Last revised: 6 May 2026

Privacy Statement

BPP Institute (“BPP Institute”, “we”, “our” or “us”) recognises the importance of privacy. The purpose of this Privacy Statement is to inform you about our privacy practices, including how we collect, use, and disclose your personal information.

BPP Institute is registered in Melbourne, Australia. It operates as a wholly separate business but is part of the Lyceum Education Group (UK) via BPP Holdings Limited, you can access this privacy notice here. We may share personal data within our Group companies in order to provide our goods and services to you and for the other purposes outlined in this notice.

This Privacy Statement applies to the collection, use and disclosure of personal information that we may collect from you or that you may otherwise provide to us when you:

• register for, purchase, or otherwise use any BPP Institute services or products, including any courses, programmes or study materials (in any medium);
• access and use our website or mobile platforms (collectively, “Website”);
• engage with any of our social media channels or interact with our advertising on third-party websites; and
• otherwise engage with us, including by attending our events or communicating with us via phone, email, text, and other forms of electronic communications.

What This Privacy Statement Covers

This Privacy Statement is provided in a layered format so, if you wish, you can select the specific areas of the Policy you are interested in, as set out below.

• Personal Information We Collect
• How We Use Your Personal Information
• How your personal data is collected
• How We Disclose Your Personal Information
• Your Consent
• Our Use of Cookies
• Opting Out of Marketing Communications
• Retention, Storage, and International Transfer of Personal Information
• Information Security
• Accessing and Updating Your Personal Information
• Third-Party Websites and Services
• International transfers
• How to Contact Us
• Changes to this Privacy Statement

Personal Information We Collect

“Personal information” means any information that can be used to identify an individual directly (on its own) or indirectly (in combination with other information) pursuant to Australian privacy laws.

Personal information does not generally include any business contact information that is solely used to communicate with you in relation to your employment, business or profession, such as your name, position name or title, work address, work telephone number, work fax number or work e-mail address.

We may collect, use, and disclose different types of personal information, depending on our relationship with you. Generally, we collect the following types of personal information (not all of which may apply to you): 

