Privacy Policy
Last updated July 2026
This privacy policy applies specifically to the Education Services Australia Limited's (ABN 18 0073 424 21) service, English Language Learning for Indigenous Children (the ellic.edu.au website, ELLIC program and the ELLIC mobile applications) (ESA, we, us or our).
In this privacy policy, ‘you’ or ‘your’ refers to the individual reading this privacy policy or those people whose personal information ESA collects, uses and discloses in accordance with this privacy policy.
This privacy policy explains how ESA collects and uses your personal information for ELLIC, and the rights and options you have in this respect. In doing so, ESA complies with its obligations to protect the privacy of personal information under the Australian Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs).
By using this website or interacting with ESA, you agree to our privacy policy and any amendments made from time to time.
ESA delivers a number of products and services in relation to education systems and sectors (related entities). This privacy policy applies to the use of your personal information by ELLIC. Those related entities may also have their own privacy policies, which set out additional detail or differences in their privacy practices.
Refer to the general privacy policy for ESA.
This website is intended for use by educators, students and the broader community. We do not knowingly collect personal information from children except where it is provided voluntarily or through educational use of the website. Where information is collected in a school context, we expect that schools and educators obtain any necessary consents.
1. What is personal information?
‘Personal information’ is information or an opinion, whether true or not, and whether recorded in a material form or not, about an identified individual or an individual who is reasonably identifiable.
2. What personal information does ESA collect
The type of personal information ESA collects depends on our interaction with you. Where applicable, we will collect the following information:
a. From education professionals and institutions that enrol in the ELLIC program, we will ordinarily collect:
-
- your contact information, such as your name, job title, address, business address, telephone number, mobile phone number, fax number, and personal or business email address;
- your username and password for the ELLIC website, where you have one;
- your school contact details;
- the details of your visits to our premises; and
- your membership of a professional or trade association or union.
b. From students that use the ELLIC mobile applications we will ordinarily collect:
-
- information in relation to the student’s learning ability; and
- audio and/or video recordings of students if students choose to participate in this option as part of their intended educational functionality (refer to paragraph 13).
c. From attendees of ELLIC-related events, we will ordinarily collect:
-
- your contact information, such as your name, address, phone number and email address;
- details of your visit to our event / conference;
- photographs of you at the event (where we have notified you of this and you have provided consent); and
- details of your dietary preferences.
3. How does ESA collect your personal information?
We collect personal information about you directly from you or from your authorised representative. The ways in which we collect personal information from you or your authorised representative are when you or your authorised representative:
- browse, make an enquiry or otherwise interact with the ELLIC;
- apply for the ELLC program via the ELLIC website;
- contact ESA by telephone, email, social media, post or in person;
- provide feedback to us;
- visit a premises from which we operate; or
- attend an event we hold.
4. Third-party personal information provided to us
If you provide personal information to us about someone else, you must ensure that you are entitled to disclose that personal information to us and that, without us taking any further steps, we may collect, use and disclose that personal information as described in this privacy policy. In particular, you must ensure that the individual concerned is aware of and acknowledges this privacy policy and, where relevant, our collection statement.
5. Remaining anonymous or using a pseudonym
Where it is not impractical or unlawful, you may interact with ESA without identifying yourself or by using a pseudonym. However, in most circumstances ESA will not be able to provide you with access to ELLIC if you do not provide us with certain personal information, such as your email address and the location of your school.
6. How does ESA use your personal information?
ESA will only use your personal information for the stated purpose for which it was provided or otherwise in accordance with the law.
We generally use the personal information we collect about you for ELLIC’s functions and activities, and to market ELLIC’s products and services.
We may use your personal information for the following purposes:
- to identify and communicate with you;
- to provide services or things you may have requested, including to provide you with professional development activities;
- to provide you with a login and access to your account with us;
- to provide you with information about customer surveys, marketing campaigns, market analysis, contests or other promotional activities or events;
- to facilitate and support the functions and activities of our internal business units and related entities;
- to investigate, review and mitigate risks associated with, and inform you of a data or other security breach involving your personal information;
- compliance with our legal obligations and regulatory obligations to protect the security of and manage access to ESA's premises, IT and communication systems, online platforms, websites and other systems;
- to collect information about your preferences to personalise and foster the quality of our communication and interaction with you (for example, by way of newsletter tracking or website analytics); and
- for any purpose related and/or ancillary to any of the above or any other purpose for which your personal information was provided to us.
