Privacy Policy.

Last updated: May 2026 · IECA International Education · Brisbane, Australia

At IECA International Education we are committed to protecting your personal information. This policy explains what data we collect, how we use it and what rights you have over it, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as the GDPR for students from the European Union.

1. Who are we?

IECA International Education is an international education agency based in Brisbane, Australia. We act as intermediaries between students and educational institutions in Australia and Dubai.

Contact: info@iecaeducation.com · WhatsApp: +61 470 473 525

2. Data we collect

A) When you complete the contact form

• Full name
• Email address
• WhatsApp / phone number
• Country of residence
• Program of interest and estimated travel date
• Free message (what you write)

B) When you use the website chat

Conversations with the virtual assistant are processed in real time by Google Gemini AI. We do not store chat history on our servers. Google may process the text according to its privacy policy.

C) Student portal

If you are an active student with access to the portal, we store:

• Profile data: name, WhatsApp, country of origin, date of birth
• Passport data: number and expiry date
• Academic information: program, institution, city, start date
• Visa process documents (files you upload yourself)
• Status of IECA service payments

3. How we use your data

• To respond to and advise you on educational programs in Australia/Dubai
• To coordinate your admission process with institutions
• To support you during the visa process (subclass 500 or other)
• To communicate with you about the status of your process
• To comply with legal and regulatory obligations

We do not sell or rent your personal information to third parties.

4. Who we share your data with

5. Information security

We implement the following technical security measures:

• Encrypted transmission (HTTPS/TLS) throughout the site
• Row Level Security (RLS) in the portal database — each student only accesses their own data
• Authentication via magic link to verified email
• Portal documents stored in a private bucket (no public access)
• Administrative access protected by password with session expiry
• HTTP security headers (CSP, HSTS, X-Frame-Options) across the entire site

6. Data retention

• Form leads: retained in our CRM while relevant for active advice. You can request deletion at any time.
• Student portal: data is retained for the duration of the educational process and up to 2 years after for post-arrival support purposes.
• Chat conversations: not stored on our servers.

7. Your rights

Under the Australian Privacy Principles and the GDPR (where applicable), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or outdated information
• Delete your data (right to be forgotten), unless we are legally required to retain it
• Withdraw consent for marketing communications
• Data portability in a readable format

To exercise these rights, write to us at info@iecaeducation.com. We will respond within 30 days.

8. Cookies

The public website does not use tracking or advertising cookies. The student portal uses strictly necessary session cookies to maintain your active authentication. We do not use Google Analytics at this stage.

9. International data transfers

Your data may be processed on servers located in the United States (Google, Netlify, Supabase). These providers comply with internationally recognised protection standards. If you have questions about specific transfers, please contact us.

10. Minors

Our services are aimed at people over 18 years of age. If a minor uses our services, consent is given by their legal guardian, who is also responsible for the accuracy of the information provided.

11. Changes to this policy

We may update this policy periodically. We will publish the most recent version on this page with the update date. For significant changes, we will notify active students by email.

12. Contact and complaints

If you have questions about this policy or wish to lodge a complaint:

If your complaint is not resolved satisfactorily, you may contact the Office of the Australian Information Commissioner (OAIC).