• Audio / Visual Information: including recordings from closed circuit televisions systems which are in place at some of our premises for security purposes; telephone recordings (for quality monitoring and training purposes) where you call any of our student facing or sales teams (although not all calls to BPP Institute are recorded); photographs of you for use on ID cards or to be used on registers/your online accounts so BPP Institute staff (such as tutors or exam invigilators) can identify you; audio/video recordings of meetings with Skills Coaches or other performance/progress calls on courses  or programmes (although not all of these types of calls are recorded); recordings (including video, audio and text) where any lecture, seminar, webinar or other interactive teaching session is recorded; video recordings from recorded exams/assessments (including mock exams/assessments); and any video recordings from any recorded interviews (such as credibility interviews and English language interviews for visa compliance purposes).  Please see Online Learning and Assessment for further information.
• Contact Information: including billing address, delivery address, postal address, email address and telephone numbers.
• Demographic Information: including information about your race, ethnicity, gender identity, sexual orientation, religious beliefs, and nationality and immigration status. This information is collected voluntarily for equality and diversity monitoring purposes.
• Eligibility Information: including education/academic history, records of qualifications and/or training, personal statements and references and/or (where applicable) documents confirming your right to study in country. For international students this may also include copies of bank statements or other financial information to ensure visa requirements are met such as the student’s sponsor and their financial information.
• Employment Information: (this is relevant where your place on a course or programme is sponsored by your employer/future employer), including name of employer, job title, line manager name and contact details, work contact details (email address, telephone number and postal address), employment start and end dates (and for apprentices may include hours of work and job description).
• Financial Information: including bank account details, billing information, payment card details and information from any student loan organisation.
• Identity Information: including first name, maiden name, last name, student reference number, usernames for BPP Institute’s website and other online learning environments (including Adobe Connect or Microsoft Teams), BPP Institute IT accounts (including BPP Institute emails), or similar identifiers (including any student registration number assigned to you by an external body who shares information with us), marital status, title, date of birth and gender. It may also include copies of identification documents (such as a passport, driving licence or national identity card) which are used to confirm your identity.
• Information about any disabilities or learning needs: which is collected so that any reasonable adjustments can be made to accommodate students with disabilities or learning needs (for example large print learning materials or exam papers) and also to ensure that any learning needs are supported (for example extra time in exams). This information is voluntary, but BPP Institute will not be able to provide you with learning support/reasonable adjustments if you do not provide this information. This information is also collected for equality and diversity monitoring purposes.
• Marketing and Communications Information: including your preferences in receiving marketing from us and your communication preferences.
• Medical Information: which may be collected where a medical issue is having an impact on your studies with BPP Institute (for example, you may have a prolonged period of absence; or you make an application for a Suspension of Studies where an illness is preventing you from studying; or where a medical issue has affected your performance in an exam, you may make an application for extenuating circumstances) or if an incident occurs whilst on campus and such information is required for health and safety reporting. It may also include dietary requirements where you are attending a catered BPP Institute event (this information may be provided to BPP Institute via third parties such as Eventbrite).
• Emergency Contact Information: including the name and contact information of a friend or relative to be used in the event of an emergency involving you. This will also include (for international students) the details of any friend or relative with whom you are staying, as declared on any visa application. It may also include details of relatives you have authorised to communicate with BPP Institute on your behalf or attend BPP Institute events with you, such as graduation ceremonies.
• Profile Information: including your usernames and passwords (for BPP Institute platforms), purchases or orders made by you, your interests, preferences, feedback, reviews, survey responses and enquiries submitted to BPP Institute.
• Recruitment Information: including any information you have provided to us (or through a third party such as Employment Hero, Rippling, ELMO, LinkedIn or a recruitment agency) in your curriculum vitae, any covering letter, any application form (including name, title, address, telephone number, personal email address, date of birth, gender, employment history, qualifications and reasons for wanting to apply for the relevant position) and any information you provide to us during an interview.
• Student Information: including the course or programme you are studying with BPP Institute, your years of study, records of achievements on the course or programme (including exam, assessment and mock results), exam scripts, exam transcripts, attendance and progress information, feedback from lecturers or personal tutors (including student references), emails sent by you to BPP Institute, emails sent/ received by you to or from your BPP Institute email address or messages posted on any BPP forums or message boards (including on Moodle), information relating to your use of BPP Institute’s library and library resources (including materials checked out and overdue items), information relating to your involvement in BPP Institute’s student association (including membership of student groups or attendance of student events), information relating to your involvement in BPP Institute’s mentoring or entrepreneurship schemes, information relating to your involvement in BPP Institute’s alumni network, information relating to your registration for or attendance at any BPP Institute hosted/advertised events, information relating to allegations of academic misconduct or other matters of discipline/student conduct, information relating to any fitness to practice or fitness to study proceedings, information relating to any application for extenuating circumstances or an academic appeal, any application for deferrals or interruption of studies and any complaints made by you or about you to BPP Institute.
• Technical Data: including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
• Transaction Data: including details about payments to and from you and other details of products and services you have purchased from us.
• Usage Data: including information about your visit to our Website including the Uniform Resource Locators (URL) clickstream to, through and from the Websites or apps (including date and time), products and/or services you viewed or searched for, page response times, download errors, lengths of visits to certain pages, page interaction information (such as scrolling, clicks and mouseovers) and methods used to browse away from the page and any phone number used to call our customer services numbers.

We may also aggregate or anonymize your personal information, such that it can no longer be used to identify you, and use such aggregated and anonymised data for any purpose. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature.

How We Use Your Personal Information

We generally use your personal information for the following purposes:

• to respond to enquiries or requests for information
• to register/enrol you as a student with BPP Institute
• to assess your eligibility to be enrolled onto a particular course or programme with BPP
• to review and process any application you make for a position or post within BPP Institute, including to create a student club or society, or become a member of such club or society, or to be a student mentor
• to deliver the course or programme to you (including the delivery of events), including to provide reasonable adjustments to students with disabilities and to provide learning support to students who have learning needs
• to carry out equal opportunities monitoring and reporting
• to manage payments, fees and charges; collect and recover money owed to us; keep records for audit/accounting purposes; and defend any legal claims brought against BPP Institute
• to participate in surveys or similar research and analysis exercises undertaken by governmental or other agencies
• to manage our relationship with you which will include notifying you about changes to our terms or policies; asking you to provide a review or take a feedback survey
• to enable you to partake in a prize draw, competition or complete a survey/review
• to administer and protect our business and our Website or apps (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)
• to use data analytics to improve our Website or apps, products/services, marketing, student/ customer/client relationships and experiences
• to monitor the security and safety of our premises
• for such other purposes as you may consent to from time to time; and
• as otherwise required or permitted by law.

 How your personal data is collected

We use different methods to collect data from and about you including through:

• Direct interactions. You may give us your Identity, Contact, Eligibility, Employment, Financial and Marketing and Communications Data by filling in forms or by corresponding with us by post, phone, email, in person or otherwise. This includes personal data you provide when you:

a.       apply for a course or programme;

b.      submit an online query or request a call back;

c.       purchase goods or Services from us;

d.      speak with one of our student advice or admissions teams;

e.       speak with one of our client or supplier services teams;

f.        speak with your tutor or other teaching staff;

g.       make a room (or desk) booking at one of our premises

h.      sign in to a BPP centre or other venue (such as an exam/assessment centre);

i.        create an account on our Website;

j.        download and use any BPP app (including the Hub app);

k.       subscribe to a service or publication;

l.        subscribe, register, take part in or view any BPP Institute webinar or other distance learning session;

m.     are captured on closed circuit television when attending our premises;

n.      request marketing to be sent to you;

o.      enter a competition, promotion or complete a survey;

p.      give us feedback; or

q.      speak to us via our Website Chat Bot.