If ESA holds personal information that was collected for a particular purpose (primary purpose), ESA will not use or disclose it for another purpose (secondary purpose) unless:
- you consent to that secondary use or disclosure;
- you would reasonably expect that ESA would use or disclose this information for the secondary purpose;
- it is required or authorised by law;
- a permitted general situation exists (for example, to lessen or prevent a serious threat to the life, health or safety of any individual, or to public health or safety); or
- it is reasonably necessary for enforcement-related activities conducted by, or on behalf of, an enforcement body.
We will not use your personal information for taking any automated decisions affecting you or creating profiles other than described above.
7. Disclosure of your personal information
We may disclose, or provide access to, your personal information to third parties in connection with the purposes described above, including to:
- your nominated representatives;
- ESA's related entities, internal divisions, business units or departments;
- other organisations or individuals who assist us in providing products and services to you, including sub-processors;
- professional service providers and advisors who perform functions on our behalf, such as lawyers;
- representatives, agents or contractors who are appointed by us in the ordinary operation of our business to assist us in providing goods or services or administering our business (such as for data storage or processing, printing, mailing, marketing, planning and product or service development); and
- Government, regulatory authorities and other organisations as required or authorised by law.
We may also disclose your personal information to the website host or software-application providers in certain limited circumstances; for example, when the website experiences a technical problem or to ensure that it operates in an effective and secure manner.
8. Overseas disclosures
ELLIC will not transfer or disclose your personal information to overseas recipients. However, if ELLIC needs to transfer or disclose your personal information to overseas service providers we will notify you, and ESA will retain control over your personal information and will use appropriate safeguards as required by applicable law to ensure the integrity and security of your personal information when engaging such service providers.
9. Other uses and disclosures
We may also collect, use and disclose your personal information for other purposes not listed in this privacy policy. If we do so, we will make it known to you at the time we collect or use your personal information.
10. Accessing, correcting and deleting personal information
ESA endeavours to ensure that the personal information it holds is accurate, up-to-date, complete and relevant.
If you want to know what, if any, personal information ESA holds about you, or wish to correct any personal information ESA may hold about you, you may access this information by contacting ESA using the contact details specified in paragraph 15.
ESA may allow access to make your requested changes to or delete your personal information unless otherwise required or permitted by law. ESA will notify you of the basis for any denial of access to your personal information.
We retain personal information only for as long as it is reasonably necessary to fulfil the purposes for which it was collected, or as required by law.
When personal information is no longer required, we take reasonable steps to destroy or de-identify it in accordance with our legal obligations.
11. Security of your personal information
ESA takes reasonable steps to protect the personal information that it holds against misuse, interference, loss, unauthorised access, modification or disclosure by utilising up-to-date electronic and physical security controls that comply with relevant industry standards and guidelines.
12. How we deal with complaints about privacy
If you feel that we have not respected your privacy or that we have conducted ourselves inconsistently with this privacy policy, please contact our Privacy Officer in any of the ways specified in paragraph 15.
To assist us in responding to your complaint promptly, please provide all relevant details of your query or complaint in writing.
We will investigate your queries and privacy complaints within a reasonable period of time, depending on the complexity of the complaint. We will notify you of the outcome of our investigation.
13. Information collected via the website or mobile application
ESA collects usage statistics or patterns obtained from tracking the level and range of interest on the ELLIC website.
For ELLIC mobile applications, education staff implementing the ELLIC program in their schools or institutions are able to track a student’s time spent on the ELLIC mobile application and their ELLIC mobile application use.
Click Stream Data
When you use the ELLIC website, ESA collects the following information relating to your use of the website:
- your server address;
- your top-level domain name (for example: .com., .gov, .au, .edu, .net);
- the time and date of your visit to the website;
- the pages and documents you have accessed or viewed;
- the number of video plays and percentage of video played; and
- the type of browser you are using (for example Google Chrome, Mozilla Firefox, Microsoft Edge).
This information may be used for purposes including statistical, reporting and website administration, maintenance and improvement purposes.
Cookies
The ELLIC website may use 'cookies' from time to time. Cookies are small text files that are transferred to a user's computer hard drive by a website for the purpose of storing information about a user's identity, browser type or website visiting patterns. Cookies may be used on the ELLIC website to monitor web traffic, for example, the time of visit, pages visited and some system information about the type of computer being used. We use this information to enhance the content and services offered on the ELLIC website.
Cookies are sometimes also used to collect information about what pages you visit and the type of software you are using. If you access the ELLIC website or click through to the ELLIC website from a link in an email we send you, a cookie may be downloaded onto your computer's hard drive.
You may refuse the use of cookies by selecting the appropriate settings on your browser. However, if you do this you may not be able to use the full functionality of the ELLIC website.
