Enquire Now

Privacy Policy

Last updated: 24 June 2026

This Privacy Policy explains how H&H ACADEMY PTY LTD (a proprietary company registered in New South Wales, Australia) ("H&H Academy", "we", "us", "our") collects, uses, discloses, stores, and protects personal information. We handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and applicable state and territory privacy laws.

1. Who we are

H&H Academy is an English language education provider established in 2021, offering PTE Coaching, IELTS Preparation, OET Training, and General English programs from Level 2, 22-28 Edgeworth David Avenue, Hornsby NSW 2077, Australia. Our registered contact details are:

For privacy-related enquiries, access requests, or complaints, contact us using the details above with the subject line "Privacy Enquiry". We aim to acknowledge privacy correspondence within seven business days.

2. Scope of this policy

This policy applies to personal information we collect through our website, enquiry and enrolment forms, consultations, classes (in person and online), the Practice Portal, email and telephone communications, and any other channel where we identify ourselves as H&H Academy. It does not cover third-party websites linked from our site, which are governed by their own privacy policies.

If you interact with H&H Academy through an education agent or employer sponsor, that third party may also hold personal information about you under separate privacy arrangements. We encourage you to review their policies in addition to this document.

3. Types of personal information we collect

The personal information we collect depends on your relationship with us. It may include:

Where lawful and reasonably necessary, we may collect sensitive information — such as health information affecting your ability to attend classes — only with your explicit consent or as otherwise permitted under the Privacy Act.

4. How we collect personal information

We collect personal information:

If you do not provide information we reasonably require to deliver our services or meet legal obligations, we may be unable to enrol you, grant portal access, or continue providing instruction.

5. Purposes of collection, use, and disclosure

We use and disclose personal information for purposes including:

We may disclose personal information to:

We do not sell personal information. We do not use learner data for unrelated direct marketing without your consent, and you may opt out of non-essential marketing communications at any time by emailing info@hnhacademy.com.au.

6. Overseas disclosure

Some of our service providers may store or process data outside Australia (for example, cloud infrastructure or video conferencing platforms). Where we disclose personal information overseas, we take reasonable steps to ensure recipients comply with APP 8 requirements — either because they are subject to comparable privacy laws, or through contractual protections — unless an exception under the Privacy Act applies.

Before engaging an overseas provider, we assess whether the recipient will handle personal information in a manner consistent with the APPs. Where practicable, we prefer Australian-based hosting for core enrolment and assessment records.

7. Data security and retention

We implement reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These measures include access controls, secure authentication for the Practice Portal, and staff training on confidentiality.

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, and reporting requirements. When information is no longer required, we take reasonable steps to destroy or de-identify it.

8. Data retention periods

H&H Academy retains personal information only for as long as necessary to fulfil the purposes described in this policy. Enrolment records, assessment results, attendance logs, and fee documentation are typically kept for seven years after your last active enrolment to meet Australian taxation, education, and consumer law obligations. Practice Portal activity logs and technical access records are generally retained for up to twenty-four months unless a security investigation requires longer storage.

Marketing enquiries and general correspondence are usually retained for three years from last contact. Where you request deletion and we are not legally required to retain the information, we will take reasonable steps to destroy or de-identify it within thirty days of completing our assessment. Anonymised or aggregated data used to improve H&H Academy programs may be kept indefinitely because it no longer identifies you.

9. Access, correction, and deletion

Under the Privacy Act, you may request access to personal information we hold about you and request correction if it is inaccurate, out of date, incomplete, irrelevant, or misleading. Requests should be made in writing to info@hnhacademy.com.au. We will respond within a reasonable period, generally within 30 days.

We may refuse access in limited circumstances permitted by law (for example, where disclosure would unreasonably affect another person's privacy). If we refuse a request, we will provide reasons and information about complaint options.

Deletion requests are assessed against our legal retention obligations. We cannot delete enrolment or financial records that must be kept under taxation or consumer law, but we can restrict use of information no longer needed for active administration.

10. Children and young people

Our programs are primarily designed for adult learners. Where we enrol individuals under 18 years of age, we require appropriate parental or guardian consent and handle their information with additional care consistent with the Privacy Act and our duty of care as an education provider.

Parents and guardians may request access to a minor learner's enrolment records where they are the authorised contact on file, subject to verification of identity and any limitations under applicable law.

11. Notifiable Data Breaches

If we become aware of a data breach that is likely to result in serious harm to affected individuals, we will assess the breach and, where required under the Privacy Act, notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as soon as practicable. Our internal breach response procedure includes containment, assessment, notification, and review steps.

12. Direct marketing and communications

We may send administrative communications about your enrolment, schedule changes, and policy updates without separate consent, as these are necessary for service delivery. Promotional communications about new programs or events are sent only where you have opted in or where an existing enrolment relationship makes such contact reasonably expected, and you may opt out at any time.

13. Complaints

If you believe we have breached the APPs or mishandled your personal information, contact us first at info@hnhacademy.com.au with sufficient detail for us to investigate. We aim to acknowledge complaints within 7 business days and resolve them within 30 days where possible.

If you are not satisfied with our response, you may lodge a complaint with the OAIC:

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this page will be revised accordingly. Material changes will be communicated via our website or direct notice where appropriate. Continued use of our services after an update constitutes acceptance of the revised policy, to the extent permitted by law.

15. Related documents

Please also review our Cookie Policy and Terms & Conditions, which contain additional information about website use and enrolment.