• Through your Studies. You may give us your Student Data throughout your time on a course or programme. This includes personal data you provide when you:

a.       attend lectures, seminars, webinars or other learning sessions (including where these are online);

b.      submit work for assessment (including mocks);

c.       take exams or other forms of assessment (including mocks);

d.      submit any applications or complaints relating to your studies (for example, extenuating circumstances applications);

e.       raise any issues or questions with your lecturer / personal tutor; or

f.        contact one of our student advice teams for support (including Learning Support).

• Automated technologies or interactions. As you interact with our Website or apps, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. Please see our cookie policy for further details.

• Third parties.

We may receive personal data about you from third parties, including international recruitment agents who assist BPP Institute in recruiting students and supporting students in submitting applications for courses or programmes.

How We Disclose Your Personal Information

We generally identify to whom, and for what purposes, we will disclose your personal information (and we obtain your consent to such disclosure) at the time we collect your personal information.

We may disclose your information when we believe such disclosure is required or permitted by law. In addition, we may disclose your personal information to a third party in the event of any significant business transaction, such as a merger or reorganisation.

Our Use of Service Providers

We may rely on service providers to perform a variety of services on our behalf, such as payment card processing, technical support, and data storage and processing service providers. Where we use such services those providers are bound by contractual obligations consistent with the APPs.

Your Consent

We may collect, use, and disclose your personal information with your consent. How we obtain your consent, including whether it is express or implied, will depend on the circumstances and the sensitivity of the personal information in question. Generally, we will seek your consent at the time we collect your personal information, either orally, electronically, or in writing.

If you provide personal information about another individual to us, it is your responsibility to obtain the consent of that individual to enable us to collect, use and disclose their information as described in this Privacy Statement.

If you wish to withdraw your consent to our collection, use or disclosure of your personal information, please contact us using the contact information in the “How to Contact Us” section below. We will accommodate your request to withdraw consent, subject to legal or contractual restrictions. Withdrawal of your consent may mean that we will no longer be able to provide you with certain products or services.

In certain circumstances, we may collect, use, and disclose your personal information without your consent to the extent permitted or required by law.

Our Use of Cookies   

A “cookie” is a small text file that contains information and is stored on your computer. We generally use cookies and similar tracking technologies, such as web beacons and pixels, to automatically collect information about your use of our website and your interaction with our emails. Information we collect may include your IP address (or proxy server), device and application identification numbers, location, browser type, internet service provider and/or mobile carrier, pages and files viewed, searches, operating system and system configuration information, and date/time stamps associated with your usage.

We may use this information to facilitate the use of our website, for our business or analytical purposes (including to assess website traffic and track search criteria), and to personalise web pages according to your choices and interests.

If you do not wish to accept cookies, you can adjust your web browser settings so that you automatically deny the storage of cookies or are informed each time a website requests to store a cookie.Previously stored cookies can also be deleted through your web browser.

Opting Out of Marketing Communications

We may contact you from time to time with information about our courses, programmes, and services.

If you no longer wish to receive marketing communications from us, you can opt-out at any time by replying to any marketing email you receive from us with the word “UNSUBSCRIBE” in the subject line or body of your reply.

Please note that even if you opt out of marketing communications, we may still need to send you important communications relating to your enrolment, studies, fees, or other matters arising from your relationship with BPP Institute.

Retention, Storage, and International Transfer of Personal Information

We generally will retain your personal information for as long as necessary to fulfill the purposes for which we collected it, and for a longer period when permitted or required by law. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

We may transfer your personal information outside Australia to fulfill the purpose for which we collected it, including for processing and storage by service providers. While your personal information is outside of Australia, it is subject to the laws of the country in which it is located, which may have different data protection laws than Australia. Those laws may require disclosure of your personal information to authorities in that country. For more information about our policies and practices regarding service providers outside of Australia, contact us using at operations@cic.vic.edu.au.

Information Security

We have implemented physical, organisational, contractual, and technological security measures in an effort to protect your personal information from loss or theft, unauthorized access, use, or disclosure.

Despite these measures, we cannot guarantee that our safeguards will always be effective. A breach of security safeguards can result in risks such as phishing and identity theft. We will address such breaches as required by law.