Google Analytics
We use Google Analytics to help analyse how you use the ELLIC website. Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users’ computers. The information generated is used to create reports about the use of the ELLIC website. Google will store this information.
If you do not want your visit data reported by Google Analytics, you can install the Google Analytics opt-out browser add-on. For more details on installing and uninstalling the add-on, please visit the Google Analytics opt-out page.
Viostream
We use Viostream, a video platform service, to store and stream video. Viostream uses cookies to help the website analyse how users use the videos on the website. The information collected by Viostream relates to the use of the videos on the website and does not identify you personally. Viostream collects information regarding what videos are being watched, where the videos are being watched, what device is used to watch videos and how much of each video is watched. The information collected by Viostream is held in secure data centres in Australia and is only disclosed to ESA.
When using the ELLA website, you consent to the processing of data about you by Google Inc. and Viostream, in the manner and for the purposes set out above.
Mobile application recordings
Our mobile applications may collect audio and/or video recordings of students if they choose, as part of their intended educational functionality. These recordings are temporarily stored on secure servers located in Australia for a maximum duration of six (6) hours. After this period, all recordings are permanently deleted and are no longer accessible by any party, including our organisation.
The temporary storage is implemented solely to facilitate processing and delivery of educational services, and no recordings are retained beyond the specified timeframe. We do not use these recordings for analytics, marketing, or any other secondary purpose.
By using our mobile applications, you acknowledge and consent to this temporary data-handling process. If you have any concerns or require further information, please contact us on the details set out in paragraph 15.
14. Marketing
You consent to us using your personal information for sending you information, including promotional material and surveys about us or our products and services, as well as the products and services of our related entities and third parties, now and in the future. You also consent to us sending you such information by means of direct mail or email.
If you do not want to receive marketing information from us, you can unsubscribe in any of the following ways:
- clicking on the 'Unsubscribe' or ‘Subscription preferences’ link in a direct marketing email that you have received from us; or
- contacting us using the contact details specified in paragraph 15.
15. Contact us
You can contact ESA by:
- telephone: +61 3 9207 9600;
- post: Post Office Box 177, Carlton South, Victoria, Australia 3053; or
- email: [email protected]
16. Changes to this privacy policy
ESA may make changes to this privacy policy from time to time to take account of new laws and technology, or changes to ESA’s operation and practices. Therefore, ESA recommends that you regularly check this privacy policy. You may obtain a paper copy of this privacy policy by contacting ESA via the contact details specified in paragraph 15.
17. Third party sub processors
ESA uses the following third-party services which process data, including personal information.
ESA requires third party service providers to have measures in place to ensure the security and protection of data including restricting any cross border transfers of information.
We host all information in Australia where possible. Where the service providers we work with cannot host in Australia, we preference legal jurisdictions with strong privacy laws such as the USA.
| Name and category | Privacy and security policy link | The types of data disclosed to each sub-processor | Location of processing and storage |
|
Google Analytics |
Page views, session duration, on-site events, device and browser type; approximate location (city/country level, derived from IP address), referral source, randomly generated Client ID. Overall website traffic and user behaviour. | Australia, US | |
| Govzone Hosting provider |
https://www.esa.edu.au/privacy | Hosting data. | Australia |
| Azure DevOps End-to-end software development lifecycle (ALM) platform |
https://privacy.microsoft.com/en-us/privacystatement https://learn.microsoft.com/en-us/azure/devops/organizations/security/data-protection |
Source code repository and Azure Devops Tickets | Australia |
| Vision6 Email management platform |
https://www.vision6.com.au/privacy-policy/ https://support.vision6.com.au/hc/en-us/articles/360042653411-Guide-for-IT-Security-Administrators |
First name, email, contact number, role | Australia |
| jQuery CDN (OpenJS Foundation, served via Fastly) |
Visitor IP address, user-agent Simplifies client side JavaScript development and storing within CDN's to increase load times. |
USA | |
| Font Awesome (Fonticons, Inc.) Web font delivery |
https://fontawesome.com/privacy |
Visitor IP address and user-agent. |
USA |
| Google Fonts (Google LLC) Web font delivery |
Visitor IP address and user-agent. | USA | |
| Viostream (Viostream Pty Ltd) Video hosting and streaming. |
https://www.viostream.com/privacy-policy https://www.viostream.com/product/video-security |
Viewer IP address and playback/session telemetry. | Australia |
| Power automate (Microsoft Power Platform) SaaS workflow automation / integration platform |
https://privacy.microsoft.com/en-us/privacystatement https://learn.microsoft.com/en-us/power-platform/admin/wp-compliance-data-privacy |
Application information, primary and secondary contact details, first name, last name, phone, email address, role and school information. |
Australia |