Privacy Policy

Updated 10 November 2026

This policy explains how Harness Energy handles personal information. It covers everyone we deal with: people who enquire with us, students, job candidates, apprentices and trainees, the people we work with at client and host businesses, and visitors to harnessenergy.com.au.

Harness Energy is made up of three Australian companies, and this policy applies to each of them:

  • Harness Energy Services Pty Ltd (ABN 15 118 432 741), which is the registered training organisation, RTO 40521
  • Harness Training Pty Ltd (ABN 42 158 001 346)
  • Harness Group Pty Ltd (ABN 40 158 001 337)

In this policy, “Harness”, “we”, “us” and “our” mean all three. We operate through three business units: Labour Hire & Recruitment, Courses & Qualifications, and Apprentices & Trainees (GTO), our Group Training Organisation. The policy also covers enquiries about our training in Papua New Guinea that come to us through this website.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles in it.

If you enrol in nationally recognised training with us, our VET Information Standard Privacy Notice also applies. It explains what we are required by law to report about your enrolment, and to whom. You can read it on our Important Course Information page.

What Personal Information We Collect

We collect only what we need for the reason you are dealing with us. What that is depends on who you are.

  • If you enquire with us: your name, email address, mobile number, the company you work for, what you are enquiring about, and details you choose to give us, such as the course you are interested in, your nearest training centre, the industry you work in or where a role is based
  • If you book or enrol in training: the information needed to enrol you and to meet national vocational education and training (VET) reporting requirements, including your Unique Student Identifier (USI), and records of your training, assessment and results
  • If you apply for work, an apprenticeship or a traineeship: your name, contact details, the industries you would like to work in, your experience and licences, and your CV and anything else you send us
  • If you work for a client or host business: your name, role, work contact details and the dealings we have with you
  • If you visit our website: information about your visit, such as your IP address, the device and browser you use, the pages you view and how you arrived (the next section explains how this is collected)

Sometimes we need sensitive information, such as health or disability details, for training, employment or learner support, for example to understand your language, literacy and numeracy support needs. We collect it only with your consent or where the law allows.

You can generally deal with us without identifying yourself, for example when you ask a general question by phone. We cannot enrol you, place you in work or respond to an enquiry without your contact details.

How We Collect and Hold It

We collect most personal information from you directly: through forms on our website, when you book or enrol, by phone and email, and in person. Sometimes we collect it from someone else, such as an employer who books training for their staff, a host business, or a funding body that refers you to us.

We hold it in the business systems we use to run Harness:

  • HubSpot, our customer database, for enquiries, contacts and marketing
  • aXcelerate, our student management system, for bookings, enrolments, results and certificates
  • JobAdder, for job candidates and placements
  • Xero, for financial records
  • Microsoft 365, for email and files

Our Website

Our website uses cookies and similar tools that collect information about your visit:

  • HubSpot records the pages you visit. If you later submit one of our forms, it links your earlier visits to your contact record
  • Google Tag Manager and Google Analytics help us understand how visitors use the site
  • Hotjar shows us how visitors use our pages, so we can improve them
  • The Meta (Facebook) pixel tells Meta when someone visits our site, so we can measure our Facebook and Instagram advertising
  • Google reCAPTCHA and Cloudflare Turnstile protect our forms from spam. They check information about your device and browser, which is sent to Google or Cloudflare
  • Wordfence protects the website from attack and records the IP addresses of visitors

When you first visit, a cookie banner lets you choose whether to accept cookies. You can also block or delete cookies in your browser settings, although some parts of the site may not work as intended.

Why We Use It

We use personal information to:

  • Respond to enquiries and send confirmations about them
  • Book, enrol and train students, assess them, issue certificates and keep training records
  • Recruit and place workers, apprentices and trainees, and work with the businesses that host them
  • Manage our relationships with clients, and invoice and receive payment
  • Meet our legal and regulatory obligations, including as a registered training organisation
  • Apply for and report on government and industry funding for training
  • Send marketing you have agreed to receive, as explained below
  • Run, protect and improve our website and services

We use your information only for the purpose we collected it for, for a related purpose you would reasonably expect, or as the law allows.

Who We Share It With

We share personal information only where it is needed for the purpose we collected it, where you agree, or where the law requires or allows it. Depending on how you deal with us, we may share it with:

  • The National Centre for Vocational Education Research (NCVER), state training authorities and other government bodies, as our VET Information Standard Privacy Notice explains
  • Government and industry bodies that fund your training
  • Businesses that host our apprentices and trainees, and clients we may place you with, if you are a candidate
  • The service providers whose systems we use, named in the section above, who may handle your information only to provide their service to us
  • Regulators, courts and law enforcement agencies, where the law requires it

Storage Outside Australia

Some of the service providers we use store information outside Australia. HubSpot, our customer database, stores it in the United States. Information collected by Google reCAPTCHA and our website tools is sent to the companies that provide them, which may store it overseas.

When we use an overseas provider, we take reasonable steps to make sure it handles your information in line with the Australian Privacy Principles.

Marketing

We send marketing email only where we have your consent. You give it by ticking a box on one of our forms or by asking us to keep you informed. Where you arrange training for your workplace, we may also send you information about training and funding we reasonably expect you would want.

You choose what you receive: our newsletter, course updates and offers, refresher and renewal reminders, or funding news. Every marketing email identifies Harness and has an unsubscribe link, and we act on an unsubscribe within five working days. You can also tell us at any time that you no longer want to hear from us.

Emails about an enquiry or application you have made with us are not marketing, and we send them so you know we have received it.

Security and Retention

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, change or disclosure.

We keep personal information for as long as we need it for the purpose we collected it, or for as long as the law requires. Some training records must be kept for many years under national VET rules. When we no longer need information, we destroy it or remove anything that identifies you.

If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the law requires.

Access and Correction

You can ask for a copy of the personal information we hold about you, and ask us to correct anything that is wrong, out of date or incomplete. Contact us using the details at the end of this policy.

We will confirm who you are before we act, and respond within 30 days. There is no charge to make a request or to correct your information. If giving you access takes significant work, we may charge a reasonable fee for it, and we will tell you before we do.

If we cannot give you access or make a correction, for example because the law prevents it, we will tell you why in writing and how to complain.

Complaints

If you think we have mishandled your personal information, please tell us using the contact details below. Our Privacy Officer will acknowledge your complaint within five working days, look into it, and give you a written response within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner, which handles privacy complaints.

Automated Decisions

Some of the systems we use, such as our recruitment system, include artificial intelligence (AI) features that summarise the information we hold about you for our staff. These features do not make decisions about you.

Contact Us

For any question, request or complaint about privacy, contact our Privacy Officer:

Changes to This Policy

We review this policy when our practices change and publish the updated version here. This version was last updated on 10 November 2026.