Training Worx Australia · RTO 52508 · ABN 59 112 532 493

Privacy

This portal is run by Training Worx Australia for its BHP WAIO courses. This notice explains what the portal collects, why, who holds it and how we look after it, in line with the Australian Privacy Principles. It sits alongside Training Worx's general privacy policy.

What we collect (and only this)

• Your name and email address, so you can sign in.
• Your course, cohort and dates.
• Your written answers to the course activities and questions.
• The workplace documents you choose to upload as evidence.
• Your trainer's marking decisions, feedback and sign-offs, and your Competency Judgement Record (CJR), with the assessor's signature.
• A record of who did what and when (for example, who marked a question), so assessment records can be trusted.
• The last page of your course you opened, and when, so your trainer can see where you're up to and help you.

We don't collect anything else. The portal uses no tracking, analytics or advertising cookies; the only cookie keeps you signed in. We don't sell your information or use it for marketing.

Why we use it

To deliver and assess your training, to keep the assessment records a registered training organisation must keep, and to record your results for the nationally recognised units in our student management system (aXcelerate) so your Statement of Attainment can be issued. We report to government only where the law requires it (for example, national VET data reporting).

Who can see it

You, your Training Worx trainer and assessor, and Training Worx administration staff. Trainers see only the learners in their own cohorts. Your completed assessment records are filed in Training Worx's student records.

Who holds it for us, and where

We use these services to run the portal. Each holds only what it needs:

• Supabase: the portal's database and file storage (your answers, uploads and marking), in Sydney, Australia.
• Vercel: hosts the portal's website. Vercel is a United States company.
• Resend: sends the portal's emails (sign-in links, and notices such as work returned for fixes). It receives your name, email address and the email's text, and is based in the United States.
• Microsoft 365 (SharePoint): Training Worx's student records, where completed workbooks, evidence, marking tools and CJRs are filed.
• GitHub: keeps the portal's nightly backups, in the United States. Backups are encrypted with a key only Training Worx holds, so GitHub can't read them.
• aXcelerate: our student management system, for your enrolment and results.

Where information goes overseas (Vercel, Resend, GitHub), it is to providers that protect it under their own security and privacy commitments, and only for running this portal.

How long we keep it

• Completed assessment records (your work, evidence, marking tools and CJR) are kept for 7 years in Training Worx's student records. That's longer than the 2-year minimum the national Standards for RTOs require.
• Records of results and credentials issued are kept for 30 years, as the national rules require.
• Backups are kept for 30 days (evidence files 4 weeks), then deleted.
• At present the portal keeps its own copy of your work for the life of your course record. We plan to remove portal copies once records are filed.

How we protect it

• Sign-in is by invitation only, with a one-time email link (no passwords to steal).
• Each learner can see only their own work; the database itself enforces this, not just the website.
• Files are kept in private storage, and links to view them expire after a few minutes.
• Everything travels over encrypted connections, and backups are encrypted.
• Signed assessment records are locked so they can't be changed afterwards, and changes are logged.

Your part

Upload only what an activity asks for, and remove anything personal that isn't needed (for example, other people's details).Before you upload BHP records, also remove commercially sensitive details and follow your site's rules on sharing BHP information.

Seeing or correcting your information

You can ask to see the information we hold about you, or to correct it, at any time. We'll check it's you before we do, and respond within a reasonable time.

Questions and complaints

Contact Training Worx at info@trainingworx.com.au or 0424 323 989. Privacy complaints are handled under our complaints and appeals procedure. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Last updated 2 November 2026.