Your personal data may be held on the IT system of BPP Institute, BPP Education Group companies (e.g. for the purpose of providing training or educational services to you) and/or on the IT system of another third party company (within or outside of BPP) within or outside the UK or Australia which is providing IT hosting or other data processing services, in accordance with BPP’s arrangement in place with that company.

We may also require that you assist us in safeguarding your personal information. For example, if you create an account through our website or applications, you should use a unique and strong password and not share your password with others.

If you have reason to believe that your personal information is no longer secure, please contact us immediately at operations@cic.vic.edu.au.

Accessing and Updating Your Personal Information

We take reasonable steps to ensure that the personal information we hold about you is accurate, up to date, and complete. We encourage you to contact us if your personal information changes so that we can update our records. You also have the right to request correction of your personal information at any time as set out below.

You may also challenge the accuracy or completeness of your personal information in our records. If you demonstrate that your personal information in our records is inaccurate, incomplete or equivocal, we will amend or delete your personal information as required.
We may transmit the amended information to third parties to whom we have disclosed your personal information.

We may ask you to verify your identity before we process your request, to a degree that is proportionate to the sensitivity of the information involved.

Third-Party Websites and Services

We may provide links to third-party websites for your convenience and information. We may also make opportunities available to you to purchase, subscribe to, or use other products or services from third parties with different privacy practices. Those other websites, products, or services are governed by the privacy statements and policies of the respective third party. This Privacy Statement does not extend to any websites, products, or services provided by third parties. We do not assume responsibility for the privacy practices of third parties not acting on our behalf and we encourage you to review all third-party privacy statements prior to using third-party websites, products, or services.

International transfers

As set out in this Policy, we share your personal data within the Lyceum Education Group, headquarted in the UK (via BPP Holdings Limited). Such transfers are governed by an intra-group data sharing agreement which requires Lyceum to handle your personal information to the standard required by the UK GDPR, which we consider provides a comparable level of protection to the Australian Privacy Principles.

We may also share your personal data with suppliers of IT services (including Lyceum’s IT support and third-party software and learning platform providers).  Therefore, we will transfer some of your data outside Australia.

The Websites, apps and/or any products and/or Services may be hosted on servers located outside of Australia and maintenance and support services for the Websites, apps and/or those products and/or Services may be provided from outside Australia. This means that your personal data may be transferred to, stored and processed in other countries apart from Australia, particularly with Lyceum Education Group IT services (via our holding company BPP Holdings Limited) for the purposes of online Library access, Finance administration, Salesforce CRM, which are hosted in the UK.

We use Salesforce as our customer relationship management (CRM) platform to manage and support our recruitment and admissions, and related administrative processes. As we are part of a company group that is based in the UK, personal information processed through Salesforce is hosted in the UK and is subject to appropriate technical and organisational measures designed to protect personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR). 

Dubai Office Branch

We have an office branch located in Dubai which houses our international recruitment team; however, this office operates as part of BPP University Limited, a UK-based company. If you are an international student your data will be processed by BPP University Limited which has a Dubai office. All data processing and handling are conducted in accordance with UK data protection laws, including the UK GDPR and the Federal Law No. 45 of 2021 on protection of Personal Data . Any personal data collected by our Dubai office is processed under the same stringent security and compliance measures as our UK operations.

Study Tools

Through the course of your studies you may also be directed to use third party platforms including Moodle, Turnitin, Microsoft Co-pilot, Salesforce, MS SQL Server, MS Power BI Desktop, Anaconda Jupiter, Google Charts, AWS Academy, CISCO Academy, PyCharm, Python Editor. We do not control these third-party platforms and are not responsible for their privacy policies or responsible for personal information which may be transferred by you to such third parties. When using these platforms, we encourage you to read their terms of use and privacy policy.

Changes to this Privacy Statement

The Privacy Statement was last revised as of the date that appears at the top of this page. To review a summary of recent changes, click here.

From time to time, we may make changes to this Privacy Statement. When changes are made, they will become immediately effective when published in a revised Privacy Statement posted on our website, unless otherwise noted. We may also communicate the changes to this Privacy Statement by other means.

How to Contact Us

All comments, questions, concerns, or complaints regarding your personal information or our privacy practices should be forwarded to our Privacy Officer at operations@cic.vic.edu.au. For complaints regarding the use of your personal data, please make these in writing to operations@cic.vic.edu.au and we will endeavour to respond within 30 days.

If you are unhappy with our resolution of your complaint you have the right to make a complaint to the Office of the Australian Information Commissioner (‘OAIC’), the Australian regulator  https://www.oaic.gov.au/. We would, however, appreciate the chance to deal with your concerns before you approach the OAIC (or other relevant authority) so please contact us in the first instance.