marketing purposes. We may use your contact information to send you updates, newsletters, and promotional materials (we will ensure you have the ability to opt out of future such communications)

• arrange or provide other products and services to you

• to refer you to third parties. With your consent, we will share your information with third-party partner providers so they can provide their service or provide additional services or offers to you.

Do we Share Your Information?

We ensure that your personal data shall be disclosed only in a manner that respects your privacy and in compliance with the requirements of applicable privacy regulations. We may share your personal data to the following:

A. Our Third-Party Partners

We share your personal data with our third-party partners based on your consent or to complete any transaction or provide any product you have requested or authorised. We will use or disclose your information for another purpose only if you have consented, or if you would reasonably expect us to do so or as required by law.

We will refer you to our third-party partners in one of two ways;

• We provide you directly a link or contact information for the third party so you can sign up for their services or products.

• Through an integration on our website, directly share your data collected by IDP with the third-party partner for the service or product/s you are interested in.

B. Government or Regulatory Authorities

We may also disclose your personal data if required by law or to protect our rights and safety.

How Long Do We Retain Your Personal Data?

IDP’s vision is to build a global community of connected students from classroom to career. This means we would like to stay in touch for as long as you would like to hear from us, but we will only retain your information as long as is necessary for the purpose it was given to us.

As a guide, we will keep your personal information for up to 7 years after commencing your studies or your last activity with us so that we can continue to support you through your journey, unless required to retain it longer for legal or regulatory purposes.

Do We Transfer Your Personal Data Internationally?

Most of the student essential service partners we refer you to are located overseas (in the location in which you intend to study). As such, the location of these overseas recipients would depend on the specific service you engage.

Some IDP IT systems and data are hosted on servers in countries outside Australia or the country in which you have engaged us, and we may send your information to one of our global servers as part of our business.

IDP may hold or transfer the data we collect in or to the following countries (in addition to your home country):

• Australia

• UK

• India

• Singapore

• Hong Kong

• UAE

This information is stored and accessed only as required to provide our services to you. Where we transfer data to offshore servers, the data is subject to use restrictions and safeguards against unauthorised access.

The information disclosed to overseas recipients consists of any information you have given us to provide the relevant services. By accepting services from us, you consent to us providing your personal information to the relevant overseas recipient as mentioned above. IDP takes appropriate steps to ensure there are adequate safeguards in place for the transfer of your personal information.

What are Your Rights?

• Access and Information: You have the right to request access to the personal information we hold about you.

  • You have the right to access and correct your personal information. Please contact us if you need assistance.

• Correction: You can request that we correct any inaccuracies in your personal information.

• Deletion: You have the right to request the deletion of your personal information, subject to certain legal obligations.

• Objection: You can object to the processing of your personal information for certain purposes, such as direct marketing.

  • Opt-Out: You can opt-out of receiving promotional communications from us at any time by following the instructions in those communications or contacting IDP’s privacy officer below.

• Data Portability: You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format.

• Withdraw Consent: If we are processing your personal information based on your consent, you have the right to withdraw that consent at any time.

How Do We Secure Your Personal Data?

We take reasonable technical and organisational measures to protect the personal information we hold against interference, loss, unauthorised access, use, modification or disclosure, and other misuse.

The steps we take include:

• maintenance of computer technology, people and process-based security measures for example firewalls, network security configurations, encryption, use of passwords and other appropriate measures where information is held in electronic form;

• regular updates to security systems and configurations to protect our systems from malicious activity;

• restriction of access to data to only those staff that need access to carry out our business activities;

• training and ensuring that all our employees are required, as a condition of employment, to treat personal information held by us as confidential.

How Will You Know if this Privacy Notice Changes?

We may update this Privacy Notice from time to time. This version was published in June 2025.We will notify you of any significant changes by posting the new notice on our website or through other communication channels.

If you have any questions or concerns about this Privacy Notice, please contact our Privacy Officer for further information:

How Can You Contact Us?

You may reach IDP through its Privacy Officer via email at privacyofficer@idp.com

Privacy Officer

IDP Education Limited

Melbourne Quarter

Level 10, 697 Collins St,

Docklands, Victoria 3008, AUSTRALIA

We will endeavour to respond to you within a reasonable time.

Can You File a Complaint?

If you believe your rights under the applicable privacy law have been violated, you have the right to lodge a complaint with the applicable supervisory authority.